JP2011172296A - Network device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable scalable function expansion by fast performing additional function processing and routing processing by function expansion modules by mounting one or more function expansion modules. <P>SOLUTION: A function expansion module 6 is configured by connecting a function execution module 62, which executes an expansion function, to a fast routing module 32 in which routing processing by hardware is also enabled. Therefore, even when a packet having new address information is generated by processing packet data through the function execution module 62, a high-speed property of routing processing for selecting a new routing destination of a packet and transferring the packet is maintained by the connected routing module 32, and function expansion is enabled by the scalable function expansion module by connecting a plurality of function execution modules 62. By mounting a plurality of function execution modules 62 of different functions, a plurality of functions can also be integrated in one internetwork device. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a network device, and more particularly to a network device equipped with a function expansion module using a router device and a LAN switch device.

  Conventionally, as a device for connecting a plurality of networks, a bridge that is a device that interconnects in the data link layer of the network system layer and controls relaying by a MAC address in the received packet, and a network layer that is an upper layer thereof There is a router device or the like that performs connection.

  FIG. 18 is an example of a block diagram of a conventional router device. This router includes a main processor module 2, routing modules 31 to 3n, lower level buses 41 to 4n, and line control modules 51 to 5n. The router controls a number of protocols in the network layer. Here, a typical IP (Internet Protocol) protocol is taken as an example to explain the routing flow. The line control module 51 that has received a packet from a certain communication line sends the packet to the routing module 31 that controls the routing process through the lower bus 41. The routing module 31 searches the route information based on the address information based on the IP address in the received packet, selects a predetermined route or an optimum route, and selects the routing module 32, for example. Then, the routing module 31 relays the received packet to the destination routing module 32 selected through the upper bus 1 on the upper side. Further, the packet is sent to the line control module 52 through the lower bus 42 on the lower side of the routing module 32 and transmitted to the communication line. Conversely, when a packet is sent from the line control module 52 to the line control module 51, the packet is routed through the reverse route.

  In such a conventional router apparatus, there is JP-A-5-199230 as an example in which an auxiliary processor is connected to the host bus in order to perform various types of function assistance. According to this, an auxiliary processor that assists the function of the main processor is connected through a router bus that is a coupling means that interconnects the main processor that manages the router and multiple routing accelerators that perform routing processing. It is.

JP-A-5-199230

Both bridges and routers are devices that relay packets. At the time of this relay, we would like to perform certain functions to expand functions such as detection of information in packets and processing of packets.
When considering a device that can be expanded in an existing router device and a new router device with multiple function expansion modules for performing function expansion, the router device can be equipped with multiple routing modules. It is better to replace and install some of the routing modules with function expansion modules. At this time, the function expansion module is restricted as a unit connected to the same coupling means as the routing module. In addition, if a packet with new address information is generated by processing the packet data by the function expansion module, the next routing destination must be recalculated, so that it has a routing function equivalent to the routing module. Necessary.
However, even if routing software is executed on the auxiliary processor using the above-described auxiliary processor as a function expansion module, there is a problem that the packet relay speed is reduced in low-speed routing processing by software.

  Therefore, in view of the above points, an object of the present invention is to install one or a plurality of function expansion modules in an existing internetwork device or a newly created internetwork device, thereby adding additional functions by the function expansion module. Provided is an internetwork apparatus capable of performing processing and routing processing at high speed and capable of scalable function expansion.

  Another object of the present invention is to perform high-speed processing using a combination of a function execution module and a routing module. It is an object of the present invention to be applicable to a user device that has already been purchased by applying it to an existing router device with function expansion by a function execution module. Another object of the present invention is to reduce the development cost by realizing the function of the function execution module except for the routing module function. In addition, the present invention is equipped with a function execution module in a scalable manner so that it has expandability, is equipped with a plurality of the same or different functions, and further distributes the load to the plurality of function execution modules for processing. The purpose is to improve the processing performance.

In order to achieve the above object, the function execution module is configured by connecting the function execution module that executes the extended function to the high-speed routing module that can also perform the routing process by hardware, and thereby the packet data of the function execution module is configured. Even when a packet having new address information is generated by processing, a new routing destination of the packet is selected and transferred by the connected routing module.
A function execution module connection method for this purpose will be exemplified below.

(1) A method of connecting a function execution module under a high-speed routing module used in an internetwork device as it is as a configuration of the function expansion module.
If the function expansion module requires a routing function, the high-speed routing module can be used as it is, and the function execution module can be installed at a high speed by minimizing the amount of modification if the function execution module is connected to it. .
Therefore, the function execution module can be connected by connecting the function execution module instead of the line control module connected to the routing module.

(2) A method of connecting the function execution module to an interface different from the connection of the line control module using the high-speed routing module used in the internetwork apparatus as it is as the configuration of the function expansion module.
If the function expansion module requires a routing function, use the high-speed routing module as it is and provide an interface for connecting the function execution module for executing the expansion function separately from the connection of the line control module. By connecting, it is possible to mount a function expansion module with high speed and minimal modification.

This method includes the following two means.
(I) As a method of connecting the function execution module, means for taking out a general-purpose bus or a specific interface line from the routing module, connecting the function execution module there, and removing the line control module that is no longer used.
(Ii) As a method of connecting the function execution module, a means for taking out a general-purpose bus or a specific interface line from the routing module and connecting the function execution module to the line.
The routing module uses both the function expansion module and the line control module separately according to the identifier added to the packet, or switches between the function execution module and the function execution module.

(3) A method of mounting a plurality of function execution modules in each routing module in the above (1) to (2).
(4) In the above (1) to (3), a function execution module is incorporated together in a routing module and mounted on one board to form a function expansion module.

One aspect of the present invention is an internetwork device that interconnects a plurality of networks and relays packet data, and includes a main processor module that includes means for managing the whole internetwork device,
A coupling means connected to the main processor module and capable of being connected to each other;
A routing function for performing a route search based on address information of received packet data and relay route selection information stored in advance, and a function for mutually performing relay processing of the received packet data to a relay destination network via the coupling means Have multiple routing modules,
For an internetwork apparatus having a line control module that is directly connected to each of the routing modules and controls the network to transmit and receive the packet data,
In order to add a function expansion module that adds functions such as packet processing and protocol processing, the configuration of the function expansion module uses one or more of the above routing modules and is connected to the routing module. Instead of the line control module, by connecting a function execution module that can execute additional functions,
Even when a packet having new address information is generated by processing the packet data by the function execution module, a new routing destination of the packet can be selected and transferred by the connected routing module. An object of the present invention is to provide an internetwork apparatus equipped with a function expansion module.

Another feature of the present invention is an internetwork device that interconnects a plurality of networks and relays packet data, and includes a main processor module that includes means for managing the whole internetwork device,
A coupling means connected to the main processor module and capable of being connected to each other;
A routing function for performing a route search based on address information of received packet data and relay route selection information stored in advance, and a function for mutually performing relay processing of the received packet data to a relay destination network via the coupling means Have multiple routing modules,
For an internetwork apparatus having a line control module that is directly connected to each of the routing modules and controls the network to transmit and receive the packet data,
In order to add a function expansion module that adds functions such as packet processing and protocol processing, the function expansion module is configured by using one or more of the above routing modules, the routing module and a general-purpose bus, or a specific By connecting a function execution module capable of executing an additional function via an interface and removing the line control module that is no longer needed,
Even when a packet having new address information is generated by processing the packet data by the function execution module, a new routing destination of the packet can be selected and transferred by the connected routing module. An object of the present invention is to provide an internetwork apparatus equipped with a function expansion module.

Furthermore, another feature of the present invention is an internetwork device that interconnects a plurality of networks and relays packet data, and includes a main processor module that includes means for managing the whole internetwork device. ,
A coupling means connected to the main processor module and capable of being connected to each other;
A routing function for performing a route search based on address information of received packet data and relay route selection information stored in advance, and a function for mutually performing relay processing of the received packet data to a relay destination network via the coupling means Have multiple routing modules,
For an internetwork apparatus having a line control module that is directly connected to each of the routing modules and controls the network to transmit and receive the packet data,
In order to add a function expansion module that adds functions such as packet processing and protocol processing, as the configuration of the function expansion module, one or more of the above routing modules are used, and the line control module is connected to the routing module. By means of connecting a function execution module capable of executing an additional function via a general-purpose bus different from that or a specific interface,
It is an object of the present invention to provide an internetwork apparatus equipped with a function expansion module that can be used by switching both the line control module and the function execution module.

  In the internetwork apparatus as described above, a function expansion module having a configuration in which a plurality of function execution modules are simultaneously connected may be mounted on each routing module.

  Further, in the described internetwork apparatus as described above, the function execution module may be mounted on the same board by incorporating the function execution module together in the routing module.

According to the first solution of the present invention,
A network device connected to a plurality of lines and relaying a packet received from any line to another line,
A control unit for managing the network device;
A first connection unit connected to the control unit;
At least one first routing unit connected to the control unit via the first connection unit;
A second connection connected to the first routing unit;
A plurality of line control units, wherein each of the line control units is connected to at least one line and the second connection unit, and receives a packet from any of the lines to the second connection unit; Transmitting the packet, and receiving the packet from the second connection unit and transmitting the packet to any of the lines, the plurality of line control units;
At least one function expansion unit connected to the control unit via the first connection unit;
With
The function expansion unit includes a second routing unit, a function execution unit, and a third connection unit that connects the second routing unit and the function execution unit,
The function execution unit provides a network device that receives a packet from the third connection unit and executes a predetermined additional function on the packet.

For example, the present invention has the following effects.
・ High-speed processing can be performed by combining function execution modules and routing modules.
Since the function expansion by the function execution module can be applied to an existing router device, it can be applied to a user device that has already been purchased.
-Since the functions of the function execution module can be realized except for the routing module function, the development cost can be reduced.
-The function execution module can be mounted in a scalable manner and is extensible.
-Since the function execution module can be made scalable, multiple functions can be installed.
-Since the function execution module can be made scalable, a plurality of different functions can be mounted.
-Since the function execution module can be made scalable, processing performance can be improved by distributing the load to a plurality of function execution modules.

It is a block diagram of a router device when a function expansion module is provided in the present invention. It is a schematic block diagram of the whole internetwork apparatus which connected the function execution module to the routing module as a structure of the function expansion module of this invention. It is a block diagram of the router apparatus which connected the function execution module to the routing module as a structure of a function expansion module at the time of using one embodiment of this invention. It is a figure which shows the example of the identifier insertion format to a packet as one embodiment of this invention. It is a figure which shows the structural example of the path | route information table as one embodiment of this invention. It is a figure which shows the structural example of the line table as one embodiment of this invention. It is a figure which shows the structural example of the detection condition table as one embodiment of this invention. It is the packet processing procedure in the receiving side routing module in one embodiment of this invention. It is a packet processing procedure from a high-order bus to a function execution module as a first embodiment of the present invention. It is the packet processing procedure in the function execution module in 1st embodiment of this invention. It is the packet processing procedure by the rerouting of a routing module in 1st embodiment of this invention. It is the packet processing procedure in the transmission side routing module as one embodiment of this invention. It is a block diagram of a router device in which a function execution module is mounted on a routing module as a configuration of a function expansion module when an embodiment of the present invention is used. It is a flowchart which shows the packet processing procedure from a high-order bus | bath in 2nd embodiment of this invention. It is a flowchart which shows the packet processing procedure in the function execution module in 2nd embodiment of this invention. It is a flowchart which shows the packet processing procedure by the rerouting of a routing module in 2nd embodiment of this invention. It is a block diagram of a router device in which a plurality of function execution modules are mounted on one routing module as a configuration of a function expansion module when an embodiment of the present invention is used. It is a block diagram which shows the structure of an example of the conventional router apparatus. 14 is another flowchart of a packet processing procedure in the function execution module 62. 14 is another flowchart of a packet processing procedure in the function execution module 64.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings. In the following description, the internetwork apparatus will be described mainly with respect to routing processing, which is the original purpose, and here, a router will be described as a representative internetwork apparatus.

  FIG. 1 is a block diagram of a router device when a conventional router device is provided with a function expansion module. The function expansion module is connected to the same upper bus 1 as a coupling means connecting a plurality of routing modules 51 to 5n. 6 is a basic configuration diagram in which 6 is connected.

  FIG. 2 is a block diagram of the entire internetwork apparatus in which the function execution module is connected to the routing module as the configuration of the function expansion module of the present invention. The internetwork apparatus includes an upper bus 1, a main processor module 2, a function expansion module 6, a routing module 31, routing modules 33 to 3n, a lower bus 41, lower buses 43 to 4n, a line control module 51, and a line control module 53 to 5n. The function expansion module 6 includes a routing module 32, a lower level bus 42 or other interface, and a function execution module 62. First, each part will be described. The upper bus 1 is a high-speed coupling means that is the center of the router, and generally has a switching structure or a bus structure. Connected to the upper bus 1 is a main processor module 2 having functions for managing the entire apparatus and generating / distributing a routing table. Further, one or a plurality of routing modules 31 to 3n having a function of routing packet data at high speed is connected to the upper bus 1. On the lower side of the routing module 31, there is a lower bus 41 for connecting to the line control module 51. The lower bus 41 is an interface for transferring packet data and the like. The line control module 51 is a communication control unit that controls a LAN and a line protocol and performs communication with the outside of the router device. The function execution module 62 executes a new function that cannot be performed by the main processor module 2 and the routing modules 31 to 3n and an extended function for realizing a function that slows down the processing in the main processor module 2 at high speed. And connected to the routing module 32 using the lower level bus 42 or other interface.

  Embodiments of the present invention can be broadly divided into a method of connecting a function execution module instead of a line control module and a method of connecting a function execution module to an interface different from the line control module. The case will be described in detail.

(1) First Embodiment One means of the present invention is a method of connecting the function execution module 62 instead of connecting the line control module to the connector of the lower bus 42 on the lower side of the routing module 32. This method has an advantage that the function execution module 62 can be connected without changing the hardware of the routing module 32 at all. Alternatively, both the routing module 32 and the function execution module 62 may be mounted on one board and connected by a lower bus.

Since this method can use the high-speed routing module 32, there is an advantage that the function execution module 62 can be interfaced to the upper bus 1 at high speed.
FIG. 3 is a block diagram of a router device to which function execution modules are connected when one embodiment of the present invention is used. The configuration and each part will be described below. Here, the function expansion module 6 includes a function execution module 62 equipped with means for executing software processing of a complex protocol and means for executing high-speed hardware processing, in particular, in order to execute the function. The function execution module 62 is connected to the general-purpose bus 95, a bus connection unit 91 that transfers packet data and the like between the lower-level bus 42 and the general-purpose bus 95 and bridges both buses, and the general-purpose bus 95. A CPU 96, a memory 97 for the CPU 96, and one or a plurality of function accelerators 98 connected to the general-purpose bus 95 are included. The bus connection unit 91 includes a lower-level bus reception unit 92, a lower-level bus transmission unit 93, and a data transfer control unit 94.

  Each routing module 31, 32, 33 is assigned a number that does not cause duplication within the information relay device. This number is expressed as a module number. The line control modules 51 and 53 and the function execution module 62 are assigned numbers that do not cause duplication within the routing module in order to connect a plurality of line control modules or the like under each routing module. This number is expressed as a physical line control module number. Furthermore, a number that is not duplicated under each line control module is assigned to the line 23 connected to the line control module 51. Similarly, a number that is not duplicated under each line control module is assigned to the line 23 connected to the line control module 53. This number is expressed as a physical line number. A logical line number that is closed inside the apparatus may be considered for the physical line number. The logical line number and the physical line number uniquely corresponding to the physical line 23 do not have to correspond one-to-one. For example, in the case of an ATM line, a plurality of VCs (Virtual Connections) can be set on one ATM line. Hereinafter, this logical line number is simply referred to as a line number. In the following description, the routing module 31 that accommodates the line 23 that receives the packet is referred to as a receiving side routing module, and conversely, the routing module 33 that accommodates the line 23 that transmits the packet is referred to as a transmitting side routing module. .

  The routing modules 31, 32, and 33 are an IP packet route search unit 17, an IP route information table 18, a line table search unit 15, a line table 16, a route information rewrite unit 20, a packet detection unit 21, a detection condition table 22, and an IP packet. A determination unit 14, a packet buffer 13, a CPU 11, a memory 12, an upper bus transmission / reception unit 10, and a lower bus transmission / reception unit 19 are provided.

  When the routing module 31 is a receiving side routing module, the lower-level bus transmission / reception unit 19 handles packets transmitted and received via the lower-level bus 41. The lower bus transmission / reception unit 19 performs a process of storing the packet received from the lower bus 41 in the packet buffer 13. At that time, the lower-level bus transmission / reception unit 19 adds an identifier to the head portion of the packet. The identifier is used for transferring relay information regarding the packet in the transfer between modules in the information relay apparatus.

  FIG. 4 is a diagram illustrating an example of an identifier insertion format in a packet. The identifier 101 for the packet 105 includes, for example, a module number 102, a line number 103, and a next node IP address 104, which are transmission route information. The module number 102, the line number 103, and the next node IP address 104 of the identifier 101 store a module number, a line number, and a next node IP address obtained as a result of a route information table search described later. The transmission side routing module refers to the identifier 101 and performs transmission processing to the corresponding line 23.

  The place where the added identifier 101 is deleted is deleted by the line module 53 of the routing module 33. Alternatively, in order to reduce the data transfer amount of the packet as much as possible, the routing module 33 changes to the line module 53. Alternatively, the packet may be deleted immediately before sending the packet.

  On the other hand, in order to perform rerouting processing of the routing module 32 after processing the additional function by the function execution module 62, the function execution module 62 deletes this identifier 101 (or executes the function from the lower-level bus transmission / reception unit 19 of the routing module 32). This identifier 101 is deleted immediately before sending the packet to the module 62), and when the lower bus transceiver 19 of the routing module 32 performs processing for storing the packet received from the lower bus 42 in the packet buffer 13 again, the beginning of the packet A new identifier 101 is added to the part. As another method, the function execution module 62 does not delete the identifier 101 and the lower-level bus transmission / reception unit 19 of the routing module 32 stores the packet received from the lower-level bus 42 in the packet buffer 13 again. There is also a method of overwriting the identifier added to the packet with a new identifier 101 when performing processing.

  FIG. 5 is a diagram illustrating a configuration example of a route information table. As illustrated in the figure, the route information table 18 stores the module number 203, the line number 204, the next node IP address 205, the destination IP address 201, and the subnet mask 202 of the IP packet transmission route information in association with each other. ing.

  When the routing module 33 is a transmission side routing module, the module number 203 is a number indicating the transmission side routing module 33 that accommodates the line 23 that is directly or indirectly connected to the network that transmits the IP packet. The line number 204 is a number indicating the line 23 directly or indirectly connected to the network that transmits the IP packet. The next node IP address 205 is an IP address indicating an information relay apparatus that relays the IP packet next to the information relay apparatus. The IP packet route search unit 17 extracts a network address portion from the destination IP address described in the IP header of the IP packet stored in the packet buffer 13 using the subnet mask 202. Using this as a search key, the destination IP address 201 of the route information table 18 is searched. As a result, transmission route information (module number 203, line number 204, next node IP address 205) for the IP packet is obtained.

FIG. 6 is a diagram illustrating a configuration example of a line table. As illustrated in the figure, the line table 16 stores a line number 401, a physical line module number 403, and a physical line number 402 in association with each other.
The line table search unit 15 searches the line number 401 of the line table 16 for the packet received from the upper bus 1 using the line number 103 described in the identifier 101 added to the packet as a search key. As a result, the physical line module number 403 and the physical line number 402 for transmitting the packet are obtained.

  FIG. 7 is a diagram illustrating a configuration example of a detection condition table. The search condition table 22 stores conditions for detecting an IP packet to be subjected to IP additional function processing. As illustrated in the figure, the search condition table 22 includes a detection condition 301 for detecting an IP packet to be subjected to IP additional function processing, and a module number 302 of the function expansion module 6 that processes the IP additional function processing. , Line number 303 and next node IP address 304 are stored in association with each other. Examples of detection conditions include a destination IP address and a source IP address. Further, for example, protocol information of the IP layer or higher such as a TCP (Transmission Control Protocol) or UDP (User Datagram Protocol) port number may be stored. Note that the function expansion module 6 can be specified using only the module number 302. Further, by using the line number 303 and the next node IP address 304, even when a plurality of function execution modules (1) to (N) are provided, distribution to each device can be performed.

  The packet detection unit 21 searches for the detection condition 301 in the search condition table 22 using the IP of the IP packet stored in the packet buffer 13 or information on the protocol of the higher layer. If the information matches the search condition 301 as a result of the search, the packet detecting unit 21 can identify that the IP packet is subjected to the IP addition function process, and the module number of the function expansion module 6 that performs the process. 302, line number 303, and next node IP address 304 are obtained. When the packet detection unit 21 detects an IP packet to be processed by the IP addition function, the path information rewriting unit 20 searches the detection condition table 22 for information on the identifier 101 added to the packet. The obtained module number 302, line number 303, and next node IP address 304 are overwritten. The IP packet determination unit 14 determines whether the packet received via the lower bus 5 by the lower bus transmission / reception unit 19 is an IP packet. The packet buffer 13 stores packets received from the lower bus transceiver 19 or the upper bus transceiver 10.

  The CPU 11 and the memory 12 operate software on it. This software has various device management functions of the routing module 2, functions to store setting information transmitted from the main processor module 2, etc. in each table. Also, it has a function of transferring packets other than IP packets to the main processor module 2.

  The upper bus transmitting / receiving unit 10 handles packets transmitted and received via the upper bus 1. The upper bus transmitting / receiving unit 10 transmits the packet to a suitable device via the upper bus 1 according to the module number 102 of the identifier 101 added to the head portion of the packet.

  Next, the flow of packet data in the above means of the present invention will be described. The arrow line t1 in FIG. 3 indicates a packet flow. This will be described with reference to the following flowchart.

<1> FIG. 8 shows a packet processing procedure in the receiving side routing module 31.
The line control module 51 recognizes reception of a packet from the line 23 (step 1001). The lower-level bus transmission / reception unit 19 stores the received packet in the packet buffer 13 (step 1002). At this time, the lower-level bus transmission / reception unit 19 adds the identifier 101 to the head portion of the packet (step 1003).

  Next, the IP packet determination unit 14 determines whether or not the packet stored in the packet buffer 13 is an IP packet (step 1004). If the packet is an IP packet, the IP route search unit 17 extracts the network address portion from the IP address of the packet stored in the packet buffer 13 using the subnet mask 202, and searches the route information table 18 using that as a search key. (Step 1005). For example, by setting the subnet mask 202, it is determined how many bits of the IP address are used as a search key, and using that as a mask, a part or all of the bits of the IP address of the received IP packet are used as a search key. Use. When the search in step 1005 is hit, the IP route search unit 17 obtains transmission route information (module number 203, line number 204, next node IP address 205) for the IP packet. Then, the route information rewriting unit 20 stores the transmission route information in the packet 105 identifier 101 (step 1006). Subsequently, the packet detection unit 21 searches the detection condition table 22 using the search conditions (step 1007).

  If the search in step 1007 is hit, it can be identified that IP addition function processing is performed on the IP packet, and the module number 302, line number 303, and next node IP of the function expansion module 6 that performs the IP addition function processing are identified. An address 304 is obtained. The path information rewriting unit 20 stores the module number 302, the line number 303, and the next node IP address 304 obtained as a result of the search by overwriting the identifier 101 (step 1008). This is a general processing procedure of the packet data flow t1. On the other hand, if the search in step 1007 does not hit, the transmission path information is not overwritten to the identifier 101. After performing the above processing, the higher-level bus transceiver unit 10 transmits a packet to a suitable device via the higher-level bus 1 according to the module number 102 of the identifier 101 (step 1009).

  On the other hand, if the IP route search unit 17 in step 1005 fails to search the route information table 18, the packet detection unit 21 searches the search condition table 22 based on the search condition (step 1010), and if the search is successful, As in the previous case, the transmission path information is overwritten and stored in the identifier 101 (step 1008), and then transmitted to the upper bus 1 (step 1009). If the search by the packet detection unit 21 in step 1010 fails, the packet is discarded (step 1011) and the reception process is terminated.

  If it is determined in step 1004 that the packet is not an IP packet, the IP packet determination unit 14 stores the packet in the memory 12 managed by the CPU 11 (step 1012). The software operating on the CPU 11 transfers the packet to the main processor module 2 (step 1013). The main processor module 2 performs processing according to the type of transferred packet. If the packet needs to be relayed, relay processing is performed. The IP packet to be subjected to the IP additional function processing can be transferred to the function expansion module 6 by the above processing procedure.

<2> FIG. 9 is a flowchart showing a packet processing procedure from the upper bus to the function execution module in the function expansion module 6.
In the routing module 32 in the function expansion module 6, the higher-level bus transceiver 10 recognizes packet reception from the higher-level bus 1 by the module number 102 of the identifier 101 (step 4101). The upper bus transceiver 10 stores the received packet in the packet buffer 13 (step 4102). Subsequently, the line table search unit 15 searches the line table 16 using the line number 103 stored in the identifier 101 added to the packet as a search key (step 4103). If the search in step 4103 is successful, the line table search unit 15 obtains the physical line control module number 403 and the physical line number 402 that transmit the packet. The lower-level bus transmission / reception unit 19 instructs the function execution module 62 (connected in place of the line control module) indicated by the physical line control module number 403 and the physical line number 402 to transmit (step 4104). Thus, based on the line number 103 in the identifier 101 of the received packet 105, the function module 62 to be transferred is properly selected and set. This is a general processing procedure of the packet data flow t1. On the other hand, if the search in step 4103 fails, the packet is discarded (step 4107) and the transmission process is terminated.

<3> FIG. 10 is a flowchart showing a packet processing procedure in the function execution module 62.
The lower-level bus receiving unit 92 of the function execution module 62 recognizes packet reception from the lower-level bus 42 based on the physical line control module number 403 or the physical line number 402 (step 2101). The lower bus receiving unit 92 sends the packet to the data transfer control unit 94 (step 2102). The data transfer control unit 94 transfers the packet to the general-purpose bus 95 toward the function accelerator 98 (step 2103). The function accelerator 98 receives the packet (step 2104). The general-purpose bus 95 can identify reception of a packet to be processed based on the physical line control module number 403 or the physical line number 402. The function accelerator 98 performs IP addition function processing on the received packet (step 2105). An example of the function performed here is, for example, an IPsec function that performs encryption processing such as RFC2401 and the like, which is published with a serial number under the name of RFC (Request For Comments) by the Internet Engineering Task Force (IETF). There is. The function accelerator 98 deletes the identifier 101 of the packet after processing (step 2106), and transfers the packet to the general-purpose bus 95 toward the data transfer control unit 94 (step 2107). The data transfer control unit 94 receives a packet from the general-purpose bus 95 (step 2108). The data transfer control unit 94 sends the packet to the routing module 32 ahead of the lower level bus 42 using the lower level bus transmission unit 93 (step 2109).

  Note that IPsec encapsulation involves a process of adding a new packet header to the beginning of a packet. Further, when performing the encryption process in the function execution module, only the original packet data portion excluding the identifier 101 is encrypted. Therefore, in such a case, after the identifier 101 is deleted (step 2106), additional function processing may be performed (step 2105). In this case, FIG. 19 shows another flowchart of the packet processing procedure in the function execution module 62.

  As another method for deleting the identifier 101 described above, a method of deleting the identifier 101 immediately before sending a packet from the lower-level bus transmission / reception unit 19 of the routing module 32 to the function execution module 62 is used. When the lower-level bus transmitting / receiving unit 19 of the routing module 32 performs processing for storing the packet received from the lower-level bus 42 in the packet buffer 13, it overwrites the identifier added to the packet with a new identifier 101. In such a case, the process of deleting the identifier 101 in step 2106 is not necessary.

<4> FIG. 11 is a flowchart showing a packet processing procedure by rerouting of the routing module 32.
The lower-level bus transmission / reception unit 19 of the routing module 32 recognizes reception of the packet subjected to the additional processing from the lower-level bus 42 (step 1101). The lower-level bus transmission / reception unit 19 stores the received packet in the packet buffer 13 (step 1102). At this time, the lower-level bus transmission / reception unit 19 adds the identifier 101 to the head portion of the packet (step 1103).

  Next, the IP packet determination unit 14 determines whether or not the packet stored in the packet buffer 13 is an IP packet (step 1104). If the packet is an IP packet, the IP route search unit 17 extracts the network address portion from the IP address of the packet stored in the packet buffer 13 using the subnet mask 202, and searches the route information table 18 using that as a search key. (Step 1105). When the search in step 1105 is hit, transmission route information (module number 203, line number 204, next node IP address 205) for the IP packet is obtained. Then, the route information rewriting unit 20 stores the transmission route information in the identifier 101 of the packet 105 (step 1106). Subsequently, the packet detection unit 21 searches the detection condition table 22 using the search conditions (step 1107).

  If the search in step 1107 does not hit, the transmission path information is not overwritten to the identifier 101. After performing the above processing, the higher-level bus transmission / reception unit 10 transmits a packet to the transmission side routing module 33 via the higher-level bus 1 according to the module number 102 of the identifier 101 (step 1109). This is a general processing procedure of the packet data flow t1. On the other hand, when the search in step 1107 is hit, it can be identified that the IP additional function processing is performed on the IP packet, and the module number 302, the line number 303 of the function expansion module 6 that performs the IP additional function processing, the next A node IP address 304 is obtained. The path information rewriting unit 20 stores the module number 302, the line number 303, and the next node IP address 304 obtained as a result of the search by overwriting the identifier 101 (step 1108). After performing the above processing, the higher-level bus transceiver unit 10 sends a packet to a suitable device via the higher-level bus 1 according to the module number 102 of the identifier 101 (step 1109). In this way, the packet can be transferred to another function expansion module 6.

  On the other hand, if the IP route search unit 17 in step 1105 fails to search the route information table 18, the packet detection unit 21 is searched (step 1110). If the search is successful, the transmission route information is obtained in the same manner as above. After the identifier 101 is overwritten and stored (step 1108), it is sent to the upper bus 1 (step 1109). If the search by the packet detector 21 in step 1110 fails, the packet is discarded (step 1111) and the reception process is terminated.

  If it is determined in step 1104 that the packet is not an IP packet, the IP packet determination unit 14 stores the packet in the memory 12 managed by the CPU 11 (step 1112). The software operating on the CPU 11 transfers the packet to the main processor module 2 (step 1113). The main processor module 2 performs processing according to the type of transferred packet. If the packet needs to be relayed, relay processing is performed.

<5> FIG. 12 is a flowchart showing a packet processing procedure in the transmission side routing module.
The upper bus transmitting / receiving unit 10 of the transmission side routing module 33 recognizes reception of a packet from the upper bus 1 by the module number 102 of the identifier 101 or the like (step 4001). The upper bus transceiver 10 stores the packet in the packet buffer 13 (step 4002). Subsequently, the line table search unit 15 searches the line table 16 using the line number 103 stored in the identifier 101 added to the packet as a search key (step 4003). If the search in step 4003 fails, the packet is discarded (step 4007) and the transmission process is terminated. On the other hand, if the search in step 4003 is successful, the physical line number 402 of the line 23 that transmits the packet is obtained from the line table 16. The lower-level bus transmission / reception unit 19 instructs the line control module 3 that controls the line 23 indicated by the physical line number 402 to perform transmission (step 4004). Upon receiving the instruction, the line control module 3 takes out the packet from the packet buffer 13, deletes the identifier 101 added to the head of the packet (step 4005), and sends the packet to the line 23 (step 4006). The above is the general processing procedure of the packet data flow t1.

As another method for deleting the identifier 101 described above, when a method of deleting just before sending a packet from the routing module 33 to the line module 53 is used, the processing for deleting the identifier 101 in step 4005 is not necessary.
In the present invention, the function execution module 62 may include a plurality of function accelerators 98 and execute various additional functions, and the function expansion module 6 may include a plurality of function execution modules 62 and include various additional functions. Can be executed.

(2) Second Embodiment Another means of the present invention is a method of connecting a function execution module by providing a general-purpose bus or a connector of a specific interface to the routing module 34. This method has an advantage that the function execution modules can be connected while minimizing the hardware of the routing module. Alternatively, both the routing module and the function execution module may be mounted on one board and connected by a general-purpose bus or a specific interface.

Since this method can also use the high-speed routing module 34, there is an advantage that the function execution module 64 can be interfaced to the host bus 1 at high speed.
FIG. 13 is a block diagram of a router device in which a function execution module is mounted on a routing module as a configuration of a function expansion module when an embodiment of the present invention is used. The configuration and each part will be described. In the following description, portions different from the first embodiment will be mainly described.

  The function expansion module 6 including the functions of the function execution module includes a function execution module 64 equipped with means for performing software processing on a complex protocol and means for executing high-speed hardware processing. The function execution module 64 is connected to the routing module 34 via a general-purpose bus 74, a CPU 96 connected to the general-purpose bus 74, a memory 97 for the CPU 96, and one or a plurality of function accelerators connected to the same general-purpose bus 74. It has 98.

  Each routing module 31, 33, 34 is assigned a number that does not cause duplication within the information relay device. This number is expressed as a module number. Further, numbers that do not cause duplication within the routing module are assigned to the line control modules 51, 53, and 54 and the function execution module 64. This number is expressed as a physical line control module number. Furthermore, a number that is not duplicated under each line control module is assigned to the line 23 connected to the line control module 51. Similarly, a number that is not duplicated under each line control module is assigned to the line 23 connected to the line control module 53 and 54. This number is expressed as a physical line number. A logical line number that is closed inside the apparatus may be considered for the physical line number. The logical line number and the physical line number uniquely corresponding to the physical line 23 do not have to correspond one-to-one.

  The routing modules 31, 33, and 34 are an IP packet route search unit 17, an IP route information table 18, a line table search unit 15, a line table 16, a route information rewrite unit 20, a packet detection unit 21, a detection condition table 22, and an IP packet. A determination unit 14, a packet buffer 13, a CPU 11, a memory 12, an upper bus transmission / reception unit 10, and a lower bus transmission / reception unit 19 are provided. In addition to such a configuration, the routing module 34 has a general-purpose bus transmission / reception unit 85 added thereto, and can connect the function execution module 64 via the general-purpose bus 74.

  When the routing module 31 is a receiving side routing module, the lower-level bus transmission / reception unit 19 handles packets transmitted and received via the lower-level bus 41. The lower bus transmission / reception unit 19 performs a process of storing the packet received from the lower bus 41 in the packet buffer 13. At that time, an identifier is added to the head portion of the packet. The identifier is used for transferring relay information regarding the packet in the transfer between modules in the information relay apparatus. As described above, an example of this identifier is shown in FIG. The identifier 101 includes a module number 102, a line number 103, and a next node IP address 104 that are transmission route information. The module number 102, the line number 103, and the next node IP address 104 of the identifier 101 store a module number, a line number, and a next node IP address obtained as a result of a path information table search described later. The transmission side routing module refers to the identifier 101 and performs transmission processing to the corresponding line 23.

  The place where the added identifier 101 is deleted is deleted by the line module 53 of the routing module 33. Alternatively, in order to reduce the data transfer amount of the packet as much as possible, the routing module 33 changes to the line module 53. Alternatively, the packet may be deleted immediately before sending the packet.

  Further, in order to perform the rerouting process of the routing module 34 after the additional function is processed by the function execution module 64, the identifier 101 is deleted by the function execution module 64 (or the function execution is performed from the general-purpose bus transmission / reception unit 85 of the routing module 34). This identifier is deleted immediately before sending the packet to the module 64), and when the general-purpose bus transmitting / receiving unit 85 of the routing module 34 performs processing for storing the packet received from the general-purpose bus 74 in the packet buffer 13 again, Is appended with a new identifier 101. As another method, the function execution module 64 does not delete the identifier 101, and the general-purpose bus transmission / reception unit 85 of the routing module 34 stores the packet received from the general-purpose bus 74 in the packet buffer 13 again. There is also a method of overwriting the identifier added to the packet with a new identifier 101 when performing processing.

Next, the operation of the packet data flow in this embodiment will be described. The arrow line indicated by t2 in FIG. 13 is a packet flow.
In this embodiment, the processing procedures <1> and <5> are the same as in the previous embodiment, and the processing means <2>, <3> and <4> are different. A packet processing procedure will be described with reference to a flowchart.

<2> FIG. 14 is a flowchart showing a packet processing procedure from the upper bus to the function execution module in the function expansion module 6.
In the routing module 34 in the function expansion module 6, the higher-level bus transceiver 10 recognizes packet reception from the higher-level bus 1 based on the module number 102 of the identifier 101 (step 4201). The higher-level bus transceiver 10 stores the received packet in the packet buffer 13 (step 4202). Subsequently, the line table search unit 15 searches the line table 16 using the line number 103 stored in the identifier 101 added to the packet as a search key (step 4203). If the search in step 4203 is successful, the line table search unit 15 obtains the physical line control module number 403 and the physical line number 402 for transmitting the packet. The lower-level bus transmission / reception unit 19 selects whether to send a packet to the function execution module 64 or to the line control module 54 from the physical line control module number 403. For example, if the value of the physical line control module number is 0, the destination of the packet can be distributed by determining the line control module 54, and if the value of the physical line control module number is 1, the destination of the packet is determined by the function execution module 64. . (Step 4204)

The general-purpose bus transceiver unit 85 refers to the physical line control module number 403 and, in this example, if the value of the physical line control module number is 1, instructs the function execution module 64 to transmit a packet (step 4205). This is a general processing procedure of the packet data flow t2. On the other hand, in step 4204, the lower-level bus transceiver 19 refers to the physical line control module number 403, and if the value of the physical line control module number is 0, transmits the packet to the line control module 54 (step 4206). ).
Explaining the case where this procedure is not satisfied, if the search in step 4203 fails, the packet is discarded (step 4107) and the transmission process is terminated.

<3> FIG. 15 is a flowchart showing a packet processing procedure in the function execution module 64.
The function accelerator 98 of the function execution module 64 recognizes packet reception from the general-purpose bus transceiver 85 via the general-purpose bus 74 by the physical line control module number 403 or the physical line number 402 (step 2201). The function accelerator 98 receives the packet by the physical line control module number 403 or the physical line number 402 (step 2202). The function accelerator 98 performs IP addition function processing on the received packet (step 2203).
The identifier 101 is deleted from the packet after processing (step 2204), and the function accelerator 98 sends the packet to the general-purpose bus 74 toward the general-purpose bus transceiver 85 (step 2205).

  Note that IPsec encapsulation involves a process of adding a new packet header to the beginning of a packet. Further, when performing the encryption process in the function execution module, only the original packet data portion excluding the identifier 101 is encrypted. Therefore, in such a case, after the identifier 101 is deleted (step 2204), additional function processing may be performed (step 2203). In this case, FIG. 20 shows another flowchart of the packet processing procedure in the function execution module 64.

  Further, as another method for deleting the identifier 101, a method of deleting this identifier immediately before sending a packet from the general-purpose bus transmitting / receiving unit 85 of the routing module 34 to the function execution module 64, or after this routing When the general-purpose bus transmitting / receiving unit 85 of the module 34 performs processing for storing the packet received from the general-purpose bus 74 in the packet buffer 13, a new identifier 101 is overwritten on the identifier added to the packet. In this case, it is not necessary to delete the identifier 101 in step 2106.

<4> FIG. 16 is a flowchart showing a packet processing procedure by rerouting of the routing module 34.
The general-purpose bus transmission / reception unit 85 of the routing module 34 recognizes reception of the packet subjected to the additional processing from the general-purpose bus 74 (step 1201). The general-purpose bus transceiver 85 stores the received packet in the packet buffer 13 (step 1202). At this time, the lower-level bus transmission / reception unit 19 adds the identifier 101 to the beginning of the packet (step 1203).

  Next, the IP packet determination unit 14 determines whether or not the packet stored in the packet buffer 13 is an IP packet (step 1204). If the packet is an IP packet, the IP route search unit 17 extracts the network address portion from the IP address of the packet stored in the packet buffer 13 using the subnet mask 202, and searches the route information table 18 using that as a search key. (Step 1205). When the search in step 1205 is hit, transmission route information (module number 203, line number 204, next node IP address 205) for the IP packet is obtained. Then, the route information rewriting unit 20 stores the transmission route information in the identifier 101 of the packet 105 (step 1206). Subsequently, the packet detection unit 21 searches the detection condition table 22 using the search conditions (step 1207).

  If the search in step 1207 does not hit, the transmission path information is not overwritten to the identifier 101. After performing the above processing, the higher-level bus transceiver unit 10 sends a packet to the transmission side routing module 33 via the higher-level bus 1 according to the module number 102 of the identifier 101 (step 1209). This is a general processing procedure of the packet data flow t2. On the other hand, if the search in step 1207 is hit, it can be identified that the IP additional function processing is performed on the IP packet, and the module number 302, the line number 303, A node IP address 304 is obtained. The path information rewriting unit 20 stores the module number 302, the line number 303, and the next node IP address 304 obtained as a result of the search by overwriting the identifier 101 (step 1208). After performing the above processing, the higher-level bus transmission / reception unit 10 transmits a packet to a suitable device via the higher-level bus 1 according to the module number 102 of the identifier 101 (step 1209). In this way, the packet can be transferred to another function expansion module 6.

  On the other hand, if the IP route search unit 17 in step 1205 fails to search the route information table 18, the packet detection unit 21 is searched (step 1210). After the identifier 101 is overwritten and stored (step 1208), it is sent to the upper bus 1 (step 1209). If the search by the packet detector 21 in step 1210 fails, the packet is discarded (step 1211) and the reception process is terminated.

  If it is determined in step 1104 that the packet is not an IP packet, the IP packet determination unit 14 stores the packet in the memory 12 managed by the CPU 11 (step 1212). The software operating on the CPU 11 transfers the packet to the main processor module 2 (step 1213). The main processor module 2 performs processing according to the type of transferred packet. If the packet needs to be relayed, relay processing is performed.

(3) Third Embodiment FIG. 17 is a block diagram of a router apparatus in which a plurality of function execution modules are mounted in one routing module as a function expansion module configuration when one embodiment of the present invention is used. is there. As shown in this figure, as a function execution module mounting method, for example, a plurality of function execution modules 62 may be connected to the lower-level bus 42 on the lower side of one routing module 32. Further, the function execution module 61 may be implemented as a part of the line control module 51 connected to the lower level bus 41 on the lower side of the routing module 31.

  The packet distribution method to the plurality of line control modules and function execution modules can be performed with the value of the physical line control module number as in step 4204 of FIG. It may be further distributed according to the physical line number. By increasing the setting of correspondence between this value and each module, it becomes possible to distribute even two or more modules.

Further, in the function module 6, the physical line control module number and the physical line number are further added as identification information to the packets between the routing modules 32 and 34 and the function execution module so as to perform transmission / reception identification determination and the like. It may be.
As described above, according to the present embodiment, it is possible to perform packet data relay using a function execution module that realizes a function that does not exist in a conventional router or performs high-speed processing.

DESCRIPTION OF SYMBOLS 1 ... Upper bus 2 ... Main processor module 4 ... Lower bus 6 ... Function expansion module 10 ... Upper bus transmission / reception part 11 ... CPU
12 ... Memory 13 ... Packet buffer 14 ... IP packet discrimination unit 15 ... Line table search unit 16 ... Line table 17 ... IP route search unit 18 ... Route information table 19 ..Lower bus transmission / reception unit 20 ... route information rewriting unit 21 ... packet detection unit 22 ... detection condition table 23 ... lines 31-34, 3n ... routing modules 41-44, 4n ... Lower buses 51 to 54, 5n: Line control module 62 ... Function execution module 64 ... Function execution module 74 ... General purpose bus 85 ... General purpose bus control unit 91 ... Bus linking unit 92 ... Lower bus transmitter 93 ... Lower bus receiver 94 ... Data transfer controller 95 ... General-purpose bus 96 ... CPU
97 ... Memory 98 ... Function accelerator t1 ... Packet data flow t2 ... Packet data flow

Claims (5)

A network device connected to a plurality of lines and relaying a packet received from any line to another line,
A control unit for managing the network device;
A first connection unit connected to the control unit;
At least one first routing unit connected to the control unit via the first connection unit;
A second connection connected to the first routing unit;
A plurality of line control units, wherein each of the line control units is connected to at least one line and the second connection unit, and receives a packet from any of the lines to the second connection unit; Transmitting the packet, and receiving the packet from the second connection unit and transmitting the packet to any of the lines, the plurality of line control units;
At least one function expansion unit connected to the control unit via the first connection unit;
With
The function expansion unit includes a second routing unit, a function execution unit, and a third connection unit that connects the second routing unit and the function execution unit,
The function execution unit receives a packet from the third connection unit and executes a predetermined additional function on the packet. The network device according to claim 1, further comprising:
A fourth connection unit connected to the second routing unit;
A second line control unit, wherein the second line control unit is connected to at least one line and the fourth connection unit, receives a packet from any of the lines, and receives the fourth connection. The second line control unit for transmitting the packet to any of the lines by receiving the packet from the fourth connection unit and transmitting the packet to any of the lines;
A network device comprising: The network device according to claim 1, wherein
The first routing unit includes:
A first transfer unit that receives a packet from the second connection unit and adds an identifier to a head portion of the received packet;
A first search for searching for and obtaining first transmission path information corresponding to a transmission destination line using address information included in the received packet, and storing the first transmission path information in the identifier And
The information contained in the received packet is used to identify whether the received packet should be transferred to any of the function execution units, and when the packet is transferred to the function execution unit, it corresponds to the function execution unit A second search unit that searches for and acquires second transmission path information, and stores the second transmission path information in the identifier;
A network device comprising: The network device according to claim 1, wherein
The second routing unit includes:
A first transfer unit that receives a packet from the second connection unit and adds an identifier to a head portion of the received packet;
A first search for searching for and obtaining first transmission path information corresponding to a transmission destination line using address information included in the received packet, and storing the first transmission path information in the identifier And
The information contained in the received packet is used to identify whether the received packet should be transferred to any of the function execution units, and when the packet is transferred to the function execution unit, it corresponds to the function execution unit A second search unit that searches for and acquires second transmission path information, and stores the second transmission path information in the identifier;
A network device comprising: The network device according to claim 3, wherein
The first search unit includes a first storage unit that stores address information and the first transmission route information corresponding to each line in association with each other, and uses the address information included in the received packet to store the first information. The address information stored in the first storage unit is searched, and when the address information that matches the address information included in the received packet is stored in the first storage unit, it is associated with the address information. An internetwork apparatus that reads the first transmission path information from the first storage unit.

Images