IP Library Granted Patent US 8,645,567
Granted Patent B2
US 8,645,567 · App. 12/575,300 · Granted Feb 4, 2014

Method and system for packet filtering for local host-management controller pass-through communication via network controller

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,645,567
App. No.
12/575,300
Granted
Feb 4, 2014
Kind
B2
Abstract

A network controller in a communication device may be operable to provide pass-through communication of local host-management traffic between a local host and a management controller within the communication device, wherein the local host may be operable to utilize its network processing resources during communication of the local host-management traffic. The network controller may use packet filtering to provide the pass-through communication, wherein the network controller may utilize a plurality filtering rules during filtering of packets received in the network controller. The filtering rules may specify packet processing and/or forwarding actions by said network controller based on one or more specified conditions. The specified conditions may based on one or more match criteria; wherein the match criteria comprising source address, destination address, and/or traffic type data in the received packets. Address learning mechanisms may be used in the network controller to enable configuring and/or performing packet filtering transparently.

Claims (37)

1. A method for device management, the method comprising:

in a network device comprising a local host, a management controller and a network controller:

providing via said network controller, pass-through communication of local host-management traffic within said network device, between said local host and said management controller; and

filtering packets received via said network controller during said pass-through communication to determine whether to forward any of said received packets to at least one of: said local host or said management controller, wherein said filtering is performed utilizing one or more of a plurality of filters within said network controller, wherein a first filter among the plurality of filters corresponds to external network packets, a second filter corresponds to packets originating from said management controller, and a third filter corresponds to packets originating from said local host.

2. The method according to claim 1 , comprising performing said packet filtering based on one or more packet fields in said received packets.

3. The method according to claim 2 , comprising configuring said network controller to perform said filtering of received packets based on filtering rules applied by said plurality of filters.

4. The method according to claim 3 , wherein said filtering rules specify forwarding operations by said network controller based on one or more specified conditions.

5. The method according to claim 4 , wherein said specified conditions are based on one or more match criteria; wherein said match criteria comprises at least one of: source address, destination address, or traffic type data.

6. The method according to claim 5 , wherein said traffic type comprises unicast, multicast, broadcast, and/or virtual local area network (VLAN) based traffic.

7. The method according to claim 1 , comprising communicating said local host-management traffic between said network controller and said management controller via a Network Controller Sideband Interface (NC-SI) link.

8. The method according to claim 1 , comprising utilizing one or more routing learning mechanisms via said network controller to enable performing said packet filtering in said network controller independent of at least one of: said local host or said management controller.

9. The method according to claim 8 , wherein at least some of said one or more routing learning mechanisms enable at least one of: generating, maintaining, or updating MAC address matching data via said network controller.

10. A system for processing communication signals, the system comprising:

one or more circuits for use in a network device, said network device comprising a local host, a management controller and a network controller, wherein said one or more circuits are operable to provide via said network controller, pass-through communication of local host-management traffic within said network device, between said local host and said management controller;

a host-management link coupled between said local host and said management controller for communicating management related data directly between said local host and said management controller; and

said one or more circuits are operable to filter packets received via said network controller during said pass-through communication to determine whether to forward any of said received packets to at least one of: said local host or said management controller.

11. The system according to claim 10 , wherein said one or more circuits are operable to perform said packet filtering based on one or more packet fields in said received packets.

12. The system according to claim 11 , wherein said one or more circuits are operable to configure said network controller to perform said filtering of received packets based on filtering rules.

13. The system according to claim 12 , wherein said filtering rules specify forwarding operations by said network controller based on one or more specified conditions.

14. The system according to claim 13 , wherein said specified conditions are based on one or more match criteria; said match criteria comprising source address, destination address, and/or traffic type data.

15. The system according to claim 14 , wherein said traffic type comprises unicast, multicast, broadcast, and/or virtual local area network (VLAN) based traffic.

16. The system according to claim 10 , wherein said one or more circuits are operable to communicate said local host-management traffic between said network controller and said management controller via a Network Controller Sideband Interface (NC-SI) link.

17. The system according to claim 10 , wherein said one or more circuits are operable to utilize one or more routing learning mechanisms via said network controller to enable performing said packet filtering in said network controller independent of said local host and/or said management controller.

18. The system according to claim 17 , wherein at least some of said one or more routing learning mechanisms enable generating, maintaining, and/or updating MAC address matching data via said network controller.

19. A system, comprising:

a network interface controller (NIC) for use in a network device, said network interface controller (NIC) comprising:

a plurality of interfacing components that comprise:

a first interfacing component for communicating network traffic external to said network device;

a second interfacing component for interacting with a management subsystem in said network device; and

a third interfacing component for interacting with a host subsystem in said network device;

a plurality of filtering components for routing traffic packets received by said NIC via one of said plurality of interfacing components, through another one of said plurality of interfacing components, wherein said routing comprises forwarding traffic communicated between said host subsystem and said management subsystem, wherein a first filtering component among the filtering components corresponds to external network packets, a second filtering component corresponds to packets originating from said second interfacing component, and a third filtering component corresponds to packets originating from said third interfacing component; and

a filtering management component for configuring operations of said plurality of filtering components.

20. The system of claim 19 , wherein said filtering management component is operable to configure said plurality of filtering components based on filtering rules that specify forwarding based on one or more match conditions that comprise at least one of: source address, destination address, or traffic type data.

21. The method according to claim 1 , wherein said plurality of filters comprises:

an inbound network packet filter configured to filter inbound packets received from external network links;

an outbound management packet filter configured to filter outbound packets communicated via said management controller; and

an outbound host packet filter configured to filter outbound packets communicated via said local host.

Assignments (7)
CORRECTIVE ASSIGNMENT TO CORRECT THE ERROR IN RECORDING THE MERGER IN THE INCORRECT US PATENT NO. 8,876,094 PREVIOUSLY RECORDED ON REEL 047351 FRAME 0384. ASSIGNOR(S) HEREBY CONFIRMS THE MERGER. Recorded Mar 8, 2019
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 049248/0558 →
CORRECTIVE ASSIGNMENT TO CORRECT THE EFFECTIVE DATE OF THE MERGER PREVIOUSLY RECORDED AT REEL: 047230 FRAME: 0910. ASSIGNOR(S) HEREBY CONFIRMS THE MERGER. Recorded Oct 29, 2018
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 047351/0384 →
MERGER Recorded Oct 4, 2018
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 047230/0910 →
TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS Recorded Feb 3, 2017
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: BROADCOM CORPORATION
Reel/Frame 041712/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 1, 2017
From: BROADCOM CORPORATION
To: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
Reel/Frame 041706/0001 →
PATENT SECURITY AGREEMENT Recorded Feb 11, 2016
From: BROADCOM CORPORATION
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 037806/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 27, 2009
From: SHAH, HEMAL; MCDANIEL, SCOTT; ROY, PROTIP; SHALOM, RAFI; SHARP, TIM; LINDSAY, STEVE
To: BROADACOM CORPORATION
Reel/Frame 023431/0216 →