NETFLOW COLLECTION AND EXPORT OFFLOAD USING NETWORK SILICON
First Claim
1. A method for collecting Netflow data via functionality implemented in a hardware component of a network device, the method comprising:
- programming the hardware component with a plurality of 7-tuple filters, each 7-tuple filter defining a set of 7 packet header field values defining a respective Netflow;
detecting, via the hardware component, whether a packet belongs to a given Netflow using the plurality of 7-tuple filters;
if a 7-tuple filter match is detected, adding data associated with the packet to Netflow data for the Netflow corresponding to the 7-tuple filter match;
collecting, via the hardware component, Netflow data for a plurality of Netflows; and
forwarding the Netflow data that is collected to one of a Netflow export agent and a Netflow collector.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods and apparatus for collection of Netflow data and export offload using network silicon. In accordance with aspects of the embodiments, the Netflow export and collection functions are offloaded to the network silicon in the chipset, System on a Chip (SoC), backplane switch, disaggregated switch, virtual switch (vSwitch) accelerator, and Network Interface Card/Controller (NIC) level. For apparatus implementing virtualized environments, one or both of the collection and export functions are implemented at the Physical Function (PF) and/or Virtual Function (VF) layers of the apparatus.
-
Citations
25 Claims
-
1. A method for collecting Netflow data via functionality implemented in a hardware component of a network device, the method comprising:
-
programming the hardware component with a plurality of 7-tuple filters, each 7-tuple filter defining a set of 7 packet header field values defining a respective Netflow; detecting, via the hardware component, whether a packet belongs to a given Netflow using the plurality of 7-tuple filters; if a 7-tuple filter match is detected, adding data associated with the packet to Netflow data for the Netflow corresponding to the 7-tuple filter match; collecting, via the hardware component, Netflow data for a plurality of Netflows; and forwarding the Netflow data that is collected to one of a Netflow export agent and a Netflow collector. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. An apparatus, comprising:
-
a network device, including a plurality of ports, the network device including embedded logic for performing operations relating to the collection of Netflow data for packets passing through at least one of the plurality of ports when the apparatus is operating, the operations including, detecting whether a packet belongs to a given Netflow using a plurality of 7-tuple filters; if a 7-tuple filter match is detected, adding data associated with the packet to Netflow data for the Netflow corresponding to the 7-tuple filter match; collecting Netflow data for a plurality of Netflows; and forwarding the Netflow data that is collected to one of a Netflow export agent and a Netflow collector. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20, 21)
-
-
22. An apparatus comprising:
-
At least one processor, having a plurality of cores; memory, operatively coupled to the plurality of cores; a storage device, in which software instructions are stored; and a physical network switch communicatively coupled to the processor, wherein the software instructions are configured to be executed on one or more of the plurality of cores to perform operations including, implementing a hypervisor configured to host a plurality of virtual machines (VMs) implementing a virtual switch having a plurality of virtual ports communicatively coupled to the plurality of VMs, which is configured to enable network traffic to be forwarded between the VMs without leaving the apparatus; configuring at least one virtual port in the virtual switch with a plurality of 7-tuple filters, each 7-tuple filter defining a set of 7 packet header field values defining a respective Netflow; detecting whether a packet received at or sent out from the at least one virtual port belongs to a given Netflow using the plurality of 7-tuple filters; if a 7-tuple filter match is detected, adding data associated with the packet to Netflow data for the Netflow corresponding to the 7-tuple filter match; and collecting Netflow data for a plurality of Netflows traversing the virtual switch. - View Dependent Claims (23, 24, 25)
-
Specification