Systems And Methods To Forward Packets Not Passed By Criteria-Based Filters In Packet Forwarding Systems
First Claim
1. A packet forwarding system for network packets, comprising:
- one or more servers hosting one or more virtual host hardware systems operating to provide one or more virtual machine platforms;
wherein the one or virtual machine platforms comprise;
input ports having receive packets from one or more network sources as inputs;
output ports having send packets to one or more network destinations as outputs;
filter engines coupled to determine how packets are forwarded from the input ports to the output ports based upon packet forwarding rules;
a user interface to allow configuration of filters, the filters comprising at least one of;
a first set of filters comprising one or more pass-by-criteria (PBC) filters and a pass unmatched PBC filter coupled to a common input port;
each PBC filter passing received packets that match at least one criterion relating to the received packets from the common input port to at least one output port; and
the pass unmatched PBC filter passing received packets that do not match any of the PBC filters from the common input port to at least one output port;
ora second set of filters comprising one or more deny by-criteria (DBC) filters and a pass matched DBC filter coupled to a common input port;
each DBC filter passing received packets that do not match at least one criterion relating to the received packets from the common input port to at least one output port; and
the pass matched DBC filter passing received packets that match all of the DBC filters from the common input port to at least one output port; and
a filter processor having packet forwarding rules as an output applied to the filter engines, the packet forwarding rules being based upon the filters.
3 Assignments
0 Petitions
Accused Products
Abstract
Systems and methods are disclosed to forward packets not passed by criteria-based filters in packet forwarding systems. The disclosed embodiments include one or more Not Passed By Criteria (NPBC) filters that are defined for input ports along with one or more criteria-based filters, such as for example, Pass by Criteria (PBC) filters and/or Deny by Criteria filters (DBC), that forward packets not passed by these criteria-based filters. NPBC filters include, for example, Pass Unmatched PBC filters associated with PBC filters and configured to forward packets not passed by PBC filters and/or Pass Matched DBC filters associated with DBC filters and configured to forward packets not passed by DBC filters. Using one or more NPBC filters within the disclosed embodiments, packet data that is not being passed along to output ports by the criteria-based filters can be easily passed to one or more designated output ports.
-
Citations
20 Claims
-
1. A packet forwarding system for network packets, comprising:
-
one or more servers hosting one or more virtual host hardware systems operating to provide one or more virtual machine platforms; wherein the one or virtual machine platforms comprise; input ports having receive packets from one or more network sources as inputs; output ports having send packets to one or more network destinations as outputs; filter engines coupled to determine how packets are forwarded from the input ports to the output ports based upon packet forwarding rules; a user interface to allow configuration of filters, the filters comprising at least one of; a first set of filters comprising one or more pass-by-criteria (PBC) filters and a pass unmatched PBC filter coupled to a common input port; each PBC filter passing received packets that match at least one criterion relating to the received packets from the common input port to at least one output port; and the pass unmatched PBC filter passing received packets that do not match any of the PBC filters from the common input port to at least one output port;
ora second set of filters comprising one or more deny by-criteria (DBC) filters and a pass matched DBC filter coupled to a common input port; each DBC filter passing received packets that do not match at least one criterion relating to the received packets from the common input port to at least one output port; and the pass matched DBC filter passing received packets that match all of the DBC filters from the common input port to at least one output port; and a filter processor having packet forwarding rules as an output applied to the filter engines, the packet forwarding rules being based upon the filters. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A method to forward network packets within a packet forwarding system, comprising:
-
operating one or more servers to host one or more virtual host hardware systems to provide one or more virtual machine platforms; and with the one or virtual machine platforms; allowing a user to define filters through a user interface for a packet forwarding system, the filters comprising at least one of; a first set of filters comprising one or more pass-by-criteria (PBC) filters and a pass unmatched PBC filter coupled to a common input port, each PBC filter passing received packets that match at least one criterion relating to the received packets from the common input port to at least one output port, and the pass unmatched PBC filter passing received packets that do not match any of the PBC filters from the common input port to at least one output port;
ora second set of filters comprising one or more deny-by-criteria (DBC) filters and a pass matched DBC filter coupled to a common input port, each DBC filter passing received packets that do not match at least one criterion relating to the received packets from the common input port to at least one output port, and the pass matched DBC filter passing received packets that match all of the DBC filters from the common input port to at least one output port; generating packet forwarding rules based upon the filters; applying the packet forwarding rules to filter engines within the packet forwarding system, the filter engines determining how packets are forwarded between input ports and output ports within the packet forwarding system; receiving, with the common input port, packets from one or more network sources; and outputting the packets based upon the filters. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
-
Specification