CN102882812B - The arbitration device of a kind of territory processor application function, method and installation method - Google Patents
The arbitration device of a kind of territory processor application function, method and installation method Download PDFInfo
- Publication number
- CN102882812B CN102882812B CN201210350970.5A CN201210350970A CN102882812B CN 102882812 B CN102882812 B CN 102882812B CN 201210350970 A CN201210350970 A CN 201210350970A CN 102882812 B CN102882812 B CN 102882812B
- Authority
- CN
- China
- Prior art keywords
- application function
- module
- application
- function
- module region
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Stored Programmes (AREA)
Abstract
The arbitration device of territory processor application function, method and an installation method, relate to processor management field, embedded chip territory, the technical problem of solution carries out unified management to all FP application functions, saves CPU usage and FP hardware resource.The present invention is to more each FP application function of manageability after FP hardware resource piecemeal, effectively can reduce taking of CPU usage and FP hardware resource, reduce the coupling operated between FP application function, ensure that each FP application function affects with not being subject to deletion each other and fitting operation, utilize value of statistical indicant to realize obtaining hardware resource serial number in each FP module region, and achieve the priority orders of each FP application function installation rule and coming into force property.
Description
Technical field
The present invention relates to processor management field, embedded chip territory, be specifically related to the erecting device of a kind of territory processor application function and method and utilize the installation method of territory processor application function of described arbitration device or referee method.
Background technology
Packet that what FP (FieldProcessor: the territory processor) module of embedded chip realized is and based on tactful forwarding capability, application function (abbreviation: the FP application function) operand that the useful FP module of institute realizes is that message flow or port enter outgoing packet.
Embedded chip has certain FP module hardware resource, the such as BCM53284 of Broadcom (BCM) company have 1536 resources (application function realize object rule, one rule takies a resource), BCM56338 has MV88e6097 of 2048 resources and Marvell (MV) company etc., all FP application functions all use this block resource to install.
The FP module resource of prior art comprises multiple application function, owing to not having good unified management FP module resource, just often can produce the infirm result of FP function.
Summary of the invention
Technical problem to be solved by this invention carries out unified management to all FP application functions, realize different FP application functions and be mounted to different FP module region, what minimizing brought because of bad management repeats installation and deletion action, ensure that the FP application function installed comes into force, save CPU usage and FP hardware resource.
In order to solve the problems of the technologies described above, the invention provides the arbitration device of a kind of territory processor application function, comprising: analysis module, divide module, mark module and search module;
Described analysis module, for analyzing the matching condition of all territories processor FP application function to be installed;
Described division module, for the matching condition according to each FP application function, determines the FP module region that each FP application function is installed;
Described mark module, for putting a value of statistical indicant corresponding with described FP module region for each FP application function;
Describedly searching module, for identifying described value of statistical indicant, and finding the FP module region that each FP application function is corresponding.
Preferably, the matching condition of described analysis module analysis is at least one in the correlation between the operand of all FP application functions to be installed, all FP application functions to be installed, the correlation between FP application function to be installed and mounted FP application function.
Preferably, the division principle of described division module is:
The FP application function that operand is not identical is arranged in same FP module region;
Incoherent FP application function is arranged in same FP module region.
Preferably, value of statistical indicant is arranged on the high two of FP application function interface parameters by described mark module.
Preferably, described FP module region is in advance by multiple regions of FP hardware resource division.
In order to solve the problems of the technologies described above, present invention also offers the referee method of a kind of territory processor application function, comprising:
Analyze the matching condition of all territories processor FP application function to be installed;
According to the matching condition of each FP application function, determine the FP module region that each FP application function is installed;
For each FP application function puts a value of statistical indicant corresponding with described FP module region;
Identify described value of statistical indicant, and find the FP module region that each FP application function is corresponding.
Further, described matching condition is at least one in the correlation between the operand of all FP application functions to be installed, all FP application functions to be installed, the correlation between FP application function to be installed and mounted FP application function.
Further, the described matching condition according to each FP application function, determine that the principle of the FP module region of each FP application function is:
The FP application function that operand is not identical is arranged in same FP module region;
Incoherent FP application function is arranged in same FP module region.
Further, described value of statistical indicant is arranged on the high two of FP application function interface parameters.
Further, described FP module region is in advance by multiple regions of FP hardware resource division.
In order to solve the problems of the technologies described above, present invention also offers the installation method of a kind of territory processor application function, according in the FP module region that FP application function is corresponding, according to the priority order from low to high of unappropriated FP hardware resource, described FP application function is installed, until all FP application functions to be installed install.
Compared with prior art, arbitration device of the present invention and method are to more each FP application function of manageability after FP module region piecemeal, effectively can reduce taking of CPU usage and FP hardware resource, ensure that each FP application function affects with not being subject to deletion each other and fitting operation, and achieve the priority orders of each application function installation rule and coming into force property, be applicable to the design of various embedded chip.
Accompanying drawing explanation
Fig. 1 is the structural representation of the arbitration device of the embodiment of the present invention; Fig. 2 is the flow chart of the installation method of the embodiment of the present invention; Fig. 3 is the FP module region distribution schematic diagram of the embodiment of the present invention.
Embodiment
For making the object, technical solutions and advantages of the present invention clearly understand, hereinafter will be described in detail to embodiments of the invention by reference to the accompanying drawings.It should be noted that, when not conflicting, the embodiment in the application and the feature in embodiment can combination in any mutually.
The arbitration device of the embodiment of the present invention and method are to more each FP application function of manageability after FP hardware resource piecemeal, effectively can reduce taking of CPU usage and FP hardware resource, reduce the coupling operated between FP application function, ensure that each FP application function affects with not being subject to deletion each other and fitting operation, utilize value of statistical indicant to realize obtaining hardware resource serial number in each FP module region, and achieve the priority orders of each FP application function installation rule and coming into force property.
As shown in Figure 1, the arbitration device of the territory processor application function of the embodiment of the present invention, comprising: analysis module, divide module, mark module and search module;
Wherein, analysis module 1, for analyzing the matching condition of all territories processor FP application function to be installed;
Described matching condition can be the correlation between the operand of all FP application functions to be installed and/or all FP application functions to be installed and/or the correlation between FP application function to be installed and mounted FP application function.
Described matching condition can also be the physical connection applied environment of all FP application functions to be installed.
Wherein, divide module 2, for the matching condition according to each FP application function, determine the FP module region that each FP application function is installed;
The division principle of described division module can be:
1) the FP application function that operand is not identical is arranged in same FP module region;
Analyze the operand of all FP application functions, the FP application function that operand is not identical can be considered in placement one piece of resource.Such as ACL (accesscontrollist: Access Control List (ACL)) function is the operation of convection current, and VLAN speed limit is the operation to flow velocity, and therefore, they can be placed together.
2) incoherent FP application function is arranged in same FP module region.
To the correlation analysis between FP application function, incoherent FP application function can be considered in placement one piece of resource.Such as: whether correlation can for there being successively erection sequence between FP application function, whether there is conflicting operation, IPSG (IPSourceGuard: source IP protects) function operates the IP message of inbound port, and DHCPSnooping function operates the DHCP protocol massages of inbound port; Before DHCPSnooping function just must be placed in IPSG function, otherwise DHCPSnooping function just can not come into force, and therefore they need separated.
Can also be the FP module region that it determines to install according to the physical connection applied environment of FP application function.
Such as DHCPSnooping function enters the operation of DHCP protocol massages to two kinds of all panel terminal ports of switch, and the resource therefore only need distributing twice panel terminal port number just meets and uses.The benefit done like this can distribute suitable resource according to FP application function, is conducive to making full use of of resource.
Wherein, mark module 3, for putting a value of statistical indicant corresponding with described FP module region for each FP application function;
Value of statistical indicant is arranged on the high two of FP application function interface parameters by described mark module.
Described FP module region is in advance by multiple regions of FP hardware resource division.Embodiments of the invention are by after analysis FP application function, arrange a value of statistical indicant to distinguish, for follow-up identification, and FP application function is arranged on corresponding FP module region, consider that amendment SDK (SoftwareDevelopmentKit, i.e. SDK) has very large risk for the function parameter obtaining available FP rule ordering number, embodiments of the invention use function interface parameter, it is indicated, is transmitted into.
High two reasons as marker bit of selection FP application function interface parameters are:
The scope of described interface parameters is exactly the entry number of FP hardware resource, such as BCM53284 chip is 0 ~ 1535, this parameter is defined as the integer of 32, so a high position for interface parameters is 0, therefore embodiments of the invention use high two of interface parameters mark transmission to be entered as value of statistical indicant.
Wherein, searching module 4, for identifying described value of statistical indicant, and finding the FP module region that each FP application function is corresponding.
To come into force Ordered Dependency and reduce the principle of coupling between function FP hardware resource is divided into four regions according to function: DAI region is detected in DHCP security monitoring DHCPSnooping region, access control list ACL region, Dynamic ARP, source IP protects IPSG region.
As shown in Figure 2, the referee method of the territory processor application function of the embodiment of the present invention, comprising:
Step S1, analyze the matching condition of all territories processor FP application function to be installed;
Step S2, matching condition according to each FP application function, determine the FP module region that each FP application function is installed;
Step S3, to put a value of statistical indicant corresponding with described FP module region for each FP application function;
Step S4, identify described value of statistical indicant, and find the FP module region that each FP application function is corresponding.
Matching condition in step 1 is: the correlation between the operand of all FP application functions to be installed and/or all FP application functions to be installed and/or the correlation between FP application function to be installed and mounted FP application function.
Determine in step 2 that the principle of the FP module region of each FP application function is:
The FP application function that operand is not identical is arranged in same FP module region;
Incoherent FP application function is arranged in same FP module region.
In step 3, value of statistical indicant is arranged on the high two of FP application function interface parameters.
FP module region in step 3 and step 4 is in advance by multiple regions that FP hardware resource divides.Wherein being divided into how many FP module region can according to division principle; specifically divide according to functional requirement; with name, concrete restriction is not done to the number of FP module region; such as can be divided into: DHCP security monitoring DHCPSnooping region; access control list ACL region; Dynamic ARP detects DAI region, and source IP protects IPSG region.
During installation, by value of statistical indicant, FP application function to be installed is identified, in the FP module region that the FP application function determined according to value of statistical indicant is corresponding, according to the priority order from low to high of unappropriated FP hardware resource, described FP application function is installed, until all FP application functions to be installed install.
Each FP application function to be installed, by distinguishing mark value, is mounted in correct FP module region toward high priority by from low by said process.
Wherein the priority of FP hardware resource is corresponding with the entry number of FP hardware resource, and in each FP module region, the larger priority of entry number is lower.
Embodiment
As shown in Figure 3, the present embodiment, for ChipA chip, illustrates the process of realization.FP hardware resource being divided in advance four blocks, is the corresponding DHCPSnooping function of block 1 respectively, block 2 corresponding A CL function, the corresponding DAI function of block 3, the corresponding IPSG function of block 4.
Also show corresponding serial number in Fig. 3, have 28 ports this is because use on the switch device panel of ChipA chip, IPSG function installs a rule to each port, 28 altogether; DAI function installs a rule also to each port, DHCPSnooping function is then installation 56 rule, for controlling uplink message and the downlink message of different destination interface, because have detection or special purpose when chip realizes FP application function, therefore all the other 4 rules reserved.
Analyze operand, the correlation of all territories processor FP application function to be installed, take the matching conditions such as resource;
Because IPSG function has the operands such as EthernetType identical with DHCPSnooping function, IPSG function has the operands such as IP address identical with acl feature, DHCPSnooping function and acl feature have the operands such as four layers of IP port numbers identical, there are the operands such as EthernetType identical with acl feature with DAI function, IPSG function is relevant to DHCPSnooping function, DAI function is relevant to DHCPSnooping function, IPSG function and acl feature are relevant, DAI function and acl feature are relevant, therefore place in one piece of FP module region according to the FP application function that operand is not identical, incoherent FP application function places the rule in one piece of FP module region, determine the FP module region that each FP application function is installed,
Utilize each FP application function interface parameters to be installed high two as marker bit, transmit corresponding value of statistical indicant.
Wherein can set 0b00 to represent ACL, 0b01 and represent DHCP, 0b10 and represent DAI, 0b11 and represent IPSG, mark is assigned to the high two of FP application function interface parameters.
After the transmission of FP application function interface parameters is entered, advanced line parameter detects, and obtains out, find the FP module region that each FP application function is corresponding by high two place values of described FP application function interface parameters;
Utilizing prior art to find at the minimum FP hardware resource of the FP module region priority of correspondence, is that it distributes suitable resource according to the physical connection applied environment of each FP application function.According to priority order from low to high, each FP application function is installed.
In IPSG functional block, 1508 to be expressed as the priority of this block the highest, and 1535 is that priority is minimum.The deletion of each FP application function and installation rule operation, other FP application functions all can not be affected, and ensure that priority during installation rule.
Two orders below can be utilized
ipverifysourcedhcp-snooping
ip-access-list2permitip192.168.1.1255.255.255.0
The FP application function belonging to the first piecemeal is mounted in the first piecemeal of FP module, be filled in second piecemeal of FP module to the FP application function belonging to the second piecemeal, can not because of other application function redundant rule eliminations of FP, and priority incorrect problem when causing installing.
The FP module region (value of statistical indicant) that each FP application function of software records can also be utilized corresponding and the minimizing of FP hardware resource.
Although the execution mode disclosed by the present invention is as above, the execution mode that described content just adopts for the ease of understanding the present invention, and be not used to limit the present invention.Technical staff in any the technical field of the invention; under the prerequisite not departing from the spirit and scope disclosed by the present invention; any amendment and change can be done what implement in form and in details; but scope of patent protection of the present invention, the scope that still must define with appending claims is as the criterion.
Claims (7)
1. an arbitration device for territory processor application function, is characterized in that, comprising: analysis module, divide module, mark module and search module;
Described analysis module, for analyzing the matching condition of all territories processor FP application function to be installed;
Described division module, for the matching condition according to each FP application function, determines the FP module region that each FP application function is installed;
Described mark module, for putting a value of statistical indicant corresponding with described FP module region for each FP application function;
Describedly searching module, for identifying described value of statistical indicant, and finding the FP module region that each FP application function is corresponding;
Wherein,
The matching condition of described analysis module analysis is at least one in the correlation between the operand of all FP application functions to be installed, all FP application functions to be installed, the correlation between FP application function to be installed and mounted FP application function;
The division principle of described division module is:
The FP application function that operand is not identical is arranged in same FP module region;
Incoherent FP application function is arranged in same FP module region.
2. arbitration device as claimed in claim 1, is characterized in that:
Value of statistical indicant is arranged on the high two of FP application function interface parameters by described mark module.
3. arbitration device as claimed in claim 1, is characterized in that:
Described FP module region is in advance by multiple regions of FP hardware resource division.
4. a referee method for territory processor application function, is characterized in that, comprising:
Analyze the matching condition of all territories processor FP application function to be installed;
According to the matching condition of each FP application function, determine the FP module region that each FP application function is installed;
For each FP application function puts a value of statistical indicant corresponding with described FP module region;
Identify described value of statistical indicant, and find the FP module region that each FP application function is corresponding;
Wherein,
Described matching condition is at least one in the correlation between the operand of all FP application functions to be installed, all FP application functions to be installed, the correlation between FP application function to be installed and mounted FP application function;
The described matching condition according to each FP application function, determine that the principle of the FP module region of each FP application function is:
The FP application function that operand is not identical is arranged in same FP module region;
Incoherent FP application function is arranged in same FP module region.
5. referee method as claimed in claim 4, is characterized in that:
Described value of statistical indicant is arranged on the high two of FP application function interface parameters.
6. referee method as claimed in claim 4, is characterized in that:
Described FP module region is in advance by multiple regions of FP hardware resource division.
7. the installation method of a territory processor application function, referee method according to claim 4 or 6, in the FP module region that determined FP application function is corresponding, according to the priority order from low to high of unappropriated FP hardware resource, described FP application function is installed, until all FP application functions to be installed install.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201210350970.5A CN102882812B (en) | 2012-09-19 | 2012-09-19 | The arbitration device of a kind of territory processor application function, method and installation method |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201210350970.5A CN102882812B (en) | 2012-09-19 | 2012-09-19 | The arbitration device of a kind of territory processor application function, method and installation method |
Publications (2)
Publication Number | Publication Date |
---|---|
CN102882812A CN102882812A (en) | 2013-01-16 |
CN102882812B true CN102882812B (en) | 2016-01-27 |
Family
ID=47483962
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201210350970.5A Active CN102882812B (en) | 2012-09-19 | 2012-09-19 | The arbitration device of a kind of territory processor application function, method and installation method |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN102882812B (en) |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101257458A (en) * | 2008-04-01 | 2008-09-03 | 北京星网锐捷网络技术有限公司 | Method, apparatus and system for distributing and mounting filtering meter item |
CN101534301A (en) * | 2009-04-13 | 2009-09-16 | 北京星网锐捷网络技术有限公司 | List item installation method and device as well as network equipment |
CN102035668A (en) * | 2009-09-29 | 2011-04-27 | 中兴通讯股份有限公司 | Method and system for managing switch chips |
US8218539B2 (en) * | 2006-10-18 | 2012-07-10 | Broadcom Corporation | Flexible packet field processor |
CN102647329A (en) * | 2012-05-09 | 2012-08-22 | 上海市共进通信技术有限公司 | Method for achieving operating control of terminal services based on frequent pattern (FP) rule by optical network unit (ONU) in gigabit passive optical network (GPON) |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20050240795A1 (en) * | 2004-04-27 | 2005-10-27 | Nokia Corporation | Resource management system and method |
-
2012
- 2012-09-19 CN CN201210350970.5A patent/CN102882812B/en active Active
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8218539B2 (en) * | 2006-10-18 | 2012-07-10 | Broadcom Corporation | Flexible packet field processor |
CN101257458A (en) * | 2008-04-01 | 2008-09-03 | 北京星网锐捷网络技术有限公司 | Method, apparatus and system for distributing and mounting filtering meter item |
CN101534301A (en) * | 2009-04-13 | 2009-09-16 | 北京星网锐捷网络技术有限公司 | List item installation method and device as well as network equipment |
CN102035668A (en) * | 2009-09-29 | 2011-04-27 | 中兴通讯股份有限公司 | Method and system for managing switch chips |
CN102647329A (en) * | 2012-05-09 | 2012-08-22 | 上海市共进通信技术有限公司 | Method for achieving operating control of terminal services based on frequent pattern (FP) rule by optical network unit (ONU) in gigabit passive optical network (GPON) |
Also Published As
Publication number | Publication date |
---|---|
CN102882812A (en) | 2013-01-16 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN102299929B (en) | Access control method, system and device for virtual machine | |
CN203135921U (en) | System for forwarding data package | |
US10097572B1 (en) | Security for network computing environment based on power consumption of network devices | |
US20120317566A1 (en) | Virtual machine packet processing | |
CN103763121A (en) | Method and device for quickly issuing network configuration information | |
PH12015501768A1 (en) | Systems and methods for discovering devices in a neighborhood aware network | |
CN104506408A (en) | Data transmission method and device based on SDN | |
CN101674306B (en) | Address resolution protocol message processing method and switch | |
CN106130819B (en) | The detection method and device of VTEP exception | |
CN105162703B (en) | Multi-level network topology intelligent discovery and generation method and system based on hybrid protocol | |
CN104852840A (en) | Method and device for controlling mutual access between virtual machines | |
CN103875214A (en) | Intelligent phy with security detection for ethernet networks | |
CN104601394A (en) | Business chain connectivity detection method, device and system | |
EP4325807A3 (en) | Duplicate address detection for global ip address or range of link local ip addresses | |
CN104660554A (en) | Method for implementing communication data security of virtual machines | |
CN105681490B (en) | A kind of anti-IP address conflict method based on software defined network | |
CN106383771A (en) | Host cluster monitoring method and device | |
US20180165156A1 (en) | Communication apparatus, system, method, and non-transitory medium | |
CN101505241B (en) | Method and apparatus for generating test instances | |
US9832066B2 (en) | Port number extension method and switch | |
CN102882812B (en) | The arbitration device of a kind of territory processor application function, method and installation method | |
US10972464B2 (en) | Network system | |
KR20110066001A (en) | Gateway providing resource of sensor node | |
US20140068088A1 (en) | Systems and methods for processing media access control (mac) addresses | |
CN106533882B (en) | Message processing method and device |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant |