Granted Patent B2

US 12,405,895 · App. 18/437,627 · Granted Sep 2, 2025

Inventors: Shay Vargaftik (Herzliya, IL); Alex Markuze (Rosh HaAyin, IL); Yaniv Ben-Itzhak (Herzliya, IL); Igor Golikov (Herzliya, IL); Avishay Yanai (Herzliya, IL)

Assignee: VMware LLC

G06F12/0891G06F13/1668G06F2213/0026G06F2213/3808

Abstract

Claims (43)

1. A system, comprising:

a network interface configured to receive a first data message;

a virtual switch coupled to the network interface;

a memory configured to store a classification cache and a rule set, the classification cache comprising a first cache entry associated with a first timestamp, the rule set comprising a first rule associated with a second timestamp; and

a processor coupled to the memory, the processor being configured to:

determine a match between the first data message and the first cache entry;

in response to the first data message matching the first cache entry, determine a validity of the first cache entry based at least on the rule set; and

in response to the first cache entry being valid, processing the first data message based at least on the first cache entry;

wherein a classification cache is stored with cache entries based on data message processing results, each cache entry including a set of match conditions for data messages belonging to the same data message flow and a set of actions for the smart network interface controller to perform on subsequent data messages belonging to the same data message flow.

2. The system of claim 1 , wherein the virtual switch comprises a software forwarding element (SFE) configured to generate the first cache entry.

3. The system of claim 1 , wherein the processor is further configured to pass the first data message to the virtual switch in response to the first data message not matching the first cache entry.

4. The system of claim 1 , wherein the processor is further configured to determine a relationship between the first rule and the first cache entry.

5. The system of claim 1 , wherein the processor is further configured to compare the first timestamp to the second timestamp.

6. The system of claim 1 , wherein the first timestamp indicates a time the first cache entry was created or a time the first cache entry was last matched.

7. The system of claim 1 , wherein the rule set is updated based at least on an update from a network controller.

8. The system of claim 1 , wherein the processor is further configured to create a second cache entry and delete the first cache entry at a predetermined interval.

9. A system comprising:

a network interface configured to receive a first data message;

a virtual switch coupled to the network interface;

a memory configured to store a classification cache and a rule set, the classification cache comprising a first cache entry, and the rule set comprising a first rule; and

a processor coupled to the memory, the processor being configured to:

determine a match between the first data message and the first cache entry;

in response to the first data message matching the first cache entry, determine a validity of the first cache entry based at least on the rule set; and

in response to the first cache entry being valid, processing the first data message based at least on the first cache entry;

wherein a classification cache is stored with cache entries based on data message processing results, each cache entry including a set of match conditions for data messages belonging to the same data message flow and a set of actions for the smart network interface controller to perform on subsequent data messages belonging to the same data message flow.

10. The system of claim 9 , wherein the virtual switch comprises a software forwarding element (SFE) configured to generate the first cache entry.

11. The system of claim 9 , wherein the processor is further configured to pass the first data message to the virtual switch in response to the first data message not matching the first cache entry.

12. The system of claim 11 , wherein the virtual switch is configured to process the first data message and provide a second cache entry to the processor based on a processing result of the first data message.

13. The system of claim 9 , wherein the processor is further configured to delete the first cache entry at a predetermined interval.

14. The system of claim 9 , wherein the processor comprises a central processing unit (CPU).

15. The system of claim 9 , wherein the processor comprises an application-specific integrated circuit (ASIC).

16. The system of claim 9 , wherein the processor is further configured to determine a relationship between the first rule and the first cache entry.

17. A method, comprising:

receiving a first data message;

determining whether the first data message matches a first cache entry;

in response to the first data message matching the first cache entry, determining whether the first cache entry is valid based at least on a rule set; and

in response to the first cache entry being valid, processing the first data message based at least on the first cache entry;

wherein a classification cache is stored with cache entries based on data message processing results, each cache entry including a set of match conditions for data messages belonging to the same data message flow and a set of actions for the smart network interface controller to perform on subsequent data messages belonging to the same data message flow.

18. The method of claim 17 , wherein:

the first cache entry is associated with a first timestamp; and

the rule set comprises a first rule associated with a second timestamp.

19. The method of claim 18 , further comprising comparing the first timestamp to the second timestamp.

20. The method of claim 18 , wherein the first timestamp indicates a time the first cache entry was created or a time the first cache entry was last matched.

Assignments (2)

Continuity (2)

References Cited (400)