ATE375661T1 - Paketverarbeitung basierend auf kontextinformationen - Google Patents

Paketverarbeitung basierend auf kontextinformationen

Info

Publication number
ATE375661T1
ATE375661T1 AT03711631T AT03711631T ATE375661T1 AT E375661 T1 ATE375661 T1 AT E375661T1 AT 03711631 T AT03711631 T AT 03711631T AT 03711631 T AT03711631 T AT 03711631T AT E375661 T1 ATE375661 T1 AT E375661T1
Authority
AT
Austria
Prior art keywords
context
lookup
associative memory
context vector
packet
Prior art date
Application number
AT03711631T
Other languages
English (en)
Inventor
Venkateshwar Pullela
Original Assignee
Cisco Tech Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Cisco Tech Inc filed Critical Cisco Tech Inc
Application granted granted Critical
Publication of ATE375661T1 publication Critical patent/ATE375661T1/de

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/74Address processing for routing
    • H04L45/742Route cache; Operation thereof
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/24Traffic characterised by specific attributes, e.g. priority or QoS
    • H04L47/2441Traffic characterised by specific attributes, e.g. priority or QoS relying on flow classification, e.g. using integrated services [IntServ]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101Access control lists [ACL]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Communication Control (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
AT03711631T 2002-05-31 2003-03-15 Paketverarbeitung basierend auf kontextinformationen ATE375661T1 (de)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US10/159,055 US7336660B2 (en) 2002-05-31 2002-05-31 Method and apparatus for processing packets based on information extracted from the packets and context indications such as but not limited to input interface characteristics

Publications (1)

Publication Number Publication Date
ATE375661T1 true ATE375661T1 (de) 2007-10-15

Family

ID=29709657

Family Applications (1)

Application Number Title Priority Date Filing Date
AT03711631T ATE375661T1 (de) 2002-05-31 2003-03-15 Paketverarbeitung basierend auf kontextinformationen

Country Status (8)

Country Link
US (1) US7336660B2 (de)
EP (1) EP1510045B1 (de)
CN (1) CN1305274C (de)
AT (1) ATE375661T1 (de)
AU (1) AU2003214222A1 (de)
CA (1) CA2484442C (de)
DE (1) DE60316797D1 (de)
WO (1) WO2003103239A1 (de)

Families Citing this family (37)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7082492B2 (en) * 2002-08-10 2006-07-25 Cisco Technology, Inc. Associative memory entries with force no-hit and priority indications of particular use in implementing policy maps in communication devices
US7177978B2 (en) * 2002-08-10 2007-02-13 Cisco Technology, Inc. Generating and merging lookup results to apply multiple features
US7689485B2 (en) * 2002-08-10 2010-03-30 Cisco Technology, Inc. Generating accounting data based on access control list entries
US7028136B1 (en) 2002-08-10 2006-04-11 Cisco Technology, Inc. Managing idle time and performing lookup operations to adapt to refresh requirements or operational rates of the particular associative memory or other devices used to implement the system
AU2003265288B2 (en) * 2002-08-10 2008-08-28 Cisco Technology, Inc. Associative memory with enhanced capabilities
US7349382B2 (en) * 2002-08-10 2008-03-25 Cisco Technology, Inc. Reverse path forwarding protection of packets using automated population of access control lists based on a forwarding information base
US20050216770A1 (en) * 2003-01-24 2005-09-29 Mistletoe Technologies, Inc. Intrusion detection system
KR100489685B1 (ko) * 2003-02-20 2005-05-17 삼성전자주식회사 패킷 제어기와 네트워크 프로세서간의 패킷 전송을 위한패킷 송수신 장치와 그 방법
US9110853B2 (en) * 2003-03-10 2015-08-18 Oracle America, Inc. Computer system with multiple classes of device IDs
US6988106B2 (en) * 2003-07-09 2006-01-17 Cisco Technology, Inc. Strong and searching a hierarchy of items of particular use with IP security policies and security associations
US7080195B2 (en) * 2003-10-22 2006-07-18 Cisco Technology, Inc. Merging indications of matching items of multiple groups and possibly associated with skip conditions to identify winning entries of particular use for implementing access control lists
US7240149B1 (en) 2003-11-06 2007-07-03 Cisco Technology, Inc. Multiple branch operations in an associative memory
US20050188211A1 (en) * 2004-02-19 2005-08-25 Scott Steven J. IP for switch based ACL's
US7249228B1 (en) 2004-03-01 2007-07-24 Cisco Technology, Inc. Reducing the number of block masks required for programming multiple access control list in an associative memory
US7290083B2 (en) * 2004-06-29 2007-10-30 Cisco Technology, Inc. Error protection for lookup operations in content-addressable memory entries
US7489683B2 (en) * 2004-09-29 2009-02-10 Intel Corporation Integrated circuit capable of routing multicast data packets using device vectors
GB2420883A (en) * 2004-12-02 2006-06-07 3Com Corp Examining data patterns according to rules stored in content addressable memories
US7219195B2 (en) * 2004-12-21 2007-05-15 Cisco Technology, Inc. Associative memory with invert result capability
US7684390B2 (en) * 2004-12-30 2010-03-23 Intel Corporation Integrated circuit capable of transmitting probe packets across a stack of switches
US7523251B2 (en) * 2005-01-18 2009-04-21 Cisco Technology, Inc. Quaternary content-addressable memory
US7561589B2 (en) * 2005-02-23 2009-07-14 Cisco Technology, Inc Virtual address storage which may be of particular use in generating fragmented packets
CN100388740C (zh) * 2005-07-29 2008-05-14 华为技术有限公司 一种数据业务系统及接入控制方法
US7689889B2 (en) * 2006-08-24 2010-03-30 Cisco Technology, Inc. Content addressable memory entry coding for error detection and correction
US7675913B2 (en) * 2006-08-24 2010-03-09 Agere Systems Inc. Port addressing method and apparatus for link layer interface
US7817571B2 (en) 2007-02-14 2010-10-19 Cisco Technology, Inc. Automatic discovery of blocking access-list ID and match statements in a network
US7773510B2 (en) 2007-05-25 2010-08-10 Zeugma Systems Inc. Application routing in a distributed compute environment
US8321908B2 (en) * 2007-06-15 2012-11-27 Cisco Technology, Inc. Apparatus and method for applying network policy at a network device
US7706291B2 (en) 2007-08-01 2010-04-27 Zeugma Systems Inc. Monitoring quality of experience on a per subscriber, per session basis
US8374102B2 (en) 2007-10-02 2013-02-12 Tellabs Communications Canada, Ltd. Intelligent collection and management of flow statistics
CA3002975C (en) 2009-04-01 2020-07-14 Nicira, Inc. Method and apparatus for implementing and managing virtual switches
US8571031B2 (en) * 2009-10-07 2013-10-29 Intel Corporation Configurable frame processing pipeline in a packet switch
US8751650B2 (en) * 2012-05-10 2014-06-10 Cisco Technology, Inc. Method and apparatus for supporting access control lists in a multi-tenant environment
US9049200B2 (en) * 2012-07-27 2015-06-02 Cisco Technology, Inc. System and method for improving hardware utilization for a bidirectional access controls list in a low latency high-throughput network
US10965597B2 (en) * 2017-07-01 2021-03-30 Intel Corporation Virtual network function load balancer
US11483313B2 (en) * 2018-06-28 2022-10-25 Intel Corporation Technologies for updating an access control list table without causing disruption
US11314460B2 (en) * 2019-09-13 2022-04-26 Kioxia Corporation Solid state drive supporting both byte addressable protocol and block addressable protocol
CN111654491A (zh) * 2020-05-29 2020-09-11 新华三信息安全技术有限公司 一种acl共享方法、装置、设备及机器可读存储介质

Family Cites Families (40)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5088032A (en) * 1988-01-29 1992-02-11 Cisco Systems, Inc. Method and apparatus for routing communications among computer networks
US5481540A (en) * 1990-08-24 1996-01-02 At&T Corp. FDDI bridge frame learning and filtering apparatus and method
US5319763A (en) * 1991-04-02 1994-06-07 Motorola, Inc. Data processor with concurrent static and dynamic masking of operand information and method therefor
DE69330904T2 (de) * 1992-12-04 2002-06-20 At & T Corp., New York Paketnetz-Schnittstelle
US6000008A (en) * 1993-03-11 1999-12-07 Cabletron Systems, Inc. Method and apparatus for matching data items of variable length in a content addressable memory
US5515370A (en) * 1994-03-31 1996-05-07 Siemens Aktiengesellschaft Circuit arrangement for line units of an ATM switching equipment
JPH11515121A (ja) * 1995-07-26 1999-12-21 レイカー,インコーポレイティド スパンおよびサブスパン・ソーティング・レンダリング・システムのための方法および装置
US6091725A (en) * 1995-12-29 2000-07-18 Cisco Systems, Inc. Method for traffic management, traffic prioritization, access control, and packet forwarding in a datagram computer network
US5740171A (en) * 1996-03-28 1998-04-14 Cisco Systems, Inc. Address translation mechanism for a high-performance network switch
US6243667B1 (en) * 1996-05-28 2001-06-05 Cisco Systems, Inc. Network flow switching and flow data export
US5842040A (en) * 1996-06-18 1998-11-24 Storage Technology Corporation Policy caching method and apparatus for use in a communication device based on contents of one data unit in a subset of related data units
US6147976A (en) * 1996-06-24 2000-11-14 Cabletron Systems, Inc. Fast network layer packet filter
US5930359A (en) * 1996-09-23 1999-07-27 Motorola, Inc. Cascadable content addressable memory and system
US5920886A (en) * 1997-03-14 1999-07-06 Music Semiconductor Corporation Accelerated hierarchical address filtering and translation using binary and ternary CAMs
US6097724A (en) * 1997-08-15 2000-08-01 Lucent Technologies Inc. Ram-based associative content-addressable memory device, method of operation thereof and ATM communication switching system employing the same
JP3191737B2 (ja) * 1997-08-29 2001-07-23 日本電気株式会社 ルータを有するネットワークシステムおよび改良されたルータおよびそのルータに用いられる連想メモリ
US6148364A (en) * 1997-12-30 2000-11-14 Netlogic Microsystems, Inc. Method and apparatus for cascading content addressable memory devices
US6061368A (en) * 1997-11-05 2000-05-09 Xylan Corporation Custom circuitry for adaptive hardware routing engine
US6236658B1 (en) * 1997-11-21 2001-05-22 Cisco Technology, Inc. Method and apparatus for message routing, including a content addressable memory
US6240485B1 (en) * 1998-05-11 2001-05-29 Netlogic Microsystems, Inc. Method and apparatus for implementing a learn instruction in a depth cascaded content addressable memory system
US6219748B1 (en) * 1998-05-11 2001-04-17 Netlogic Microsystems, Inc. Method and apparatus for implementing a learn instruction in a content addressable memory device
US6658002B1 (en) * 1998-06-30 2003-12-02 Cisco Technology, Inc. Logical operation unit for packet processing
US6377577B1 (en) * 1998-06-30 2002-04-23 Cisco Technology, Inc. Access control list processing in hardware
US6141738A (en) * 1998-07-08 2000-10-31 Nortel Networks Corporation Address translation method and system having a forwarding table data structure
US6308219B1 (en) * 1998-07-31 2001-10-23 Cisco Technology, Inc. Routing table lookup implemented using M-trie having nodes duplicated in multiple memory banks
US6389506B1 (en) * 1998-08-07 2002-05-14 Cisco Technology, Inc. Block mask ternary cam
US6289414B1 (en) * 1998-10-08 2001-09-11 Music Semiconductors, Inc. Partially ordered cams used in ternary hierarchical address searching/sorting
US6167445A (en) * 1998-10-26 2000-12-26 Cisco Technology, Inc. Method and apparatus for defining and implementing high-level quality of service policies in computer networks
US6237061B1 (en) * 1999-01-05 2001-05-22 Netlogic Microsystems, Inc. Method for longest prefix matching in a content addressable memory
JP3643507B2 (ja) 1999-09-20 2005-04-27 株式会社東芝 パケット処理装置及びパケット処理方法
US6374326B1 (en) * 1999-10-25 2002-04-16 Cisco Technology, Inc. Multiple bank CAM architecture and method for performing concurrent lookup operations
US6526474B1 (en) * 1999-10-25 2003-02-25 Cisco Technology, Inc. Content addressable memory (CAM) with accesses to multiple CAM arrays used to generate result for various matching sizes
US6434662B1 (en) * 1999-11-02 2002-08-13 Juniper Networks, Inc. System and method for searching an associative memory utilizing first and second hash functions
DE60026229T2 (de) * 2000-01-27 2006-12-14 International Business Machines Corp. Verfahren und Vorrichtung für Klassifizierung von Datenpaketen
US6535951B1 (en) * 2000-02-29 2003-03-18 Cisco Technology, Inc. Hit result register file used in a CAM
EP1279268A2 (de) 2000-05-03 2003-01-29 David Skillicorn Netzwerkverkehrskennzeichnung aus paketenparametern
US6718326B2 (en) 2000-08-17 2004-04-06 Nippon Telegraph And Telephone Corporation Packet classification search device and method
US6381242B1 (en) * 2000-08-29 2002-04-30 Netrake Corporation Content processor
ATE370582T1 (de) 2000-10-03 2007-09-15 U4Ea Technologies Ltd Zuweisung von prioritätsstufen in einem datenfluss
US20020126672A1 (en) * 2001-01-10 2002-09-12 Nelson Chow Method and apparatus for a flexible and reconfigurable packet classifier using content addressable memory

Also Published As

Publication number Publication date
US7336660B2 (en) 2008-02-26
EP1510045B1 (de) 2007-10-10
US20030231631A1 (en) 2003-12-18
CA2484442C (en) 2010-03-23
CA2484442A1 (en) 2003-12-11
WO2003103239A1 (en) 2003-12-11
CN1305274C (zh) 2007-03-14
CN1462136A (zh) 2003-12-17
AU2003214222A1 (en) 2003-12-19
EP1510045A1 (de) 2005-03-02
DE60316797D1 (de) 2007-11-22

Similar Documents

Publication Publication Date Title
ATE375661T1 (de) Paketverarbeitung basierend auf kontextinformationen
KR940024591A (ko) 컴퓨터 장치
US6345347B1 (en) Address protection using a hardware-defined application key
WO2002079995A8 (en) Systems and methods using a system-on-a-chip with soft cache
US6219743B1 (en) Apparatus for dynamic resource mapping for isolating interrupt sources and method therefor
KR950015083A (ko) 데이타 처리 시스템, 및 메모리 액세스 제어를 제공하는 방법
GB2421826A (en) Microtlb and micro tag for reducing power in a processor
KR910010328A (ko) 패리티 능력을 가진 디스크 배열 제어기
CN110908931B (zh) Tlb模块的更新方法
KR920001324A (ko) 고성능 프로세서의 바이트 비교 동작 방법 및 그 프로세서
ATE367701T1 (de) Nomadischer übersetzen oder wegesucher
EP2946297B1 (de) Überlappungsprüfung für einen adressenübersetzungspufferspeicher
WO2003042839A3 (en) Memory management system and method providing linear address based memory access security
AU8214591A (en) Neural processing devices with learning capability
EP2786518B1 (de) Datenverarbeitungsvorrichtungzur umbenennung von registern und verfahren zur umbenennung von registern
EP4310706A3 (de) 64-bit virtuelle adressen mit metadatenbit(en) und kanonizitätsprüfung ohne ausfall aufgrund nichtkanonischer werte von metadatenbit(en)
CN107995116A (zh) 报文发送方法及通信设备
CN105978868A (zh) Ip地址权限的查找方法及装置
Giua et al. Decidability and closure properties of weak Petri net languages in supervisory control
KR960011715A (ko) 어드레스 변환 장치
EP1429251A3 (de) Adressbereichsvergleicher für die Entdeckung von Speicherzugriffen variabler Grösse mit einer Datenvergleichsqualifizierung und voller oder partieller Überlappung
KR960027615A (ko) 의사난수 잡음 발생 장치 및 방법
US20220012086A1 (en) Multiple secure virtual processors for a trust domain
US7505997B1 (en) Methods and apparatus for identifying cached objects with random numbers
KR960032197A (ko) 메모리 관리 방법 및 시스템과 데이타 처리 시스템

Legal Events

Date Code Title Description
RER Ceased as to paragraph 5 lit. 3 law introducing patent treaties