System and method for processing network packet flows

• US 7,095,715 B2
• Filed: 07/02/2001
• Issued: 08/22/2006
• Est. Priority Date: 07/02/2001
• Status: Expired due to Term

• Current Assignee: Trend Micro Inc.
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Willebeek-LeMair, Marc, Werner, Jon H., Smith, Brian C., Kolbly, Donovan M., Cox, Dennis J., Webster, Francis S. III, Buckman, Charles R., Blackard, Joe Wayne, Cantrell, Craig S.
• Primary Examiner(s): To, Doris H.
• Assistant Examiner(s): Moore, Ian N.
• Application Number:
  US09/897,189
• Publication Number:
  US 20030012147A1
• Time in Patent Office: 1,877 Days
• Field of Search: 370/389, 370/392, 370/400, 370/401, 370/428, 370/474, 370/466, 370/412, 370/230, 370/235, 370/263, 713/150, 713/153, 713/154, 713/160, 709/224, 709/230, 709/236
• US Class Current: 370/230
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1485 Tariff-related aspects
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/2416 Real-time traffic
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/2475 for supporting traffic characterised by the type of applications
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures

Abstract

A system and method provides a broadband network node for a best effort network such as the Internet or intranets which supports the inexpensive and rapid deployment of services to the best efforts network. Separate data path and control path mechanisms allow high-speed data transfers with parallel processing flows for the data path that are controlled across data flows by the control path. Packets are classified, modified and shaped to enable the service on the network with an accountant to track packet traffic for control and billing purposes. A series of processing blades perform a modification function for each blade that processes packets according to classifications. The processing blades are modular and scalable for insertion in the broad band switch to rapidly adapt the broadband network node for new services.

Claims

1. A broadband Internet node comprising:

a classify engine interfaced with the Internet, the classify engine operable to accept packets from the Internet and determine classification information for each packet, wherein the classify engine is operable to detect a SYN packet associated with a new TCP connection;

a modify/process engine interfaced with the classify engine, the modify/process engine having plural ports, each port having an associated function; and

a controller interfaced with the classify engine and the modify/process engine, the controller programming the classify engine to route each packet to a predetermined port of the modify/process engine based on the classification information of the packet;

wherein the controller programs the classify engine with a dataflow program that determines classification information for the packets and detects the host/port quadruple of the new TCP connection and creates a new queue for the new TCP connection.

2. The node of claim 1 wherein the classify engine is further operable to detect packets associated with an FTP data stream and the controller is further operable to program the classify engine with a new dataflow program that classifies the FTP data stream according to the host/port quadraple of the FTP connection.

3. The node of claim 1 wherein the classify engine is further operable to monitor DHCP requests and responses to extract MAC and IP address mapping, and the controller is further operable to program the classify engine with rules to control traffic with IP address information.

4. The node of claim 1 wherein the classify engine is further operable to monitor DNS requests and responses to associate traffic with an IP address and the controller is further operable to program the classify engine with rules to control traffic with IP address information.

5. A method for routing Internet packets, the method comprising:

classifying the packets into one or more packet flows according to classification rules;

routing each packet flow to a predetermined port of a processor, each port having an associated function, so that the packets flow through the processor as a data path;

programming the classification rules and functions through a control path that looks across packet flows of the data path;

detecting a new packet type; and

performing reflective programming on a dataflow program to classify the new packet type;

wherein the new packet type comprises a new TCP connection, detecting comprises detecting a SYN packet associated with the new TCP connection, and performing reflective programming comprises programming a dataflow program that classifies the host/port quadruple of the new TCP connection.