Scalable network apparatus for content based switching or validation acceleration

• US 7,512,711 B1
• Filed: 05/08/2000
• Issued: 03/31/2009
• Est. Priority Date: 04/13/2000
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Malo, John A., Marlatt, David A., Abjanic, John B.
• Primary Examiner(s): NGUYEN, THANH T
• Application Number:
  US09/566,800
• Time in Patent Office: 3,249 Days
• Field of Search: 709/227, 709/206, 709/200, 709/224, 709/246, 714/43, 345/764, 365/195, 705/41
• US Class Current: 709/246
• CPC Class Codes: A61B 5/6852 Catheters
• CPC Class Codes: G06F 16/986 Document structures and storage, e.g. HTML extensions
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 47/28 in relation to timing considerations
• CPC Class Codes: H04L 47/31 by tagging of packets, e.g. using discard eligibility [DE] bits
• CPC Class Codes: H04L 47/33 using forward notification
• CPC Class Codes: H04L 49/252 Store and forward routing
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/101 based on network conditions
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/562 Brokering proxy services
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A network apparatus is provided that may include one or more security accelerators. The network apparatus also includes a plurality of network units cascaded together. According to one embodiment, the plurality of network units comprise a plurality of content based message directors, each to route or direct received messages to one of a plurality of application servers based upon the application data in the message. According to another embodiment, the plurality of network units comprise a plurality of validation accelerators, each validation accelerator to validate at least a portion of a message before outputting the message.

Claims

1. A network apparatus comprising:

at least one security accelerator to perform encryption or decryption functions on messages;

a plurality of content based message directors cascaded together, at least one of the content based message directors coupled to the security accelerator, each content based message director to include a spillover feature that can be enabled to spill received messages over from one content based message director to another content based message director, the spillover feature to determine for each content based message director whether the content based message director can process the message based on a loading criteria, each content based message director to route or direct received messages to one of a plurality of application servers based upon XML application data in the message.

2. The network apparatus of claim 1, the loading criteria further comprising at least one of:

whether the content based message director can process the incoming message within a predetermined time;

whether the content based message director has sufficient resources to process the message;

or

whether a traffic load at the content based message director exceeds a threshold.

3. A network apparatus comprising:

at least one security accelerator to perform encryption or decryption functions on messages;

a plurality of validation accelerators cascaded together, at least one of the validation accelerators coupled to the security accelerator, each validation accelerator to include a spillover feature that can be enabled to spill received messages over from one content based message director to another content based message director, the spillover feature to determine for each validation accelerator whether the validation accelerator can process the message based on a loading criteria, each validation accelerator to validate at least a portion of a message and remove validation instructions from the message and/or add a pre-validation indication to the message before outputting the message.

4. The network apparatus of claim 3, the loading criteria further comprising at least one of:

whether the validation accelerator can process the incoming message within a predetermined time;

whether the validation accelerator has sufficient resources to process the message;

or

whether a traffic load at the validation accelerator exceeds a threshold.

5. An apparatus comprising a plurality of validation accelerators cascaded together to validate documents, each validation accelerator to include a spillover feature that can be enabled to spill received messages over from one content based message director to another content based message director, the spillover feature to determine for each validation accelerator whether the validation accelerator can process the message based on a loading criteria, each validation accelerator to receive a message and determine whether the message should be validated, each validation accelerator to validate at least a portion of the received message and to provide an indication in the message that the message has been validated if the validation accelerator determines that the message should be validated, otherwise the validation accelerator to forward the message on to a next validation accelerator or other device without further processing.

6. The apparatus of claim 5 wherein the validation accelerators comprise XML validation accelerators for validating XML documents.

7. The apparatus of claim 5, the loading criteria further comprising at least one of:

whether the validation accelerator can process the incoming message within a predetermined time;

whether the validation accelerator has sufficient resources to process the message;

or

whether a traffic load at the validation accelerator exceeds a threshold.