Computer system and network interface supporting class of service queues

• US 7,724,740 B1
• Filed: 08/27/2002
• Issued: 05/25/2010
• Est. Priority Date: 08/27/2002
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Hu, BaoDong, Wang, Chi-Lie, Mitchell, Scott W.
• Primary Examiner(s): Pham; Chi H
• Assistant Examiner(s): Wong; Warner
• Application Number:
  US10/228,488
• Time in Patent Office: 2,828 Days
• Field of Search: None
• US Class Current: 370/392
• CPC Class Codes: G06F 15/167 using a common memory, e.g. mailbox
• CPC Class Codes: H04L 12/40013 Details regarding a bus controller
• CPC Class Codes: H04L 49/90 Buffering arrangements
• CPC Class Codes: H04L 49/901 using storage descriptor, e.g. read or write pointers
• CPC Class Codes: H04L 49/9063 Intermediate storage in different physical parts of a node or terminal
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A data processing system adapted for high-speed network communications, a method for managing a network interface and a network interface for such system, are provided, in which processing of packets received over the network is achieved by embedded logic at the network interface level. Incoming packets on the network interface are parsed and classified as they are stored in a buffer memory. Functional logic coupled to the buffer memory on the network interface is enabled to access any data field within a packet in a single cycle, using pointers and packet classification information produced by the parsing and classifying step. Results of operations on the data fields in the packets are available before the packets are transferred out of the buffer memory. A data processing system, a method for management of a network interface and a network interface are also provided by the present invention that include an embedded firewall at the network interface level of the system, which protects against inside and outside attacks on the security of data processing system. Furthermore, a data processing system, a method for management of a network interface and a network interface are a provided by the present invention that support class of service management for packets incoming from the network, by applying priority rules at the network interface level of the system.

Claims

1. A method of managing packet transmission at an interface between a network medium and a host system, the method comprising:

parsing an incoming packet comprising a data payload destined for an application running in the host system memory, wherein parsing an incoming packet includes determining and storing a classifier for the incoming packet;

generating one or more pointers to data fields in the incoming packet;

storing the incoming packet in a buffer memory;

using the one or more pointers to retrieve data associated with the data fields from the buffer memory;

applying one or more rules to the retrieved data to determine a priority for transferring the data payload associated with the retrieved data from the buffer memory to the host system memory, wherein the classifier indicates which of the one or more rules is applied to the retrieved data associated with the data fields of the incoming packet; and

using the one or more pointers to transfer the data payload associated with the retrieved data from the buffer memory to an application running in the host system memory according to the determined priority.

2. The method of claim 1 wherein generating one or more pointers to data fields in the incoming packet comprises generating a pointer to the start of the packet.

3. The method of claim 1 wherein generating one or more pointers to data fields in the incoming packet comprises generating a pointer to the Internet Protocol header of the packet.

4. The method of claim 1 wherein generating one or more pointers to data fields in the incoming packet comprises generating a pointer to the Transmission Control Protocol header of the packet.

5. The method of claim 1 wherein generating one or more pointers to data fields in the incoming packet comprises generating a pointer to the data payload portion of the packet.

6. The method of claim 1 wherein generating one or more pointers to data fields in the incoming packet and storing the incoming packet in a buffer memory occurs contemporaneously.

7. The method of claim 1 wherein using the one or more pointers to retrieve the data associated with the data fields from the buffer memory comprises using the one or more pointers in combination with one or more offset parameters to retrieve data the data associated with the fields of the incoming packet from the buffer memory.

8. The method of claim 1 wherein each rule of the one or more rules comprises a rule data value and a rule parameter selected from the group of rule parameters consisting of:

an “

equal to”

rule parameter for determining whether the rule data value is equal to the retrieved data;

a “

not equal to”

rule parameter for determining whether the rule data value is not equal to the retrieved data;

a “

greater than”

rule parameter for determining whether the rule data value is greater than the retrieved data; and

a “

less than”

rule parameter for determining whether the rule data value is less than the retrieved data.

9. The method of claim 1 wherein applying one or more rules to the retrieved data associated with the data fields to determine a priority for transferring the data payload associated with the retrieved data from the buffer memory to an application running in the host system memory comprises, for each rule:

storing the rule data value;

storing the retrieved data; and

performing the function specified by the rule parameter.

10. The method of claim 1 wherein using the one or more pointers to transfer the data payload associated with the retrieved data from the buffer memory to an application running in the host system memory according to the determined priority comprises:

maintaining a plurality of receive buffer descriptor ring segments, wherein each receive buffer descriptor ring segment corresponds to a receive buffer descriptor ring in the host system memory, wherein each receive buffer descriptor ring corresponds to a priority queue, wherein each receive buffer descriptor ring segment comprises a plurality of receive buffer descriptor entries, and wherein each receive buffer descriptor entry includes a pointer to a buffer memory location corresponding to an incoming packet;

assigning an incoming packet to a receive buffer descriptor entry, wherein the assigned receive buffer entry is in a receive buffer descriptor ring segment having a priority corresponding to the priority of the incoming packet; and

transferring the data payload of the incoming packet from the buffer memory to an application running in the host system memory based on the received buffer descriptor entry to which the incoming packet was assigned.

11. The method of claim 10 wherein each receive buffer descriptor entry of the plurality of receive buffer descriptor entries comprises:

an address field for holding a host memory address for a corresponding receive buffer descriptor in the host system;

a data length field for holding a value indicating a length of a packet assigned to the entry; and

a pointer field for holding a pointer to the assigned packet in the buffer memory.

12. A system to manage packet transmission at an interface between a network and a host system, the system comprising:

a packet parser to generate one or more pointers to data fields in the incoming packet and to determine a classifier for the incoming packet, wherein the incoming packet comprises a data payload destined for an application running in the host system memory;

a packet index queue to store the one or more pointers to the data fields;

a packet data buffer to store the incoming packet;

a packet index fetch engine to retrieve data associated with the data fields from the packet data buffer by using the pointers from the packet index queue; and

a rule check engine to apply one or more rule match operations on the retrieved data to determine a priority for transferring the data payload associated with the retrieved data from the buffer memory to an application running in the host system memory, wherein the classifier indicates which of the one or more rules is applied to the retrieved data.

13. The system of claim 12 further comprising:

a receive buffer descriptor cache to maintain a plurality of receive buffer descriptor ring segments, wherein each receive buffer descriptor ring segment corresponds to a receive buffer descriptor ring in the host system memory, wherein each receive buffer descriptor ring corresponds to a priority queue, wherein each receive buffer descriptor ring segment comprises a plurality of receive buffer descriptor entries, and wherein each receive buffer descriptor entry includes a pointer to a buffer memory location corresponding to an incoming packet; and

a priority packet upload engine that accesses each receive buffer descriptor entry in each receive buffer descriptor ring segment according to each receive buffer descriptor ring segment'"'"'s priority, and transfers the data payload of the incoming packet assigned to the accessed receive buffer descriptor entry from the buffer memory to the host system memory.

14. The system of claim 13 wherein each receive buffer descriptor entry of the plurality of receive buffer descriptor entries comprises:

an address field for holding a host memory address for a corresponding receive buffer descriptor in the host system;

a data length field for holding a value indicating a length of a packet assigned to the entry; and

a pointer field for holding a pointer to the assigned packet in the buffer memory.

15. The system of claim 12 wherein the packet parser generates a pointer to the start of the incoming packet.

16. The system of claim 12 wherein the packet parser generates a pointer to the Internet Protocol header of the incoming packet.

17. The system of claim 12 wherein the packet parser generates a pointer to the Transmission Control Protocol header of the incoming packet.

18. The system of claim 12 wherein the packet parser generates a pointer to the data payload of the incoming packet.

19. The system of claim 12 wherein the packet index queue stores the pointers and the packet data buffer stores the incoming packet contemporaneously.

20. The system of claim 12 wherein the rule check engine comprises a rule match block and a rule action block.

21. The system of claim 12 wherein the rule match block comprises:

a packet data register to store the retrieved data associated with the data fields for comparison; and

a rule data register to specify a rule to be compared with the retrieved data associated with the data fields.

22. The system of claim 21 wherein the rule match block further comprises a rule mask register to mask any number of the lower bits between the rule data register and the packet data register.

23. The system of claim 21 wherein the rule in the rule data register to be compared with the retrieved data in the packet data register comprises a rule data value and a rule parameter selected from the group of rule parameters consisting of:

an “

equal to”

rule parameter to determine whether the rule data value in the rule data register is equal to the retrieved data in the packet data register;

a “

not equal to”

rule parameter to determine whether the rule data value in the rule data register is not equal to the retrieved data in the packet data register;

a “

greater than”

rule parameter to determine whether the rule data value in the rule data register is greater than the retrieved data in the packet data register; and

a “

less than”

rule parameter to determine whether the rule data value in the rule data register is less than the retrieved data in the packet data register.

24. The system of claim 21 wherein the rule action block is coupled to the rule match block and generates a priority signal in response to an output from the rule match block, wherein the priority signal indicates the priority of the incoming packet associated with the retrieved data.

25. The system of claim 21 wherein a plurality of rule match blocks corresponding to a plurality of rules are cascaded to apply the plurality of rules to the retrieved data in the packet data register.

26. A single integrated circuit, comprising:

a microprocessor, the microprocessor to perform the steps of;

parsing an incoming packet, wherein the incoming packet comprises a data payload

destined for an application running in the host system memory, and wherein parsing an incoming packet includes determining and storing a classifier for the incoming packet;

generating one or more pointers to data fields in the incoming packet;

storing the incoming packet in a buffer memory;

using the one or more pointers to retrieve data associated with the data fields from the

buffer memory;

applying one or more rules to the retrieved data to determine a priority for transferring

the data payload associated with the retrieved data from the buffer memory to the host system memory, wherein the classifier indicates which of the one or more rules is applied to the retrieved data; and

using the one or more pointers to transfer the data payload associated with the retrieved

data from the buffer memory to an application running in the host system memory according to the determined priority.