Network packet steering via configurable association of processing resources and network interfaces

• US 8,306,040 B2
• Filed: 06/02/2009
• Issued: 11/06/2012
• Est. Priority Date: 06/04/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Fortinet Inc.
• Inventors: Desai, Sachin, Millet, Tim, Hussain, Zahid, Kim, Paul, Yeung, Louise, Yeung, Ken
• Primary Examiner(s): Ton, Dang
• Assistant Examiner(s): Morlan, Robert M
• Application Number:
  US12/477,124
• Publication Number:
  US 20090238181A1
• Time in Patent Office: 1,253 Days
• Field of Search: 370/392, 370/400
• US Class Current: 370/400
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/2491 Mapping quality of service [QoS] requirements between different networks
• CPC Class Codes: H04L 49/254 Centralised controller, i.e. arbitration or scheduling
• CPC Class Codes: H04L 49/30 Peripheral units, e.g. input or output ports
• CPC Class Codes: H04L 49/65 Re-configuration of fast packet switches

Abstract

Methods and systems are provided for steering network packets. According to one embodiment a method is provided for steering incoming network packets. Each network packet processing resource of a network routing/switching device is dynamically assigned to one or more network interfaces of the network routing/switching device. Each of the network packet processing resources includes one or more processing elements and a memory. Incoming network packets received by the network interfaces are steered to an appropriate network packet processing resource based on the dynamic assignment.

Claims

1. A method comprising:

obtaining a mapping from a graphical user interface, wherein the mapping logically associates a network processing resource with a network interface, and wherein the mapping is represented as a steering table;

for each of a plurality of the network packet processing resources of a network routing/switching device, dynamically assigning the network packet processing resource to one or more of a plurality of the network interfaces of the network routing/switching device, each of the plurality of network packet processing resources including one or more processing elements and a memory, wherein said dynamically assigning comprises pushing the steering table from the assigned network packet processing resources to the network interfaces to which they have been assigned; and

steering incoming network packets received by the plurality of network interfaces to an appropriate network packet processing resource based on the dynamic assignment by indexing an incoming network packet into the steering table with a channel identifier for the incoming network packet to acquire a unique identifier for the associated network processing resource.

2. The method of claim 1, wherein the dynamic assignment of each of the plurality of network packet processing resources to the one or more network interfaces is based on processing or memory capacity of the assigned network packet processing resource.

3. The method of claim 1, wherein the dynamic assignment is represented as a table data structure within a volatile memory of those of the plurality of network interfaces that have been assigned a network packet processing resource of the plurality of network packet processing resources.

4. The method of claim 1, wherein said steering incoming network packets further comprises determining a specific process of a plurality of processes within the appropriate network packet processing resource to which the received incoming network packet is to be steered.

9. The method of claim 1, wherein the mapping comprises any assigned line interface port identifiers for each of the plurality of network interfaces.

10. The method of claim 1, wherein the pushing said steering table from the assigned network packet processing resources to the network interfaces to which they have been assigned comprises at least one of the network packet processing resources pushing a plurality of mappings to a plurality of network interfaces.

5. A network packet steering system, comprising:

a plurality of network packet processing resources provided by a network routing/switching device, each of the network packet processing resources including one or more processing elements and a memory;

a plurality of network interfaces of the network routing/switching device;

a steering table stored within a volatile memory of each of the plurality of network interfaces that has been assigned a network packet processing resource of the plurality of network packet processing resources, the steering table logically associating the network interface with the assigned network packet processing resource;

wherein the plurality of network packet processing resources are configurable, uniquely identified within the network routing/switching device, and dynamically assigned by a graphical user interface to one or more of the plurality of network interfaces,

wherein those of the one or more network interfaces that have been assigned a network packet processing resource of the plurality of network packet processing resources steer subsequently received incoming network packets to the assigned network packet processing resource of the plurality of network packet processing resources based on the dynamically configured assignment; and

wherein steering is accomplished by indexing an incoming network packet into the steering table with a channel identifier for the incoming network packet to acquire a unique identifier for the associated network processing resource.

6. The network packet steering system of claim 5, wherein one or more of the network interfaces that has been assigned a network packet processing resource of the plurality of network packet processing resources uses the dynamically configured assignment to perform one or more filter operations on the incoming network packets prior to steering the incoming network packets to the assigned network packet processing resource.

7. The network packet steering system of claim 6, wherein the one or more filter operations are used to detect at least one of a current volume of network traffic, a content format of the incoming network packet, and a context within which the incoming network packet is received.

8. The network packet steering system of claim 5, wherein the dynamically configured assignment is based on processing capabilities of the plurality of network packet processing resources.

11. A non-transitory computer-readable storage medium having tangibly embodied thereon instructions, which when executed by one or more computer processors of a network routing/switching device, cause a method to be performed comprising the following computer-implemented steps:

obtaining a mapping from a graphical user interface, wherein the mapping logically associates a network processing resource with a network interface, and wherein the mapping is represented as a steering table;

for each of a plurality of the network packet processing resources of a network routing/switching device, dynamically assigning the network packet processing resource to one or more of a plurality of the network interfaces of the network routing/switching device, each of the plurality of network packet processing resources including one or more processing elements and a memory, wherein said dynamically assigning comprises pushing the steering table from the assigned network packet processing resources to the network interfaces to which they have been assigned; and

steering incoming network packets received by the plurality of network interfaces to an appropriate network packet processing resource based on the dynamic assignment by indexing an incoming network packet into the steering table with a channel identifier for the incoming network packet to acquire a unique identifier for the associated network processing resource.

12. The computer-readable storage medium of claim 11, wherein the dynamic assignment of each of the plurality of network packet processing resources to the one or more network interfaces is based on processing or memory capacity of the assigned network packet processing resource.

13. The computer-readable medium of claim 11, wherein the dynamic assignment is represented as a table data structure within a volatile memory of those of the plurality of network interfaces that have been assigned a network packet processing resource of the plurality of network packet processing resources.

14. The computer-readable medium of claim 11, wherein said steering incoming network packets further comprises determining a specific process of a plurality of processes within the appropriate network packet processing resource to which the received incoming network packet is to be steered.

15. The computer-readable medium of claim 11, wherein the mapping comprises any assigned line interface port identifiers for each of the plurality of network interfaces.

16. The computer-readable medium of claim 11, wherein the pushing said steering table from the assigned network packet processing resources to the network interfaces to which they have been assigned comprises at least one of the network packet processing resources pushing a plurality of mappings to a plurality of network interfaces.