Flow-based network switching system
View Patent ↗A flow-based network switching system includes a memory having a flow table and a packet processor coupled to the memory. The packet processor includes a user-programmable flow-based rule storage that includes a plurality of flow-based rules. A flow-based handler and session manager in the packet processor is operable to retrieve application layer metadata from a first packet received over a network, determine a first flow session associated with the first packet using the application layer metadata from the first packet and the flow table, and retrieve at least one of the plurality of flow-based rules from the programmable flow-based rule storage using the application layer metadata from the first packet. A flow-based rule processing engine in the packet processor is operable to apply the at least one flow-based rule to the first packet. Packets with applied flow-based rules are forwarded through the network.
1. A flow-based network switching system, comprising:
a memory having a flow table that includes a plurality of flow match rules;
a packet processor coupled to the memory, wherein the packet processor includes:
a user-programmable flow-based rule storage that includes a plurality of flow-based rules;
a flow-based handler and session manager that is configured to retrieve transport layer metadata that includes a first transport protocol from a first packet, determine that at least one of the plurality of flow match rules from the flow table is associated with the first transport protocol in the transport layer metadata from the first packet, determine that a first flow session is associated with the first packet, and retrieve at least one of the plurality of flow-based rules from the programmable flow-based rule storage using the first transport protocol in the transport layer metadata from the first packet; and
a flow-based rule processing engine that is configured to apply the at least one flow-based rule to the first packet.
2. The system of claim 1 , wherein the memory further includes:
a queue that is configured to store packets.
3. The system of claim 1 , wherein the flow-based handler and session manager is further configured to:
retrieve transport layer metadata that includes a second transport protocol from a second packet;
determine that at least one of the plurality of flow match rules from the flow table is associated with the second transport protocol in the transport layer metadata from the second packet;
determine that no flow session is available for the second packet; and
create a second flow session that is associated with the second packet.
4. The system of claim 3 , wherein the flow-based handler and session manager is further configured, in response to creating the second flow session, to:
update the memory for the second flow session.
5. The system of claim 1 , wherein the flow-based handler and session manager is further configured to:
retrieve transport layer metadata that includes a second transport protocol from a second packet;
determine that none of the plurality of flow match rules from the flow table is associated with the second transport protocol in the transport layer metadata from the second packet; and
determine that a default rule exists for the second packet, wherein the flow-based rule processing engine is configured to apply the default rule to the second packet.
6. The system of claim 1 , wherein the flow-based handler and session manager is further configured to:
deactivate the first flow session associated with the first packet.
7. The system of claim 1 , wherein the at least one flow-based rule includes at least one of a security rule, a load balancing rule, a traffic shaping rule, a redirection rule, a modification rule, a statistical rule, and a packet header rewrite rule.
8. An information handling system (IHS) network, comprising:
a first IHS that is configured to generate and send a plurality of packets over a network;
a second IHS coupled to the first IHS through the network, wherein the second IHS is configured to:
assemble a first set of packets received from the first IHS;
retrieve transport layer metadata that includes a first transport protocol from each of the first set of packets;
determine that at least one flow match rule is associated with the first transport protocol in the transport layer metadata retrieved from each packet of the first set of packets using;
determine that a first flow session is associated with each packet of the first set of packets; and
retrieve and apply at least one flow-based rule for each packet of the first set of packets using the first transport protocol in the transport layer metadata retrieved from that packet.
9. The IHS of claim 8 , wherein the second IHS further includes:
a memory including:
a flow table for use by the second IHS in determining the first flow session is associated with each packet of the first set of packets using the first transport protocol in the transport layer metadata retrieved from that packet; and
a queue that is configured to store the first set of packets received from the first IHS.
10. The IHS of claim 8 , wherein the second IHS is further configured to:
assemble a second packet received from a third IHS;
retrieve transport layer metadata that includes a second transport protocol from the second packet;
determine that at least one flow match rule is associated with the second transport protocol in the transport layer metadata from the second packet;
determine that no flow session is associated with the second packet; and
create a second flow session that is associated with the second packet.
11. The IHS of claim 10 , wherein the second IHS is further configured, in response to creating the second flow session, to:
update a memory for the second flow session.
12. The IHS of claim 8 , wherein the second IHS is further configured to:
assemble a second packet received from a third IHS;
retrieve transport layer metadata that includes a second transport protocol from the second packet;
determine that no flow match rules are associated with the second transport protocol in the transport layer metadata from the second packet;
retrieve and apply a default rule to the second packet.
13. The IHS of claim 8 , wherein the second IHS is further configured to:
deactivate the first flow session associated with the first set of packets.
14. The IHS of claim 8 , wherein the at least one flow-based rule includes at least one of a security rule, a load balancing rule, a traffic shaping rule, a redirection rule, a modification rule, a statistical rule, and a packet header rewrite rule.
15. A method for network switching, comprising:
assembling a first set of packets received from a first information handling system (IHS) over a network;
retrieving transport layer metadata that includes a first transport protocol from each of the first set of packets;
determining that at least one flow match rule is associated with the first transport protocol in the transport layer metadata retrieved from each packet of the first set of packets using;
determining that a first flow session is associated with each packet of the first set of packets;
retrieving and applying at least one flow-based rule for each packet of the first set of packets using the first transport protocol in the transport layer metadata retrieved from that packet; and
forwarding each packet of the first set of packets.
16. The method of claim 15 , further comprising:
assembling a second packet received from a second IHS;
retrieving transport layer metadata that includes a second transport protocol from the second packet;
determining that at least one flow match rule is associated with the second transport protocol in the transport layer metadata from the second packet;
determining that no flow session is associated with the second packet; and
creating a second flow session that is associated with the second packet.
17. The method of claim 16 , further comprising:
updating a memory for the second flow session.
18. the method of claim 15 , further comprising:
assembling a second packet received from a third IHS;
retrieving transport layer metadata that includes a second transport protocol from the second packet;
determining that no flow-based rules are associated with the second transport protocol in the transport layer metadata from the second packet; and
retrieving and applying a default rule to the second packet.
19. The method of claim 15 , further comprising:
deactivating the first flow session associated with the first set of packets.
20. The method of claim 15 , wherein the at least one flow-based rule includes at least one of a security rule, a load balancing rule, a traffic shaping rule, a redirection rule, a modification rule, a statistical rule, and a packet header rewrite rule.