Method and system for handling connection setup in a network

• US 7,636,323 B2
• Filed: 06/14/2006
• Issued: 12/22/2009
• Est. Priority Date: 06/14/2005
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Zur, Uri El
• Primary Examiner(s): Pezzlo; John
• Application Number:
  US11/452,645
• Publication Number:
  US 20060281451A1
• Time in Patent Office: 1,287 Days
• Field of Search: 370/252, 370/278, 370/395.2
• US Class Current: 370/252
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 80/06 Transport layer protocols, e.g. TCP [Transport Control Protocol] over wireless transmission control protocol/Internet protocol [TCP/IP] or user datagram protocol [UDP] H04L69/16

Abstract

Certain embodiments of a method and system for handling connection setup in a network may comprise a host that generates connection acceptance criteria and/or a services list that may be transferred to a network interface hardware device for determining whether a remote peer connection request may be accepted. The network interface hardware device may generate connection primitives to complete the network connection setup after accepting the connection request. The network interface hardware device may wait for a response from the host before generating the connection primitives. The network interface hardware device may copy the host during connection setup. The host may provide and indication to the network interface hardware device to deny the connection request or to drop the connection after the connection has been setup. The network interface hardware device may maintain a connection state generated when the connection setup is completed.

Claims

1. A method for data communication, the method comprising:

communicating one or both of a services list and a connection acceptance criteria from a host to a network interface hardware device; and

subsequent to receiving a connection request from a remote peer, determining whether to allow establishment of a network connection by a network interface hardware device based on said communicated one or both of said services list and said connection acceptance criteria, wherein said determination is made prior to or during connection set up, and a connection state that corresponds to said network connection set up is maintained by said network interface hardware device.

2. The method according to claim 1, wherein said services list comprises one or more of a local network address, a local transport address, a network protocol, and a transport protocol.

3. The method according to claim 1, comprising generating primitives for establishing said network connection in said network interface hardware device.

4. The method according to claim 1, comprising presenting to said host, connection request primitives received by said network interface hardware device to utilize one or more of a host resident packet filtering, a host denial of service mitigation service, and a host security and cryptography service.

5. The method according to claim 1, comprising presenting to said host a network connection name by said network interface hardware device to utilize one or more of a host resident packet filtering, a host denial of service mitigation service, and a host security and cryptography service.

6. The method according to claim 1, comprising presenting to said host a network connection name and additional connection parameters by said network interface hardware device to utilize one or more of a host resident packet filtering, a host denial of service mitigation service, and a host security and cryptography service.

7. The method according to claim 1, comprising receiving an indication by said network interface hardware device from said host regarding results from one or more of a host resident packet filtering, a host denial of service mitigation service, and a host security and cryptography service.

8. The method according to claim 1, comprising, subsequent to receiving an indication from said host rejecting said network connection, discontinuing exchanging network primitives and discarding associated connection state information.

9. The method according to claim 1, comprising, subsequent to said host indicating rejection of a network connection, dropping an established network connection and discarding associated connection state information.

10. The method according to claim 4, comprising presenting said connection request primitives to said host during network connection set up, before a reply is sent to a remote peer by sending a connection set up primitive, or after said network connection has been set up.

11. The method according to claim 5, comprising presenting said network connection name to said host during network connection set up, before a reply is sent to a remote peer by sending a connection set up primitive, or after said network connection has been set up.

12. The method according to claim 5, comprising presenting said network connection name and additional parameters to said host during network connection set up, before a reply is sent to a remote peer by sending a connection setup primitive, or after said network connection has been set up.

13. The method according to claim 1, comprising storing information by said network interface hardware device in a host memory, wherein said stored information comprises one or more of connection request primitives received from a remote peer, a connection set up state for a non-established network connection, and a connection state for an established network connection.

14. The method according to claim 13, wherein said stored information utilizes shared memory within said host memory.

15. The method according to claim 13, wherein said stored information utilizes a portion of said host memory only available to said network interface hardware device.

16. The method according to claim 13, wherein said stored information resides on said network interface hardware device.

17. The method according to claim 1, comprising tearing down an established network connection by said network interface hardware device based on an indication from said host, a fatal network event, or a signal from a remote peer.

18. The method according to claim 17, comprising making a connection state available to said host by said network interface hardware device to enable said host to tear down said established network connection.

19. The method according to claim 1, wherein said communicated acceptance criteria comprises packet filtering operations.

20. The method according to claim 1, wherein said communicated acceptance criteria comprises security operations.

21. A system for data communication, the system comprising:

a network interface hardware device that is communicatively coupled to a host; and

subsequent to receiving a connection request from a remote peer, said network interface hardware device is operable to determine whether to allow establishment of a network connection based on one or both of a services list and a connection acceptance criteria communicated from said host, wherein said determination is made prior to or during connection set up, and a connection state that corresponds to said network connection setup is maintained by said network interface hardware device.

22. The system according to claim 21, wherein said services list comprises one or more of a local network address, a local transport address, a network protocol, and a transport protocol.

23. The system according to claim 21, wherein said network interface hardware device enables generating primitives for establishing said network connection.

24. The system according to claim 21, wherein said network interface hardware device enables presenting to said host connection request primitives received by said network interface hardware device to utilize one or more of a host resident packet filtering, a host denial of service mitigation service, and a host security and cryptography service.

25. The system according to claim 21, wherein said network interface hardware device enables presenting to said host a network connection name to utilize one or more of a host resident packet filtering, a host denial of service mitigation service, and a host security and cryptography service.

26. The system according to claim 21, wherein said network interface hardware device enables receiving an indication from said host regarding results from one or more of a host resident packet filtering, a host denial of service mitigation service, and a host security and cryptography service.

27. The system according to claim 21, wherein, subsequent to receiving an indication from said host rejecting of said network connection, said network interface hardware device enables discontinuing exchanging network primitives and discarding associated connection state information.

28. The system according to claim 21, wherein, subsequent to receiving an indication from said host rejecting said network connection, said network interface hardware device enables dropping an established network connection and discarding associated connection state information.

29. The system according to claim 24, wherein said network interface hardware device enables presenting said connection request primitives to said host during network connection set up, before a reply is sent to a remote peer by sending a connection setup primitive, or after said network connection has been set up.

30. The system according to claim 25, wherein said network interface hardware device enables presenting said network connection name to said host during network connection set up, before a reply is sent to a remote peer by sending a connection setup primitive, or after said network connection has been set up.

31. The system according to claim 21, wherein said network interface hardware device enables storing information in a host memory, wherein said stored information comprises at least one of connection request primitives received from a remote peer, a transport connection setup state for a non-established network connection, and a connection state for an established network connection.

32. The system according to claim 31, wherein said stored information utilizes shared memory within said host memory.

33. The system according to claim 31, wherein said stored information utilizes a portion of said host memory only available to said network interface hardware device.

34. The system according to claim 21 wherein said network interface hardware device enables tearing down an established network based on an indication from said host, a fatal network event, or a signal from a remote peer.

35. The system according to claim 34, wherein said network interface hardware device enables making a connection state available to said host to enable said host to tear down said established network connection.

36. The system according to claim 21, wherein said communicated acceptance criteria comprises packet filtering operations.

37. The system according to claim 21, wherein said communicated acceptance criteria comprises security operations.

38. A method for data communication, the method comprising:

generating a request for a network connection with a remote peer by a host; and

if said request is accepted by said remote device, setting up said network connection with said remote peer via a network interface hardware device, wherein;

acceptance of said request by said remote device is determined based on one or both of a services list and a connection acceptance criteria in said remote device; and

a connection state that corresponds to said network connection setup is maintained by said network interface hardware device.

39. The method according to claim 38, further comprising generating said connection state after said completion of said network connection set up.

40. The method according to claim 38, further comprising moving said connection state from said network interface hardware device to said host.

41. The method according to claim 38, further comprising copying at least a portion of said connection state to a shared memory in said host.