会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 4. 发明授权
    • Method and apparatus for packet classification
    • 分组分类的方法和装置
    • US08879550B2
    • 2014-11-04
    • US13466984
    • 2012-05-08
    • Prashant AnandRamanathan LakshmikanthanSun Den ChenNing Xu
    • Prashant AnandRamanathan LakshmikanthanSun Den ChenNing Xu
    • H04L12/28
    • H04L63/0227H04L45/745H04L47/2441H04L47/2483H04L63/0263H04L63/101H04L63/1408
    • In one aspect, the present invention reduces the amount of low-latency memory needed for rules-based packet classification by representing a packet classification rules database in compressed form. A packet processing rules database, e.g., an ACL database comprising multiple ACEs, is preprocessed to obtain corresponding rule fingerprints. These rule fingerprints are much smaller than the rules and are easily accommodated in on-chip or other low-latency memory that is generally available to the classification engine in limited amounts. The rules database in turn can be stored in off-chip or other higher-latency memory, as initial matching operations involve only the packet key of the subject packet and the fingerprint database. The rules database is accessed for full packet classification only if a tentative match is found between the packet key and an entry in the fingerprint database. Thus, the present invention also advantageously minimizes accesses to the rules database.
    • 一方面,本发明通过以压缩形式表示分组分类规则数据库来减少基于规则的分组分类所需的低延迟存储器的数量。 分组处理规则数据库(例如,包括多个ACE的ACL数据库)被预处理以获得相应的规则指纹。 这些规则指纹比规则小得多,并且容易地被容纳在分类引擎中有限的片上或其他低延迟存储器中。 因为初始匹配操作仅涉及主题分组和指纹数据库的分组密钥,因此规则数据库又可以存储在片外或其他较高延迟的存储器中。 仅当在分组密钥和指纹数据库中的条目之间发现暂时匹配时,才能对完整分组分类进行规则数据库的访问。 因此,本发明还有利地最小化对规则数据库的访问。
    • 5. 发明申请
    • HIERARCHICAL PACKET POLICER
    • 分层分组策略器
    • US20120170452A1
    • 2012-07-05
    • US13239214
    • 2011-09-21
    • Brian AlleyneSun Den ChenRamanathan Lakshmikanthan
    • Brian AlleyneSun Den ChenRamanathan Lakshmikanthan
    • H04L12/56
    • H04L47/31H04L47/20H04L47/215
    • Embodiments of the invention a method for policing a packet at line rate. A hierarchical policer receives a policer request comprising packet characteristics and identifying request configuration information. The hierarchical policer retrieves meter states specified by the request configuration information. The hierarchical policer processes packet characteristics through meters to generate a meter result. The hierarchical policer generates a hierarchical policer table lookup address using a plurality of meter types, a plurality of input color controls, one or more of the packet characteristics, the meter results, and a plurality of coupling algorithm identifiers. The hierarchical policer reads a hierarchical meter result from a hierarchical policer result table, containing at least a final output packet attribute that classifies the packet. The hierarchical policer updates one or more of the meter states based on the plurality of meter state results. The hierarchical policer returns the final packet output to a policing requestor.
    • 本发明的实施例提供了一种以线速度对分组进行管理的方法。 分层策略器接收包含分组特性和识别请求配置信息的策略请求。 分层策略器检索由请求配置信息指定的仪表状态。 分层策略器通过米来处理分组特征,以产生测量结果。 分级策略器使用多个仪表类型,多个输入颜色控制,分组特性中的一个或多个,仪表结果和多个耦合算法标识符来生成分层策略表查找地址。 分层策略器从分层策略器结果表中读取分层计量表结果,其中至少包含对数据包进行分类的最终输出数据包属性。 分层监视器基于多个仪表状态结果来更新仪表状态中的一个或多个。 分层策略器将最终的分组输出返回到管理请求者。
    • 6. 发明授权
    • Hierarchical packet policer
    • 层次分组监管器
    • US08767540B2
    • 2014-07-01
    • US13239214
    • 2011-09-21
    • Brian AlleyneSun Den ChenRamanathan Lakshmikanthan
    • Brian AlleyneSun Den ChenRamanathan Lakshmikanthan
    • G01R31/08G06F11/00G08C15/00H04J1/16H04J3/14H04L1/00H04L12/26
    • H04L47/31H04L47/20H04L47/215
    • Embodiments of the invention a method for policing a packet at line rate. A hierarchical policer receives a policer request comprising packet characteristics and identifying request configuration information. The hierarchical policer retrieves meter states specified by the request configuration information. The hierarchical policer processes packet characteristics through meters to generate a meter result. The hierarchical policer generates a hierarchical policer table lookup address using a plurality of meter types, a plurality of input color controls, one or more of the packet characteristics, the meter results, and a plurality of coupling algorithm identifiers. The hierarchical policer reads a hierarchical meter result from a hierarchical policer result table, containing at least a final output packet attribute that classifies the packet. The hierarchical policer updates one or more of the meter states based on the plurality of meter state results. The hierarchical policer returns the final packet output to a policing requestor.
    • 本发明的实施例提供了一种以线速度对分组进行管理的方法。 分层策略器接收包含分组特性和识别请求配置信息的策略请求。 分层策略器检索由请求配置信息指定的仪表状态。 分层策略器通过米来处理分组特征,以产生测量结果。 分级策略器使用多个仪表类型,多个输入颜色控制,分组特性中的一个或多个,仪表结果和多个耦合算法标识符来生成分层策略表查找地址。 分层策略器从分层策略器结果表中读取分层计量表结果,其中至少包含对数据包进行分类的最终输出数据包属性。 分层监视器基于多个仪表状态结果来更新仪表状态中的一个或多个。 分层策略器将最终的分组输出返回到管理请求者。
    • 7. 发明申请
    • METHOD AND APPARATUS FOR PACKET CLASSIFICATION
    • 分组分类的方法和装置
    • US20130301641A1
    • 2013-11-14
    • US13466984
    • 2012-05-08
    • Prashant AnandRamanathan LakshmikanthanSun Den ChenNing Xu
    • Prashant AnandRamanathan LakshmikanthanSun Den ChenNing Xu
    • H04L12/56
    • H04L63/0227H04L45/745H04L47/2441H04L47/2483H04L63/0263H04L63/101H04L63/1408
    • In one aspect, the present invention reduces the amount of low-latency memory needed for rules-based packet classification by representing a packet classification rules database in compressed form. A packet processing rules database, e.g., an ACL database comprising multiple ACEs, is preprocessed to obtain corresponding rule fingerprints. These rule fingerprints are much smaller than the rules and are easily accommodated in on-chip or other low-latency memory that is generally available to the classification engine in limited amounts. The rules database in turn can be stored in off-chip or other higher-latency memory, as initial matching operations involve only the packet key of the subject packet and the fingerprint database. The rules database is accessed for full packet classification only if a tentative match is found between the packet key and an entry in the fingerprint database. Thus, the present invention also advantageously minimizes accesses to the rules database.
    • 一方面,本发明通过以压缩形式表示分组分类规则数据库来减少基于规则的分组分类所需的低延迟存储器的数量。 分组处理规则数据库(例如,包括多个ACE的ACL数据库)被预处理以获得相应的规则指纹。 这些规则指纹比规则小得多,并且容易地被容纳在分类引擎中有限的片上或其他低延迟存储器中。 因为初始匹配操作仅涉及主题分组和指纹数据库的分组密钥,因此规则数据库又可以存储在片外或其他较高延迟的存储器中。 仅当在分组密钥和指纹数据库中的条目之间发现暂时匹配时,才能对完整分组分类进行规则数据库的访问。 因此,本发明还有利地最小化对规则数据库的访问。