Bitmap network masks

• US 20070016637A1
• Filed: 07/18/2005
• Published: 01/18/2007
• Est. Priority Date: 07/18/2005
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Jemes, Brian, Brawn, John
• Application Number:
  US11/184,696
• Publication Number:
  US 20070016637A1
• Time in Patent Office: Days
• US Class Current: 709/200
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A bitmap network mask is described for use in network functions such as data packet forwarding, access control list processing, and policy application determination. The bitmap network mask can be applied to a random collection of network parameters if desired. In one format, the bitmap network mask includes a mask sequence of entries in which each entry corresponds to a network parameter covered by the bitmap network mask and one or more indexing parameters for locating an entry in the mask sequence.

Claims

1. A method for processing network parameters in accordance with a bitmap network mask comprising:

determining whether the bitmap network mask applies to a network parameter; and

processing the network parameter based on a result for the determination.

9. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

determining whether an access control list applies to the network parameter.

10. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

determining whether a policy applies to the network parameter.

11. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

permitting transfer of data using a network communication protocol based on the result for the determination.

12. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

permitting transfer of data through a port based on the result for the determination.

13. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

determining a forwarding path for a network data packet based on the network parameter.

14. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

controlling dynamic access for a computer associated with the network parameter.

15. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

processing a proxy address resolution request from an address in at least one bitmapped address range directly connected on an interface.

16. The method of claim 1 wherein processing the network parameter based on a result for the determination further comprises:

tracking age of entries in a forwarding table including at least one bitmap network mask representing a range of addresses associated with a network interface.

17. The method of claim 1 further comprising:

receiving a request for a change in status for at least one network parameter covered by a bitmap mask; and

updating an entry corresponding to the at least one network parameter in the bitmap mask sequence to effect the requested change.

2. A method for determining whether a bitmap network mask including a mask sequence of entries in which each entry corresponds to a network parameter in a range of parameters covered by the bitmap network mask and a respective value of each entry represents whether the mask applies to the corresponding parameter, and one or more indexing parameters for locating an entry in the mask sequence applies to a network parameter comprising:

determining the target entry in a bitmap mask sequence corresponding to a target parameter based on the one or more indexing parameters; and

determining whether the bitmap network mask applies based on a value in the target entry.

3. The method of claim 2 further comprising creating a bitmap network mask comprising:

receiving one or more network parameters for which the bitmap network mask is to apply;

determining one or more indexing parameters for the bitmap network mask;

determining a number of entries for the mask sequence of entries based on the one or more indexing parameters; and

setting entries in the mask sequence to indicate to which network parameters the bitmap network mask applies.

4. The method of claim 2 wherein the one or more indexing parameters comprise:

a starting network parameter and a bitmap length representing a range of network parameters covered by the bitmap network mask.

5. The method of claim 4 wherein an entry size of entries in a bitmap network mask is one bit and wherein determining whether the bitmap network mask applies to a network parameter further comprises:

subtracting the starting parameter from a target parameter for a resulting test integer;

responsive to the resulting test integer being less than zero, returning a negative result for the determination;

responsive to the resulting test integer not being less than zero, determining whether the resulting test integer is greater than the bit map length;

responsive to the resulting test integer being greater than the bit map length, returning an indicator that the bitmap network mask does not apply;

responsive to the resulting test integer not being greater than the bit map length, determining a target bit corresponding to the target address as an offset bit in the bitmap mask which is offset from the first bit in the bitmap by the resulting test integer;

checking the value of the target bit;

responsive to the target bit value indicating that the bitmap network mask does not apply, returning an indicator that the bitmap network mask does not apply; and

responsive to the target bit value indicating that the bitmap network mask does apply, returning an indicator that the bitmap network mask does apply.

6. The method of claim 4 wherein the indexing parameters of the bitmap network mask further comprise:

a number of parameters associated with each entry.

7. The method of claim 4 wherein the indexing parameters of the bitmap network mask further comprise:

a number of times the mask is repeated.

8. The method of claim 7 wherein an entry size of entries in the mask sequence is one bit and wherein the indexing parameters of the bitmap network mask further comprise a number of parameters associated with each bit and determining whether the bitmap network mask applies to a network parameter further comprises:

subtracting the starting parameter from a target parameter for a first resulting test integer;

responsive to the first resulting test integer being less than zero, returning an indicator that the bitmap network mask does not apply;

responsive to the first resulting test integer not being less than zero, determining whether the first resulting test integer is greater than the product of the bit map length, the number of parameters associated with each bit, and the number of times the mask is repeated;

responsive to the first resulting test integer being greater than the product of a bit map length, a number of parameters associated with each bit, and a number of times the mask is repeated, returning an indicator that the bitmap network mask does not apply;

responsive to the first resulting test integer not being greater than the product of the bit map length, the number of parameters associated with each bit, and the number of times the mask is repeated,

determining a second resulting test integer from the first resulting test integer modulo the product of the bit map length and the number of parameters associated with each bit;

determining a third resulting test integer from the quotient of the second resulting test integer divided by the number of parameters associated with each bit;

selecting as a target bit an offset bit in the bitmap mask which is offset from the first bit by the third resulting test integer;

responsive to the target bit indicating that the bitmap network mask does not apply, returning an indicator that the bitmap network mask does not apply; and

responsive to the target bit indicating that the bitmap network mask does apply, returning an indicator that the bitmap network mask does apply.

18. The method of claim 2 further comprising:

updating the bitmap network mask by overlaying a bitmap update to at least a portion of the bitmap network mask sequence.

19. The method of claim 18 wherein updating the bitmap network mask by overlaying a bitmap update to at least a portion of the bitmap network mask sequence further comprises:

performing an operation for bits of the bitmap network mask effected by the bitmap update based on an indicator.

20. The method of claim 19 wherein the indicator indicates a replace operation in which the value of each bit in the bitmap update replaces the value for the corresponding bit in the bitmap network mask sequence.

21. The method of claim 19 wherein the indicator indicates an OR operation in which for each bit in the bitmap update of a certain value, the corresponding bit in the bitmap mask is updated to the certain value.

22. The method of claim 19 wherein the indicator indicates an Not OR operation in which for each bit in the bitmap update of a certain value, the corresponding bit in the bitmap mask is updated to a value other than the certain value.

23. The method of claim 19 wherein the indicator indicates an XOR operation in which for each bit in the bitmap update of a certain value, the value of the corresponding bit in the bitmap mask is toggled.

24. A bitmap network mask for use in a method for processing network parameters comprising:

a mask sequence of entries in which each entry corresponds to a network parameter in a range of parameters covered by the bitmap network mask and a respective value in each entry represents whether the mask applies to the corresponding parameter, and

one or more indexing parameters for locating an entry in the mask sequence corresponding to a network parameter.

25. The bitmap network mask of claim 24 wherein the one or more indexing parameters include:

a starting network parameter from which a target network parameter can be differenced; and

a bitmap length representing a number of network parameters in a range of network parameters covered by the bitmap network mask.

26. The bitmap network mask of claim 25 where the one or more indexing parameters further include:

a number of times the mask is repeated.

27. The bitmap network mask of claim 25 where the one or more indexing parameters further include:

a number of parameters associated with each entry.

28. A system for determining whether a bitmap network mask applies to a network parameter comprising:

a bitmap network address mask storage module for storing one or more bitmap network masks wherein each bitmap network mask includes

a mask sequence of entries in which each entry corresponds to a network parameter in a range of parameters covered by the bitmap network mask and a respective value in each entry represents whether the mask applies to the corresponding parameter, and

one or more indexing parameters for locating an entry in the mask sequence corresponding to a network parameter;

a bitmap network mask definition module having access to the bitmap network address mask storage module, the bitmap network mask definition module defining the mask sequence of entries for the bitmap network mask based upon network parameters in received user input and one or more indexing parameters; and

a bitmap network mask check module also having access to the bitmap network address mask storage module and being communicatively coupled to the bitmap network mask definition module, the bitmap network mask check module determining whether the bitmap network mask applies to a network parameter.

29. The system of claim 28 wherein the bitmap network mask definition module updates at least one entry corresponding to at least one network parameter in the bitmap mask sequence responsive to a request for a change in status for the at least one network parameter covered by a bitmap network mask.

30. A computer usable medium comprising instructions for causing a processor to execute a method for determining whether a bitmap network mask including a mask sequence of entries in which each entry corresponds to a network parameter in a range of parameters covered by the bitmap network mask and a respective value in each entry represents whether the mask applies to the corresponding parameter, and one or more indexing parameters for locating an entry in the mask sequence applies to a network parameter, the method comprising:

determining the target entry in a bitmap mask sequence corresponding to a target parameter based on the one or more indexing parameters; and

determining whether the bitmap network mask applies based on a value in the target entry.

31. A system for processing network parameters in accordance with a bitmap network mask comprising:

means for determining whether the bitmap network mask applies to a network parameter.