Community separation enforcement

• US 7,733,855 B1
• Filed: 06/08/2004
• Issued: 06/08/2010
• Est. Priority Date: 06/08/2004
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Oracle America, Inc. (Oracle Corporation)
• Inventors: Johnsen, Bjorn Dag, Torudbaken, Ola
• Primary Examiner(s): LEVITAN, DMITRY
• Application Number:
  US10/863,544
• Time in Patent Office: 2,191 Days
• Field of Search: 370/389, 370/392, 370/395.2, 370/395.21, 370/395.53, 370/419, 370/474, 370/395.3, 370/400, 370/401, 713/2, 713/36, 707/1, 707/6, 707/10, 710/36, 710/37, 711/147, 711/153, 711/173
• US Class Current: 370/389
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements

Abstract

Embodiments of the present invention provide an Infiniband device having an input port for receiving a data packet. The input port is operable to extract a partition membership identifier from the packet; and to compare the extracted partition membership identifier to a partition membership table of the port to determine whether the packet breaches a partition group membership requirement. In some embodiments, the partition membership table is implemented as a content addressable memory storing a plurality of programmable bit masks.

Claims

1. An Infiniband device having an input port, wherein the input port:

receives a data packet;

extracts an InfiniBand partition membership identifier from the packet;

compares the InfiniBand partition membership identifier'"'"'s value to a set of InfiniBand partition membership identifier values stored in a table for the port to determine whether the packet violates an InfiniBand partition membership requirement, wherein at least one InfiniBand partition membership identifier value in the set of InfiniBand partition membership identifier values stored in the table for the port represents at least two InfiniBand partitions, and wherein the at least one InfiniBand partition membership identifier value contains at least one don'"'"'t care element.

2. The device of claim 1, further comprising a programmable bit mask, wherein the don'"'"'t care element is provided by applying the bit mask to the extracted InfiniBand partition membership identifier not having a don'"'"'t care element.

3. The device of claim 2, wherein the at least one InfiniBand partition membership identifier value is stored in a logic device which can store 3 data states, and wherein the don'"'"'t care element is provided by a third data state storage area of the logic device.

4. The device of claim 2, wherein the determination of whether the packet breaches an InfiniBand partition membership requirement is based on a comparison of the extracted InfiniBand partition membership identifier value to the set of InfiniBand partition membership identifier values stored in a table for the port, representing an InfiniBand partition membership characteristic of the port.

5. The packet of claim 1, wherein a breached InfiniBand partition membership requirement is determined if the extracted InfiniBand partition membership identifier value is different from an entry in the InfiniBand partition membership table.

6. The device of claim 1, wherein the port is further operable to truncate the packet to remove a data payload from the packet if the packet violates the InfiniBand partition membership requirement.

7. The device of claim 1, wherein the port is operable to delete the packet in the case of a determined breached InfiniBand partition membership requirement.

8. The device of claim 1, wherein the device is a switch.

9. The device of claim 1, wherein the device is a router.