Apparatus and method for analyzing a network

1. An apparatus for analyzing a network flow, the apparatus comprising:

a parser configured to extract flow identification information from the network flow;

a flow metering unit configured to extract flow status information from the network flow; and

a programmable controller configured as a state machine and to control in parallel the parser and the flow metering unit by:

sending parsing instructions to the parser in response to receiving the flow identification information from the parser, and

sending metering instructions to the flow metering unit in response to receiving the flow identification information from the flow metering unit,

the state machine comprising a transition rule memory, a rule selector, and a state register,

wherein the rule selector is configured to receive an external input signal and receive an internal input signal from the state register indicating a current state, and

wherein the rule selector is configured to:

observe the internal and external input signals in accordance with transition rules of the transition rule memory,

change a state of the state register based on the observation of the transition rules, and

generate an output signal to the flow metering unit based on the state of the state register, wherein the output signal includes the parsing instructions and the metering instructions.

2. The apparatus according to claim 1 , wherein the programmable controller is configured to:

evaluate in parallel two or more flow status information values of the flow metering unit; and

send two or more metering instructions corresponding to the two or more flow status information values in parallel to the flow metering unit.

3. The apparatus according to claim 1 , wherein the programmable controller comprises a program memory configured to store two or more flow metering programs.

4. The apparatus according to claim 1 , wherein the flow metering unit comprises:

a flow table unit;

a flow table management unit; and

a flow information export unit.

5. The apparatus according to claim 4 , wherein the flow table management unit comprises a programmable hash function unit provided with two or more selectable hash functions for mapping the flow identification information on a hash index,

wherein the programmable controller is configured to select one of the two or more selectable hash functions.

6. The apparatus according to claim 4 , wherein the programmable controller is configured to send table management commands to the table management unit.

7. The apparatus according to claim 1 , wherein the network flow is between at least two virtual computing systems.

8. The apparatus according to claim 7 , wherein the apparatus is in communication with a software networking device configured to manage the network flow between the at least two virtual computing systems; and

wherein the apparatus receives the network flow from the software networking device.

9. A system, the system comprising:

a programmable controller, which analyzes a plurality of network flows, configured to:

receive parser information from a parser and flow status information from a flow metering unit corresponding to at least one of the plurality of network flows;

control an extraction of flow identification information from the at least one of the plurality of network flows by the parser in response to the received parser information; and

control a metering of the at least one of the plurality of network flows by the flow metering unit in response to the flow status information,

wherein the programmable controller includes a transition rule memory, a rule selector, and a state register,

wherein the rule selector is configured to receive an external input signal and an internal input signal,

wherein the external input signal includes the parser information from the parser and the flow status information from the flow metering unit,

wherein the internal input signal is from the state register and indicates a current state, and

wherein the rule selector is configured to:

analyze the internal input signal and the external input signal in accordance with transition rules of the transition rule memory; and

generate an output signal to the flow metering unit based on the analysis of the internal input signal and the external input signal,

wherein the output signal includes the parsing instructions and the metering instructions.

10. The system of claim 9 , further comprising:

at least two virtual computing systems configured to communicate via the at least one of the plurality of network flows; and

a software networking device in communication with the system and configured to manage the at least one of the plurality of network flows,

wherein the system receives the network flow from the software networking device.

11. The system of claim 9 , further comprising:

an external device;

at least one virtual computing system configured to communicate with the external device via the at least one of the plurality of network flows; and

a hardware networking device in communication with the system and configured to manage the at least one of the plurality of network flows,

wherein the system receives the network flow from the hardware networking device.

12. The system of claim 9 , wherein the programmable controller is configured to:

configure the parser and the flow metering unit to handle multiple types of data within the plurality of network flows.

13. A method for analyzing a plurality of network flows, comprising:

receiving, by a programmable controller, parser information from a parser and flow status information from a flow metering unit corresponding to at least one of the plurality of network flows;

controlling, by the programmable controller, an extraction of flow identification information from the at least one of the plurality of network flows by the parser in response to the received parser information; and

controlling, by the programmable controller, a metering of the at least one of the plurality of network flows by the flow metering unit in response to the flow status information, the programmable controller including a transition rule memory, a rule selector, and a state register,

receiving, by the rule selector, an external input signal including the parser information from the parser and the flow status information from the flow metering unit; and

receiving, by the rule selector, an internal input signal from the state register indicating a current state,

analyzing, by the rule selector, the internal input signal and the external input signal in accordance with transition rules of the transition rule memory; and

generating, by the rule selector, an output signal to the flow metering unit based on the analysis of the internal input signal and the external input signal, the output signal including the parsing instructions and the metering instructions.

14. The method of claim 13 , further comprising:

configuring, by the programmable controller, the parser and the flow metering unit to handle multiple types of data within the plurality of network flows.