Packet processing system including a policy engine having a classification unit

• US 6,157,955 A
• Filed: 06/15/1998
• Issued: 12/05/2000
• Est. Priority Date: 06/15/1998
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Fall, Kevin, Narad, Charles E., Shankar, Pradip, Rand, Leonard M., MacAvoy, Neil, Hall, Jerry J.
• Primary Examiner(s): Harrell, Robert B.
• Application Number:
  US09/097,858
• Time in Patent Office: 904 Days
• Field of Search: 364/DIG. 1, 364/DIG. 2, 395/200.3, 370/466, 370/395, 370/468, 370/469, 370/471, 370/470, 709/200, 709/202, 709/203, 709/228
• US Class Current: 709/228
• CPC Class Codes: G06F 9/30021 Compare instructions, e.g. Greater-Than, Equal-To, MINMAX
• CPC Class Codes: G06F 9/30029 Logical and Boolean instructions, e.g. XOR, NOT
• CPC Class Codes: G06F 9/30036 Instructions to perform operations on packed data, e.g. vector, tile or matrix operations
• CPC Class Codes: G06F 9/30094 Condition code generation, e.g. Carry, Zero flag
• CPC Class Codes: G06F 9/30127 Register windows
• CPC Class Codes: G06F 9/30145 Instruction analysis, e.g. decoding, instruction word fields
• CPC Class Codes: G06F 9/30167 of immediate specifier, e.g. constants
• CPC Class Codes: G06F 9/3885 using a plurality of independent parallel functional units
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 45/16 Multipoint routing
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/627 policing
• CPC Class Codes: H04L 49/90 Buffering arrangements
• CPC Class Codes: H04L 49/901 using storage descriptor, e.g. read or write pointers
• CPC Class Codes: H04L 49/9031 Wraparound memory, e.g. overrun or underrun detection
• CPC Class Codes: H04L 49/9047 including multiple buffers, e.g. buffer pools
• CPC Class Codes: H04L 49/9094 Arrangements for simultaneous transmit and receive, e.g. simultaneous reading/writing from/to the storage element
• CPC Class Codes: H04L 69/03 Protocol definition or specification protocol conformance testing H04L1/244
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present invention relates to a general-purpose programmable packet-processing platform for accelerating network infrastructure applications which have been structured so as to separate the stages of classification and action. Network packet classification, execution of actions upon those packets, management of buffer flow, encryption services, and management of Network Interface Controllers are accelerated through the use of a multiplicity of specialized modules. A language interface is defined for specifying both stateless and stateful classification of packets and to associate actions with classification results in order to efficiently utilize these specialized modules.

Claims

1. A system comprising:

an application processor having a host interface;

a bus bridge coupled to said host interface; and

a policy engine coupled to said bus bridge to classify packets according to at least one of a plurality of application-specific classification policies and to enable at least one of a plurality of actions to be performed on said classified packets responsive to said packet classifications.

2. The system of claim 1, wherein said policy engine comprises:

at least one media access controller to receive and/or transmit said packets; and

at least one classification engine to classify said packets.

3. The system of claim 2, wherein said classification engine comprises a microprogrammed processor to accelerate predicate analysis in network infrastructure applications.

4. The system of claim 3, wherein said microprogrammed processor selectively processes each of said packets by performing thereon at least a subset of packet-based operations including:

packet header parsing, and

hash-table lookups.

5. The system of claim 2, wherein said at least one of a plurality of actions comprise causing at least one of said classified packets to be returned to said classification engine to be reclassified.

6. The system of claim 1, further comprising a plurality of data buffers to store said packets and classification information about said packets.

7. The system of claim 6, wherein said policy engine further comprises a plurality of producer/consumer ring arrays to store at least one pointer to at least one of said plurality of data buffers.

8. The system of claim 1, wherein said classification policies are dynamically supplied by an application executing on said application processor.

9. The system of claim 1, wherein said policy engine further comprises at least one other policy engine coupled to said bus bridge.

10. In a network switching device, a policy engine comprising:

at least one media access controller to receive and/or transmit packets between said policy engine and a host;

at least one classification engine to classify said packets according to at least one of a plurality of application-specific classification policies; and

a plurality of data buffers coupled to said at least one media controller and said at least one classification engine to store said packets and facilitate said classifications.

11. The policy engine of claim 10, wherein said classification engine comprises a microprogrammed processor to accelerate predicate analysis in network infrastructure applications.

12. The policy engine of claim 11, wherein said microprogrammed processor selectively processes each of said packets by performing at least a subset of a plurality of packet-based operations including:

packet header parsing, and

hash-table lookups.

13. The policy engine of claim 10, wherein said application-specific classification policies are provided by said host.

14. The policy engine of claim 10, further comprising an embedded processor to provide said application-specific classification policies.

15. The policy engine of claim 10, further comprising a plurality of producer/consumer ring arrays to said at least one pointer to at least one of said plurality of data buffers.

16. The policy engine of claim 10, wherein said classification packets are returned to classification engine to be reclassified.

17. An article of manufacture comprising:

a recordable medium having recorded thereon a plurality of programing instructions for use to program a computing device to classify packets stored in at least one of a plurality of data buffers according to at least one of a plurality of application-specific classification packets.

18. The article of manufacture of claim 17, wherein said programing instructions for use to program said computing device to classify said packets further comprise programing instructions to enable said computing device to:

retrieve from one of a plurality of ring arrays a packet buffer pointer corresponding to a packet to be classified;

retrieve at least a portion of said packet to be classified indicated by said packet buffer pointer;

execute a plurality of application-specific operations to extract information from said packet; and

store results of said operations in a designated result area of said packet.

19. The article of manufacture of claim 18, wherein said programming instructions for use to program said computing device to classify said packets further comprise programing instructions to enable said computing device to:

generate a hash key from said extracted information and utilize said hash key to perform a lookup in a hash table to identify a record associated with at least one packet matching said key.

20. The article of manufacture of claim 17, wherein said application-specific classification policies are dynamically provided by a host processor.

21. The article of manufacture of claim 17, wherein said application-specific classification policies are dynamically provided by said computing device.

22. A method comprising:

storing packets in at least one of a plurality of data buffers; and

classifying said packets stored in said at least one of a plurality of data buffers according to at least one of a plurality of application-specific classification policies.

23. The method of claim 22, wherein said classifying packets comprises:

retrieving from one of a plurality of producer/consumer ring arrays a packet buffer pointer corresponding to a packet to be classified;

retrieving at least a portion of said packet to be classified indicated by said packet buffer pointer;

executing a plurality of application-specific operations to extract information from said packet; and

storing results of said operations in a designated result-area of said packet.

24. The method of claim 23, further comprising:

generating a hash key from said extracted information and utilizing said hash key to perform a lookup in a hash table to identify a record associated with at least one packet matching said key.

25. The method of claim 22, wherein said application-specific classification policies are dynamically provided by a host processor.

26. The method of claim 22, wherein said application-specific classification policies are dynamically provided by an embedded processor.