Granted Patent B2

US 8,964,748 · App. 12/475,450 · Granted Feb 24, 2015

Abstract

Claims (52)

1. A method for performing flow compilation packet processing, the method comprising:

receiving a packet at a packet processing device;

constructing a flow key for the received packet using at least a portion of packet header data of the received packet;

comparing the constructed flow key with a plurality of previously constructed flow keys associated with packet flows previously processed at the packet processing device in order to determine if the received packet is associated with one of the packet flows previously processed at the packet processing device;

if the received packet is determined not be associated with one of the packet flows, querying a policy database to identify a packet processing activity to be applied to the received packet, compiling a flow program that applies the packet processing activity to the packet, and using the flow key to store the compiled flow program in a flow program database in the packet processing device;

if the received packet is determined to be associated with one of the previously processed packet flows, using the flow key to query the flow program database containing compiled flow programs to locate the compiled flow program previously used to process the one of the previously processed packet flows in a manner that bypasses the use of the policy database and utilizing the located compiled flow program to process the received packet.

2. The method of claim 1 wherein utilizing the flow key includes determining if the flow key of the received packet matches a flow key of the at least one other packet, wherein the flow key of the at least one other packet is an entry in a flow key record database.

3. The method of claim 2 wherein if the packet is determined not to be associated with the at least one other packet previously processed at the packet processing device, determining a program to be applied to the received packet, compiling the program, associating the compiled program with the flow key, storing the flow key and the compiled program in a flow program database.

4. The method of claim 1 wherein constructing the flow key includes concatenating portions of the packet header data.

5. The method of claim 4 wherein the packet header data includes bits stored in an IP source address field, an IP destination address, an IP protocol field, a source port number field, and a destination port number field.

6. A method for performing flow compilation packet processing, the method comprising:

receiving a packet at a packet processing device;

constructing a flow key for the received packet using at least a portion of packet header data of the received packet;

comparing the constructed flow key with a plurality of previously constructed flow keys associated with packet flows previously processed at the packet processing device in order to determine if the received packet is associated with one of the packet flows previously processed at the packet processing device;

if the received packet is determined not be associated with one of the packet flows, querying a policy database to identify a packet processing activity to be applied to the received packet, compiling a flow program that applies the packet processing activity to the packet, and using the flow key to store the compiled flow program in a flow program database in the packet processing device;

if the received packet is determined to be associated with one of the previously processed packet flows, using the flow key to query the flow program database containing compiled flow programs to locate the compiled flow program previously used to process the one of the previously processed packet flows in a manner that bypasses the use of the policy database and utilizing the located compiled flow program to process the received packet, wherein a hash function is used to convert the flow key into a hash index to be used to query a hash table database.

7. The method of claim 6 wherein the hash function utilizes a cyclic redundancy check (CRC) algorithm.

8. A method for performing flow compilation packet processing, the method comprising:

receiving a packet at a packet processing device;

constructing a flow key for the received packet using at least a portion of packet header data of the received packet;

comparing the constructed flow key with a plurality of previously constructed flow keys associated with packet flows previously processed at the packet processing device in order to determine if the received packet is associated with one of the packet flows previously processed at the packet processing device;

if the received packet is determined not be associated with one of the packet flows, querying a policy database to identify a packet processing activity to be applied to the received packet, compiling a flow program that applies the packet processing activity to the packet, and using the flow key to store the compiled flow program in a flow program database in the packet processing device;

if the received packet is determined to be associated with one of the previously processed packet flows, using the flow key to query the flow program database containing compiled flow programs to locate the compiled flow program previously used to process the one of the previously processed packet flows in a manner that bypasses the use of the policy database and utilizing the located compiled flow program to process the received packet, wherein querying the flow program database is conducted without accessing a packet processing database.

9. A packet processing device for performing flow compilation packet processing, the packet processing device comprising:

a flow manager module for receiving a packet;

a control processor for:

constructing a flow key for the received packet by using at least a portion of packet header data of the received packet,

comparing the constructed flow key with a plurality of previously constructed flow keys associated with packet flows previously processed at the packet processing device in order to determine if the received packet is associated with one of the packet flows previously processed at the packet processing device,

querying, if the received packet is determined not be associated with one of the packet flows, a policy database to identify a packet processing activity to be applied to the received packet, compiling a flow program that applies the packet processing activity to the packet, and using the flow key to store the compiled flow program in a flow program database in the packet processing device,

using, if the received packet is determined to be associated with the one of the previously processed packet flows, the flow key to query the flow program database containing compiled flow programs to locate the compiled flow program previously used to process the one of the previously processed packet flows in a manner that bypasses the use of the policy database; and

a packet processing unit for utilizing the located compiled flow program to process the received packet.

10. The packet processing device of claim 9 wherein the control processor is further configured to determine if the flow key of the received packet matches a flow key of the at least one other packet, wherein the flow key of the at least one other packet is an entry in a flow key record database.

11. The packet processing device of claim 10 wherein the control processor is further configured to, if the packet is determined not to be associated with the at least one other packet previously processed at the packet processing device, determine a program to be applied to the received packet, compiling the program, associating the compiled program with the flow key, storing the flow key and the compiled program in a flow program database.

12. The packet processing device of claim 9 wherein the control processor is further configured to construct the flow key by concatenating portions of the packet header data.

13. The packet processing device of claim 12 wherein the packet header data includes at least a portion of an IP source address field, an IP destination address, an IP protocol field, a source port number field, and a destination port number field contained in a header of the received packet.

14. A packet processing device for performing flow compilation packet processing, the packet processing device comprising:

a flow manager module for receiving a packet;

a control processor for:

constructing a flow key for the received packet by using at least a portion of packet header data of the received packet,

comparing the constructed flow key with a plurality of previously constructed flow keys associated with packet flows previously processed at the packet processing device in order to determine if the received packet is associated with one of the packet flows previously processed at the packet processing device; and

querying, if the received packet is determined not be associated with one of the packet flows, a policy database to identify a packet processing activity to be applied to the received packet, compiling a flow program that applies the packet processing activity to the packet, and using the flow key to store the compiled flow program in a flow program database in the packet processing device,

using, if the received packet is determined to be associated with the one of the previously processed packet flows, the flow key to query the flow program database containing compiled flow programs to locate the compiled flow program previously used to process the one of the previously processed packet flows in a manner that bypasses the use of the policy database; and

a packet processing unit for utilizing the located compiled flow program to process the received packet, wherein the control processor is further adapted to utilize a hash function to convert the flow key into a hash index to be used to query a hash table database.

15. The packet processing device of claim 14 wherein the hash function utilizes a cyclic redundancy check (CRC) algorithm.

16. A packet processing device for performing flow compilation packet processing, the packet processing device comprising:

a flow manager module for receiving a packet;

a control processor for:

constructing a flow key for the received packet by using at least a portion of packet header data of the received packet,

comparing the constructed flow key with a plurality of previously constructed flow keys associated with packet flows previously processed at the packet processing device in order to determine if the received packet is associated with one of the packet flows previously processed at the packet processing device; and

querying, if the received packet is determined not be associated with one of the packet flows, a policy database to identify a packet processing activity to be applied to the received packet, compiling a flow program that applies the packet processing activity to the packet, and using the flow key to store the compiled flow program in a flow program database in the packet processing device,

using, if the received packet is determined to be associated with the one of the previously processed packet flows, the flow key to query the flow program database containing compiled flow programs to locate the compiled flow program previously used to process the one of the previously processed packet flows in a manner that bypasses the use of the policy database; and

a packet processing unit for utilizing the located compiled flow program to process the received packet, wherein the control processor is further configured to query the flow program database without accessing a packet processing database.

Assignments (10)