METHOD AND APPARATUS FOR PACKET PROCESSING AND A PREPROCESSOR

• US 20130138920A1
• Filed: 08/11/2011
• Published: 05/30/2013
• Est. Priority Date: 08/11/2010
• Status: Abandoned Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hangzhou H3C Technologies Co Ltd (Tsinghua Holdings Co., Ltd.)
• Inventors: Ge, Changzhong
• Application Number:
  US13/816,452
• Publication Number:
  US 20130138920A1
• Time in Patent Office: Days
• US Class Current: 712/30
• CPC Class Codes: G06F 15/80 comprising an array of processing units with common control, e.g. single instruction multiple data processors G06F15/82 takes precedence ; for correlation function computation G06F17/15
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]

Abstract

An apparatus for packet processing is provided. The apparatus is to be implemented in a server and includes: a preprocessor and at least two processors which are respectively connected with the preprocessor. The preprocessor is to classify packets received externally from the server, and to distribute the classified packets to the respective processors, wherein packets in a same flow are distributed to a same processor. Each of the processors is to receive and process a packet distributed by the preprocessor.

Claims

1. An apparatus for packet processing, the apparatus to be implemented in a server, the apparatus comprising:

a preprocessor; and

at least two processors respectively connected with the preprocessor;

wherein the preprocessor is to classify packets received at an external interface of the server, and to distribute the classified packets to the respective processors, wherein packets in a same flow are distributed to a same processor, and wherein each of the processors is to receive and process a packet distributed to the processors by the preprocessor.

2. The apparatus of claim 1, wherein the preprocessor is further to send, when a flow to which a first packet belongs has a relevant flow, a second packet of the relevant flow received subsequently to the first packet to a processor processing the first packet.

3. The apparatus of claim 1, wherein the preprocessor comprises:

a packet receiving module;

a packet processing module;

a flow classifying module; and

a flow table maintaining module;

wherein the packet receiving module is to receive the packets from an external interface of the server, to send a fragmented packet among the packets received to the packet processing module, and to send a non-fragmented packet among the packets received to the flow classifying module;

wherein the packet processing module is to record,

when the fragmented packet is the first fragment of the fragmented packet, quintuple information and Internet Protocol Identity (IPID) information of the first fragment, and to send the first fragment to the flow classifying module;

when the fragmented packet is a subsequent fragment, to obtain Source PORT (SPORT) and Destination PORT (DPORT) information corresponding to quintuple information of the subsequent fragment, and

if the SPORT and DPORT information is obtained, to send the subsequent fragment and the SPORT and DPORT information obtained to the flow classifying module, and

if no SPORT and DPORT information is obtained, to buffer the subsequent fragment and continue obtaining the SPORT and DPORT information, and to send the subsequent fragment and the SPORT and DPORT information obtained to the flow classifying module when the SPORT and DPORT information is obtained;

wherein the flow classifying module is to receive quintuple information of a packet sent by the packet receiving module and quintuple information of a packet sent by the packet processing module to the flow table maintaining module, to receive a processor identifier corresponding to quintuple information of a packet from the flow table maintaining module, and to send the packet to a processor corresponding to the processor identifier received; and

wherein the flow table maintaining module is to receive the quintuple information of a packet sent by the flow classifying module, to query whether there is a flow table entry corresponding to the quintuple information of the packet;

if the flow table entry exists, to obtain the processor identifier in the flow table entry and send the processor identifier to the flow classifying module;

if the flow table entry does not exist, to create a flow table entry according to the quintuple information of the packet sent by the flow classifying module, wherein the flow table entry comprises the quintuple information of the packet and the processor identifier of the processor for processing the packet.

4. The apparatus of claim 3, wherein the preprocessor further comprises a packet parsing module;

wherein the packet receiving module is further to send the non-fragmented packet received to the packet parsing module;

wherein the packet processing module is further to send the fragmented packet to the packet parsing module;

wherein the packet parsing module is to;

parse the packet sent by the packet receiving module and the packet sent by the packet processing module, and

send, if a determination that a flow to which the packet belongs has a relevant flow is made, respective quintuple information of flows which are relevant to the flow table maintaining module for instructing the flow table maintaining module to create respective flow table entries in which the quintuple information of the packet and quintuple information of the relevant flow correspond to a same processor identifier; and

wherein the flow table maintaining module is to receive the quintuple information sent by the packet parsing module, and to create the flow table entries according to the quintuple information, wherein the quintuple information of the packet and the quintuple information of the relevant flow correspond to the same processor identifier in each of the flow table entries.

5. The apparatus of claim 4, wherein the preprocessor further comprises a processor monitoring module;

wherein the processor monitoring module is to obtain information of each of the at least two processors, wherein the information comprises a processor identifier of each of the at least two processors, whether each of the at least two processors is operating normally, and a load situation of each of the at least two processors; and

wherein the flow table maintaining module is further to obtain the processor identifier of the processor from the processor monitoring module, and to create the flow table entries according to the processor identifier and the quintuple information.

6. The apparatus of claim 5, wherein the processor identifier of the processor obtained from the processor monitoring module by the flow table maintaining module is the processor identifier of a processor which currently has the least load.

7. The apparatus of claim 5, wherein the flow table maintaining module is further to at least one of set up a longest use period for a flow table entry and delete the flow table entry when the flow table entry reaches the longest use period.

8. A method for packet processing, said method to be implemented in a server comprising a preprocessor and at least two processors respectively connected with the preprocessor, the method comprising:

receiving, by the preprocessor, a packet from an external interface of the server;

classifying, by the preprocessor, the packet; and

distributing, by the preprocessor, the classified packet to a processor among the at least two processors, wherein packets in a same flow are distributed to the same processor.

9. The method of claim 8, wherein classifying the packet by the preprocessor comprises:

determining, by the preprocessor, whether the received packet is a fragmented packet;

if the packet is a fragmented packet,

processing the fragmented packet,

obtaining complete quintuple information of the fragmented packet,

determining a processor for processing the packet according to the quintuple information of the fragmented packet, and

distributing the packet to the determined processor;

otherwise, directly determining a processor for processing the packet according to quintuple information of the packet, and distributing the packet to the determined processor.

10. The method of claim 9, wherein processing the fragmented packet and obtaining the complete quintuple information of the fragmented packet comprise:

determining whether the fragmented packet is the first fragment according to packet header identifier information of the fragmented packet;

if the fragmented packet is the first fragment, recording the quintuple information and Internet Protocol Identity (IPID) information of the first fragment;

if the fragmented packet is a subsequent fragment, querying whether recorded information includes quintuple information corresponding to Source IP address (SIP), Destination IP address (DIP) and PROTOCOL information in quintuple information of the subsequent fragment as well as IPID information of the subsequent fragment;

if the recorded information includes the corresponding quintuple information, obtaining Source PORT (SP(JRT) and Destination PORT (DPORT) information from the corresponding quintuple information, and taking the SIP, DIP and PROTOCOL information in the quintuple information of the subsequent fragment and the SPORT and DPORT information obtained as the complete quintuple information of the subsequent fragment;

if the recorded information includes no corresponding quintuple information, buffering the subsequent fragment until another fragmented packet, which is the first fragment, is received, recording quintuple information and IPID information of the first fragment, searching recorded information of the first fragment for quintuple information corresponding to the SIP, DIP and PROTOCOL information and the IPID information in the subsequent fragment buffered to obtain SPORT and DPORT information from the recorded information of the first fragment, and taking the SIP, DIP and PROTOCOL information in the subsequent fragment and the SPORT and DPORT information obtained as the complete quintuple information.

11. The method of claim 10, wherein determining the processor for processing the packet according to the quintuple information of the packet comprises:

determining whether there is a flow table entry corresponding to the quintuple information of the packet;

if the flow table entry exists, taking a processor corresponding to a processor identifier in the flow table entry as the processor for processing the packet;

otherwise, choosing a processor from the at least two processors, creating a flow table entry according to the chosen processor and the quintuple information of the packet, and taking the chosen processor as the processor for processing the packet.

12. The method of claim 11, wherein the chosen processor is a processor that currently has the least load among the at least two processors;

wherein the method further comprises;

after choosing the processor, updating current load information of the chosen processor.

13. The method of claim 11, further comprising:

after receiving the packet, determining whether a flow to which the packet belongs has a relevant flow;

if the flow has a relevant flow, choosing a processor from the at least two processors, creating or modifying a flow table entry according to the chosen processor and quintuple information of the flow, creating or modifying another flow table entry according to the chosen processor and quintuple information of the relevant flow, and taking the chosen processor as a processor for processing the flow and the relevant flow.

14. A preprocessor to be implemented in a server, said server comprising the preprocessor and at least two processors respectively connected with the preprocessor, the preprocessor comprising:

a packet receiving module;

a packet processing module;

a flow classifying module; and

a flow table maintaining module;

wherein the packet receiving module is to receive packets from an external interface of the server, to send a fragmented packet among the received packets to the packet processing module, and to send a non-fragmented packet among the received packets to the flow classifying module;

wherein the packet processing module is to;

record when the fragmented packet is the first fragment of the fragmented packet, quintuple information and Internet Protocol Identity (IPID) information of the first fragment, and to send the first fragment to the flow classifying module;

when the fragmented packet is a subsequent fragment, to obtain Source PORT (SPORT) and Destination PORT (DPORT) information corresponding to quintuple information of the subsequent fragment, and

if the SPORT and DPORT information is obtained, to send the subsequent fragment and the SPORT and DPORT information obtained to the flow classifying module, and

if no SPORT and DPORT information is obtained, to buffer the subsequent fragment and continue obtaining the SPORT and DPORT information, and to send the subsequent fragment and the SPORT and DPORT information obtained to the flow classifying module when the SPORT and DPORT information is obtained;

wherein the flow classifying module is to receive quintuple information of a packet sent by the packet receiving module and quintuple information of a packet sent by the packet processing module to the flow table maintaining module, to receive a processor identifier corresponding to quintuple information of a packet from the flow table maintaining module, and to send the packet to a processor corresponding to the processor identifier received;

wherein the flow table maintaining module is to receive the quintuple information of a packet sent by the flow classifying module, to query whether there is a flow table entry corresponding to the quintuple information of the packet;

if the flow table entry exists, to obtain the processor identifier in the flow table entry and to send the processor identifier to the flow classifying module;

if the flow table entry does not exist, to create a flow table entry according to the quintuple information of the packet sent by the flow classifying module, wherein the flow table entry comprises the quintuple information of the packet and the processor identifier of the processor for processing the packet.

15. The preprocessor of claim 14, further comprising a packet parsing module;

wherein the packet receiving module is further to send the received non-fragmented packet to the packet parsing module;

wherein the packet processing module is further to send the fragmented packet to the packet parsing module;

wherein the packet parsing module is to parse the packet sent by the packet receiving module and the packet sent by the packet processing module;

to send, if a determination that a flow to which the packet belongs has a relevant flow is made, the respective quintuple information of flows that are relevant to the flow table maintaining module for instructing the flow table maintaining module to create respective flow table entries in which the quintuple information of the packet and quintuple information of the relevant flow correspond to a same processor identifier;

wherein the flow table maintaining module is further to receive the quintuple information sent by the packet parsing module and to create the flow table entries according to the quintuple information, wherein the quintuple information of the packet and the quintuple information of the relevant flow correspond to the same processor identifier in each of the flow table entries.