Asymmetric packet switch and a method of use

• US 7,424,018 B2
• Filed: 05/05/2005
• Issued: 09/09/2008
• Est. Priority Date: 05/05/2004
• Status: Active Grant

• Current Assignee: Gigamon Incorporated (Elliott Capital Advisors LP)
• Original Assignee: Gigamon Systems LLC (Elliott Capital Advisors LP)
• Inventors: Won, King L., Ho, Ted, Leong, Patrick Pak Tak, Gallatin, Tom, Miu, Denny K.
• Primary Examiner(s): Ho; Duc C
• Application Number:
  US11/123,377
• Publication Number:
  US 20050265364A1
• Time in Patent Office: 1,223 Days
• Field of Search: 370/41, 370/392, 370/389, 370/401
• US Class Current: 370/389
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/4645 Details on frame tagging routing of packets H04L45/00; support for virtual LAN H04L49/354
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/0823 Errors, e.g. transmission errors
• CPC Class Codes: H04L 43/0882 Utilisation of link capacity
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 43/18 Protocol analysers
• CPC Class Codes: H04L 49/201 Multicast operation; Broadcast operation
• CPC Class Codes: H04L 49/351 for local area network [LAN], e.g. Ethernet switches
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]
• CPC Class Codes: H04L 49/555 Error detection
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

The present invention relates to a packet switch and a packet switching method. An example embodiment of the present invention comprises at least three network ports, at least one instrument port, a mux-switch, a packet switch fabric, and an address table. The embodiment updates the address table to include the source address of each ingress packet of each network port and associate the source address with that network port. The mux-switch routes the ingress packet traffic of each network port according to the identity of the network port so that at least a copy of the packet traffic of one of the network ports is routed to an instrument port. The packet switch fabric routes the packets from the instrument ports to the network ports according the destination address of the packet and the identity of the network port that is associated with the destination address as recorded in the address table.

Claims

1. A method of operating a packet switch connected to a packet-switching network, wherein the packet switch includes a plurality of ports, wherein a first port is configured as a first network port connected to the packet-switching network, the method comprising:

a) configuring a second port on the packet switch to operate as a first instrument port connected to a first network instrument;

b) configuring a third port on the packet switch to operate as a second instrument port connected to a second network instrument;

c) establishing a logical connection between the first network port and the first and second instrument ports; and

d) for ingress packets received from the packet-switching network through the first network port, distributing a first portion of the ingress packets to the first instrument port and a second portion of the ingress packets to the second instrument port, wherein the first instrument port operates at a first line rate, wherein the second instrument port operates at a second line rate, wherein the first line rate is higher than the second line rate, wherein the first instrument port and the second instrument port are on the same packet switch, and wherein d) comprises;

distributing more ingress packets per unit time to the first instrument port than the second instrument port.

2. The method of claim 1, wherein the ingress packets are distributed based on media access control addresses and internet protocol addresses.

3. The method of claim 1, wherein the ingress packets are distributed based on packet contents.

4. The method of claim 1, wherein c) and d) comprise:

bundling the first and second instrument ports together into a logical port; and

distributing the ingress packets using a deterministic hashing algorithm.

5. The method of claim 4, wherein the deterministic hashing algorithm is based on media access control addresses and internet protocol address.

6. The method of claim 1, further comprising:

assigning bandwidth weight factors to the first and second instrument ports.

7. The method of claim 6, wherein assigning bandwidth weight factors comprises:

assigning a first bandwidth weight factor to the first instrument port to operate the first instrument port at a first line rate; and

assigning a second bandwidth weight factor to the second instrument port to operate the second instrument port at a second line rate, wherein the first line rate is higher than the second line rate.

8. The method of claim 1 further comprising:

monitoring packet queues of the first and second instrument ports; and

distributing ingress packets to the first and second instruments based on the monitored status of the packet queues of the first and second instrument ports.

9. The method of claim 8, further comprising:

turning on a quality of service engine of the packet switch to monitor the packet queues of the first and second instrument ports.

10. A packet switch configured to be connected to a packet-switching network and a network instrument, the packet switch comprising:

a plurality of ports, wherein a first port is configured as a first network port to be connected to the packet-switching network; and

a computer-readable medium containing computer-executable instructions to operate the packet switch, comprising instructions to;

a) configure a second port on the packet switch to operate as a first instrument port to be connected to a first network instrument;

b) configure a third port on the packet switch to operate as a second instrument port to be connected to a second network instrument;

c) establish a logical connection between the first network port and the first and second instrument ports; and

d) for ingress packets received from the packet-switching network through the first network port, distribute a first portion of the ingress packets to the first instrument port and a second portion of the ingress packets to the second instrument port, wherein the first instrument port operates at a first line rate, wherein the second instrument port operates at a second line rate, wherein the first line rate is higher than the second line rate wherein the first instrument port and the second instrument port are on the same packet switch, and wherein d) comprises instructions to;

distribute more ingress packets per unit time to the first instrument port than the second instrument port.

11. The packet switch of claim 10, wherein the ingress packets are distributed based on media access control addresses and internet protocol addresses.

12. The packet switch of claim 10, wherein the ingress packets are distributed based on packet contents.

13. The packet switch of claim 10, wherein c) and d) comprise instructions to:

bundle the first and second instrument ports together into a logical port; and

distribute the ingress packets using a deterministic hashing algorithm.

14. The packet switch of claim 13, wherein the deterministic hashing algorithm is based on media access control addresses and internet protocol address.

15. The packet switch of claim 10, wherein the computer-readable medium contains further instructions to:

assign bandwidth weight factors to the first and second instrument ports.

16. The packet switch of claim 15, wherein instructions to assign bandwidth weight factors comprises instructions to:

assign a first bandwidth weight factor to the first instrument port to operate the first instrument port at a first line rate; and

assign a second bandwidth weight factor to the second instrument port to operate the second instrument port at a second line rate, wherein the first line rate is higher than the second line rate.

17. The packet switch of claim 10, wherein the computer-readable medium contains further instructions to:

monitor packet queues of the first and second instrument ports; and

distribute ingress packets to the first and second instruments based on the monitored status of the packet queues of the first and second instrument ports.

18. The packet switch of claim 17, wherein the computer-readable medium contains further instructions to:

turn on a quality of service engine of the packet switch to monitor the packet queues of the first and second instrument ports.

19. A computer-readable medium containing computer-executable instructions to operate a packet switch configured to be connected to a packet-switching network and network instruments, wherein the packet switch includes a plurality of ports, wherein a first port is configured as a first network port to be connected to the packet-switching network, comprising instructions to:

a) configure a second port on the packet switch to operate as a first instrument port to be connected to a first network instrument;

b) configure a third port on the packet switch to operate as a second instrument port to be connected to a second network instrument;

c) establish a logical connection between the first network port and the first and second instrument ports; and

d) for ingress packets received from the packet-switching network through the first network port, distribute a first portion of the ingress packets to the first instrument port and a second portion of the ingress packets to the second instrument port, wherein the first instrument port operates at a first line rate, wherein the second instrument port operates at a second line rate, wherein the first line rate is higher than the second line rate wherein the first instrument port and the second instrument port are on the same packet switch, and wherein d) comprises instructions to;

distribute more ingress packets per unit time to the first instrument port than the second instrument port.

20. The computer-readable medium of claim 19, wherein the ingress packets are distributed based on media access control addresses and internet protocol addresses.

21. The computer-readable medium of claim 19, wherein the ingress packets are distributed based on packet contents.

22. The computer-readable medium of claim 19, wherein c) and d) comprise instructions to:

bundle the first and second instrument ports together into a logical port; and

distribute the ingress packets using a deterministic hashing algorithm.

23. The computer-readable medium of claim 22, wherein the deterministic hashing algorithm is based on media access control addresses and internet protocol address.

24. The computer-readable medium of claim 19 wherein the computer-readable medium contains further instructions to:

assign bandwidth weight factors to the first and second instrument ports.

25. The computer-readable medium of claim 24, wherein instructions to assign bandwidth weight factors comprises instructions to:

assign a first bandwidth weight factor to the first instrument port to operate the first instrument port at a first line rate; and

assign a second bandwidth weight factor to the second instrument port to operate the second instrument port at a second line rate, wherein the first line rate is higher than the second line rate.

26. The computer-readable medium of claim 19, wherein the computer-readable medium contains further instructions to:

monitor packet queues of the first and second instrument ports; and

distribute ingress packets to the first and second instruments based on the monitored status of the packet queues of the first and second instrument ports.

27. The computer-readable medium of claim 26, wherein the computer-readable medium contains further instructions to:

turn on a quality of service engine of the packet switch to monitor the packet queues of the first and second instrument ports.