Integrated access point network device

• US 7,149,222 B2
• Filed: 12/05/2000
• Issued: 12/12/2006
• Est. Priority Date: 12/21/1999
• Status: Expired due to Term

• Current Assignee: Barracuda Networks Incorporated
• Original Assignee: Converged Access, Inc.
• Inventors: Romrell, David, Wiryaman, Santa, Sukonnik, Vladimir
• Primary Examiner(s): To, Doris H.
• Assistant Examiner(s): Tsegaye, Saba
• Application Number:
  US09/730,513
• Publication Number:
  US 20010030970A1
• Time in Patent Office: 2,198 Days
• Field of Search: 370229-235, 370/236, 370237-238, 370400-401, 370411-414, 370/416, 370418-419, 370/421, 370428-429, 370/465, 370468-469
• US Class Current: 370/401
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2876 Handling of subscriber policies group policies management H04L41/0893
• CPC Class Codes: H04L 12/4604 LAN interconnection over a backbone network, e.g. Internet, Frame Relay
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/2433 Allocation of priorities to traffic types
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]

Abstract

A communication device integrates traffic monitoring, policy configuration and enforcement, and proxy services within the device. The policies can affect both prioritization of data as well as allocation of communication bandwidth. Data packets that are accepted at the device are classified according to a set of defined classes and are transmitted through the device according to a policy for prioritization and bandwidth allocation for the classes. Optionally, some of the packets are passed to a proxy application hosted in the communication device. The device functions as a link-layer bridge, thereby allowing the device to be inserted into a data path without reconfiguring network layer software at devices that use that data path. The device includes operating modes in which packets are passed through the device without modification.

Claims

1. A method for processing communication in a device operating in a first mode, the device having a first interface and a second interface, comprising:

accepting data packets at the first interface;

controlling a rate of arrival of the data packets at the first interface, the first interface configured to enable bi-directional communication, the controlling including sending control information from the device to at least one of a plurality of other devices to effect the rate of arrival;

for each accepted packet, identifying one of a plurality of classes of data flows associated with said packet;

for at least some of the accepted packets, queuing said packets according to the identified class for said packet; and

transmitting the accepted packets through the second interface, the second interface configured to enable bi-directional communication, the transmitting and the controlling both being in accordance with a policy associated with the plurality of classes of data flows.

2. The method of claim 1 wherein identifying the class of data flows includes examining network layer addressing data in the accepted packet.

3. The method of claim 2 wherein examining the network layer addressing data includes identifying destination network layer addresses of the packets.

4. The method of claim 2 wherein identifying the class of data flows includes examining application layer data in the packets.

5. The method of claim 1 further comprising, for at least some other of the accepted packets, passing the accepted packets to a proxy application hosted in the communication device.

6. The method of claim 5 wherein at least some of the accepted packets that are passed to the proxy application each include a network layer destination address of a device other than the communication device and that is accessible through the second interface.

7. The method of claim 5 wherein information in the packets passed to the proxy application is transmitted from the second interface in packets with source network layer addresses associated with the communication device.

8. The method of claim 5 wherein information in the packets passed to the proxy application is transmitted from the second interface in packets with source network layer addresses equal to the source network layer addresses of corresponding accepted packets.

9. The method of claim 5 further comprising, for the packets that are passed to the proxy application, queuing records associated with the accepted packets, and transmitting packets from the proxy application according to the queued records.

10. The method of claim 5 wherein the proxy application performs a data multiplexing function.

11. The method of claim 5 wherein the proxy application performs a data compression function.

12. The method of claim 5 wherein the proxy application performs a voice-over-IP function.

13. The method of claim 1 wherein the communication device communicates with devices over the first interface and the second interface as a data link layer bridge.

14. The method of claim 13 wherein the accepted packets are transmitted without modification of their source and destination network layer addresses.

15. The method of claim 1 further comprising accepting a specification of the policy using a graphical user interface.

16. The method of claim 1 further comprising displaying data related to utilization of bandwidth allocated to the classes of data flows on the graphical user interface.

17. The method of claim 1 further comprising operating the communication device in a second mode, including passing packets between the first interface and the second interface without modification.

18. The method of claim 17 wherein operating in the second mode further includes monitoring the packets passing between the first interface and the second interface.

19. The method of claim 18 wherein monitoring the packets includes identifying a class of data flows associated with each packet.

20. The method of claim 1 further comprising operating the communication device in a third mode, including directly connecting the first interface to the second interface.

21. The method of claim 20 further comprising switching to the third mode of operation in the event of a fault at the communication device.

22. The method of claim 1 wherein the policy includes at least one of a priority and a bandwidth allocation for one of the classes of data flows.

23. The method of claim 22 wherein controlling the rate of arrival of packets includes controlling the rate according to the policy associated with the classes of data flows.

24. The method of claim 23 wherein controlling the rate of arrivals of packets includes rate shaping data flows associated with the accepted packets.

25. The method of claim 1, wherein the control information is sent from the device to at least one of the plurality of other devices over the first interface.

26. The method of claim 1, wherein controlling the rate of arrival of data packets comprises:

controlling a window size of a class of data flows, the class being one of the plurality of classes.

27. The method of claim 26, wherein controlling the window size of a class of data flows comprises:

determining a portion of the window size to be allocated to each of the data flows of the class.

28. A communication device comprising:

a plurality of network interfaces, including a first network interface, and a second network interface, each of the first network interface and the second network interface being configured to enable bi-directional communication, wherein the communication device is configured to pass packets belonging to a plurality of classes of data flows between the network interfaces according to a configurable policy;

a plurality of queues, each associated with a different one of the classes of data flows, for accepting packets from the first network interface;

storage for configuration data, including storage for the configurable policy for the classes of data flows;

a rate shaper for controlling a rate of arrival of packets at the first network interface according to the configurable policy, the controlling including sending control information from the device to at least one of a plurality of other devices to effect the rate of arrival; and

a scheduler for determining when to dequeue data packets queued in the plurality of queues according to the configurable policy for the classes of data flows.

29. The device of claim 28 wherein the device includes the capability to functions as a data link layer bridge when passing data packets between the network interfaces.

30. The device of claim 28 further comprising a proxy application for processing data accepted at the first interface.

31. The device of claim 30 further comprising a cache for servicing requests in data processed by the proxy application.

32. The device of claim 28 further comprising a bypass switch for coupling the first interface to the second interface in a second operating mode.

33. The device of claim 32 wherein the bypass switch includes a hub for coupling the first interface to both the second interface and to a processor of the communication device, whereby data passing between the first interface and the second interface can be monitored by the communication device without modifying the communication.

34. The device of claim 28 wherein the configurable policy for a data flow includes at least one of a priority and a bandwidth allocation.