Network application apparatus

• US 7,836,443 B2
• Filed: 07/01/2005
• Issued: 11/16/2010
• Est. Priority Date: 09/25/2000
• Status: Expired due to Term

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Crossbeam Systems Incorporated (Gen Digital Inc.)
• Inventors: Akerman, Moisey, Justus, Stephen D.
• Primary Examiner(s): DENG, ANNA CHEN
• Application Number:
  US11/173,923
• Publication Number:
  US 20060010207A1
• Time in Patent Office: 1,964 Days
• Field of Search: 717171-173, 717176-178, 709/201, 709217-219, 709231-232, 710/29, 710/31
• US Class Current: 717/171
• CPC Class Codes: G06F 9/5027 the resource being a machine, e.g. CPUs, Servers, Terminals
• CPC Class Codes: G06F 9/5033 considering data affinity
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An apparatus and method to distribute applications and services throughout a network, including switch functionality and the ability to apply applications and services to received data according to subscriber profiles. Network Processor Modules (NPMs) receive and recognize data flows from subscribers, extract profile information for the subscribers, and utilize flow scheduling techniques to forward the data to Flow Processor Modules (FPMs). The FPMs utilize resident applications to process data received from the NPMs. A Control Processor Module facilitates applications processing and maintains connections to the NPMs, FPMs, local and remote storage devices, and a Management Server (MS) module that can monitor the health and maintenance of the various modules. The MS can download and otherwise control applications on the FPMs to provide an open architecture for downloading, executing, modifying, and otherwise managing applications.

Claims

1. A network apparatus, comprising,

at least one network processor module having at least one processor, at least one interface to receive and forward a stream of data packets in a network, and instructions to cause the at least one processor to recognize one or more data packets in the stream of data packets that contain data, including subscriber profile information, for processing by an application executing on the network apparatus by applying a policy to the data, and directing the stream of data packets to at least one flow processor module for executing the application based on the subscriber profile information and the policy;

the at least one flow processor module having at least one processor and at least one memory for storing the application for execution by the at least one flow processor module processor, the at least one flow processor module including instructions to receive the stream of data packets from the at least one network processor module, to process the data in the one or more data packets thereby providing one or more data packets with processed data, and to return the one or more data packets with processed data to the at least one network processor module for forwarding to a destination in the network; and

at least one control processor module in communication with the at least one flow processor module and the at least one network processor module, and having at least one control processor module processor, and instructions for causing the at least one control processor module processor to manage the applications in the flow processor module memories.

2. A network apparatus according to claim 1, wherein the control processor module instructions for causing the at least one control processor module processor to manage the applications in the flow processor module memories further comprise instructions to cause the at least one control processor module to perform a step from the group consisting of,

downloading applications to the flow processor module memories, and

deleting applications from the flow processor module memories.

3. A network apparatus according to claim 1, further comprising a management server module in communication with the at least one control processor module and having at least one management server module processor.

4. A network apparatus according to claim 3, wherein the management server module further comprises instructions for causing the at least one management server module processor to cause the at least one control processor module to perform a step from the group consisting of,

downloading applications from the management server module to the flow processor module memories, and

deleting applications from the flow processor module memories.

5. A network apparatus according to claim 1, further comprising a local memory device coupled to the at least one of control processor module.

6. A network apparatus according to claim 1, further comprising a remote memory device coupled to the at least one of control processor module.

7. A network apparatus according to claim 1, wherein the at least one control processor module further comprises instructions to cause the at least one control processor module processor to transfer data between a management server module and the at least one flow processor module.

8. A network apparatus according to claim 1, further comprising at least one storage device coupled to the at least one of flow processor module.

9. A network apparatus according to claim 1, further comprising at least one storage device coupled to the at least one of network processor module.

10. A network apparatus, comprising,

at least one flow processor module comprising at least one processor and at least one memory for storing an application for execution by the at least one processor;

a first network processor module having at least one network processor module processor, at least one interface to receive and forward a stream of data packets in a network, and instructions to cause the at least one network processor module processor to recognize one or more data packets in the stream of data packets that contain data, including subscriber profile information, for processing by an application executing on the network apparatus by applying a policy to the data, and directing the stream of data packets to the at least one flow processor module for executing the application based on the subscriber profile information and the policy;

a first control processor module in communication with the first network processor module and the at least one flow processor modules, and having at least one control processor module processor and instructions for causing the at least one control processor module processor to manage the application in the flow processor module memories, wherein the at least one flow processor module further comprises instructions to;

recognize the one or more data packets from the first network processor module;

process the data in the stream of data packets, thereby providing one or more data packets with processed data; and

return the one or more data packets with processed data to the first network processor module for forwarding to a destination in the network.

11. A network apparatus according to claim 10, further comprising a management server module in communication with the first control processor module, and having at least one management server module processor with instructions to manage the application on the at least one flow processor modules.

12. A network apparatus according to claim 10, further comprising a first control plane that couples the first network processor module, the at least one flow processor module, and the first control processor module.

13. A network apparatus according to claim 12, further comprising a distinct second control plane that couples the first network processor module, the at least one flow processor module, and the first control processor module.

14. A network apparatus according to claim 13, further comprising:

a distinct second network processor module coupled to the first control plane and the second control plane, and having at least one network processor module processor, at least one interface to receive and forward a stream of data packets in a network, and instructions to cause the processor to recognize one or more data packets in the stream of data packets that contain data, including subscriber profile information, for processing by an application executing on the network apparatus by applying the policy to the data, and directing the stream of data packets to the at least one flow processor module for executing the application based on the subscriber profile information and the policy; and

a distinct second control processor module coupled to the first control plane, the distinct second control plane, and the management server module, and having at least one control processor module processor.

15. A network apparatus according to claim 10, further comprising a local memory device that is coupled to the first control processor module.

16. A network apparatus according to claim 14, further comprising a local memory device that is coupled to the first control processor module and the distinct second control processor module.

17. A network apparatus according to claim 10, further comprising a remote memory device that is coupled to the first control processor module.

18. A network apparatus according to claim 17, further comprising a high speed data link that couples the remote memory device to the first control processor module.

19. A network apparatus according to claim 14, further comprising a remote memory device that is coupled to the first control processor module and the distinct second control processor module.

20. A network apparatus according to claim 19, further comprising a high speed data link that couples the remote memory device to the first control processor module and the distinct second control processor module.

21. A network apparatus according to claim 11, further comprising a high speed data link that couples the management server module to the first control processor module.

22. A network apparatus according to claim 14, further comprising:

a management server module in communication with the first control processor module, and having a management server module processor with instructions to manage the application on the at least one flow processor module, and,

a high speed data link that couples the management server module to the first control processor module and the distinct second control processor module.

23. A network apparatus according to claim 11, wherein the management server module further comprises instructions for causing the management server module processor to transmit and receive data from the first control processor module.

24. A network apparatus according to claim 11, wherein the management server module is a personal computer.

25. A network apparatus according to claim 11, wherein the management server module further comprises instructions to receive health and maintenance data from the first network processor module, the at least one flow processor module, and the first control processor module.

26. A method for distributing applications in a network, comprising,

receiving a stream of data packets that contain data, including subscriber profile information, from the network at a network device,

identifying at least one application executing on the network device to apply to the stream of data packets,

processing the stream of data packets according to the at least one identified application by applying a policy to the data, and directing the stream of data packets to at least one processor for executing the at least one identified application based on the subscriber profile information and the policy, and,

forwarding the processed stream of data packets from the network device.

27. A method according to claim 26, wherein identifying the at least one application further comprises utilizing a hash table to associate the stream of data packets to the at least one application.

28. A method according to claim 26, wherein identifying at least one application further comprises:

selecting the at least one application based on the subscriber profile information.

29. A method according to claim 26, further comprising configuring the at least one processor for the at least one identified application.

30. A method according to claim 26, further comprising selecting at least one processor based on the at least one identified application.

31. A method according to claim 26, further comprising selecting at least one processor based on processor loading.

32. A method according to claim 26, further comprising selecting at least one processor based on applying the policy to the data.

33. A method according to claim 26, wherein identifying at least one application further comprises identifying the data source and retrieving an application subscriber profile based on the data source.

34. A method according to claim 26, wherein forwarding the processed stream of data packets from the network device further comprises forwarding the processed stream of data packets to the network.

35. A method according to claim 26, wherein forwarding the processed stream of data packets from the network device comprises forwarding the processed stream of data packets to a storage device.

36. A method according to claim 26, further comprising determining a destination to forward the processed stream of data packets.

37. A method according to claim 26, further comprising providing the at least one application to at least one processor at the network device.

38. A method according to claim 37, wherein providing the at least one application to processors at the network device further comprises downloading the at least one application to the at least one processor from at least one of a remote processor and a storage device.

39. A method for managing applications on a network apparatus, comprising,

providing at least one flow processor module having at least one processor and at least one memory for storing applications,

providing at least one network processor module connected to the at least one flow processor module having at least one network processor module processor and instructions for:

recognizing a data request that contains data, including subscriber profile information,

processing by the applications stored on the at least one flow processor module by applying a policy to the data, and

transferring the data request to the at least one flow processor module capable of processing the data request based on the subscriber profile information and the policy, and,

connecting a control processor module to the at least one flow processor module and the at least one network processor module, the control processor module in communication with the at least one flow processor module and the at least one network processor module, and having at least one control processor module processor and instructions for causing the control processor module processor to perform a step from the group consisting of,

deleting applications from the at least one flow processor module, and,

storing applications to the at least one flow processor module.

40. A method according to claim 39, further comprising,

providing a management server module in communications with the control processor module, the management server module having a management server module processor and instructions for controlling the applications on the at least one flow processor module.

41. A method according to claim 39, wherein providing at least one network processor module further comprises providing network processor module processor instructions for,

receiving a stream of data packets from the network,

processing the stream of data packets from the network,

receiving processed data from the at least one flow processor module, and,

transferring the processed data to a network destination.

42. A method according to claim 39, wherein providing at least one network processor module further comprises providing network processor module processor instructions for forwarding the data to a network destination.

43. A method according to claim 39, wherein connecting a control processor module further comprises providing control processor module processor instructions for causing the control processor to perform processing of the data request from the at least one network processor module.