Selective packet sequence acceleration in a network environment

• US 8,948,013 B1
• Filed: 06/14/2011
• Issued: 02/03/2015
• Est. Priority Date: 06/14/2011
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Janarthanan, Bhagatram Yaugand, Jilani, Imnaz Meher, Mackie, Robert A., Tsang, Tzu-Ming, Dixon, Walter
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Aga, Sori
• Application Number:
  US13/159,906
• Time in Patent Office: 1,330 Days
• Field of Search: None
• US Class Current: 370/236
• CPC Class Codes: H04L 12/2896 Distributed processing, e.g. on line cards
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/245 using preemption
• CPC Class Codes: H04L 47/2483 involving identification of individual flows
• CPC Class Codes: H04L 49/3009 Header conversion, routing tables or routing tags

Abstract

At least one first frame of a first data flow can be received and passed to a general processor to inspect the at least one first frame. A flow acceleration request can be received including a set of conditions for accelerated processing, by a network processor, of a set of frames in the first data flow subsequent to the at least one first frame. At least one subsequent frame in the set of frames can be processed, using the network processor, in connection with forwarding of the subsequent frame to at least one remote network node, where processing of the subsequent frame is accelerated relative to processing of the at least one first frame and based, at least in part, on the set of conditions included in the flow acceleration request.

Claims

1. A method, comprising:

receiving a first frame of a first data flow at a network processor;

passing the at least one first frame from the network processor to a general processor for inspection of the at least one first frame;

receiving a first set of frames in the first data flow subsequent to the first frame;

receiving a flow acceleration request at the network processor from the general processor, the flow acceleration request generated by the general processor based at least in part on the inspection of the first frame, the flow acceleration request including a set of conditions for accelerated processing, by the network processor, of a set of frames in the first data flow subsequent to the at least one first frame, wherein frames in the first data flow received subsequent to the first frame and before the flow acceleration request are to be first passed to the general processor for processing; and

receiving, at the network processor, a particular frame in the first data flow subsequent to the flow acceleration request;

processing, at the network processor, the particular subsequent frame in connection with forwarding of the particular subsequent frame to at least one remote network node, wherein processing of the particular subsequent frame by the network processor is accelerated relative to processing of the at least one first frame by the general processor, processing of the particular subsequent frame bypasses the general processor, and the processing of the particular subsequent frame by the network processor is based, at least in part, on the set of conditions.

2. The method of claim 1, further comprising identifying, from the at least one first frame, that a particular sequence of frames in the first data flow are potential candidates for accelerated processing, wherein the at least one first frame is passed to the general processor, at least in part, to determine whether at least one subsequent sequence of frames in the first data flow can be accelerated.

3. The method of claim 1, further comprising:

receiving, at the network processor, the at least one first frame returned from the general processor following inspection of the at least one first frame; and

forwarding the at least one returned first frame to the at least one remote network node by the network processor.

4. The method of claim 1, wherein the inspection of the at least one first frame includes identifying a particular subscriber account associated with the received first data flow, based at least in part on the passed at least one first frame, and the generated set of conditions is based at least in part on the identified particular subscriber account.

5. The method of claim 1, wherein performing the inspection of the at least one first frame includes identifying a particular policy associated with the first data flow based at least in part on the at least one first frame, and the generated set of conditions is based at least in part on the identified particular policy.

6. The method of claim 1, wherein the at least one subsequent frame is forwarded by the network processor to the remote network node independent of the general processor.

7. The method of claim 1, wherein the generated set of conditions includes at least one condition for returning control of the set of frames to the general processor following acceleration of frames in the set of frames, the method further comprising:

receiving a particular frame of the first data flow after the at least one subsequent frame;

analyzing the particular frame at the network processor to determine that the at least one condition has been satisfied; and

passing the particular frame to the general processor for processing.

8. The method of claim 7, wherein the at least one condition includes a trigger defining that the acceleration of frames in the set of frames be halted in response to processing a threshold amount of traffic, wherein the threshold, when met, triggers return of control of the first data flow to the general processor.

9. The method of claim 7, wherein the at least one condition includes at least one of a detection of the end of the first data flow ends, detection of a timeout event, detection of a specific TCP sequence number, detection of at least one fragmented frame, and detection of an out of order frame event.

10. The method of claim 1, further comprising generating a flow record for the first data flow and maintaining statistics of the first data flow in the flow record.

11. The method of claim 10, wherein the flow record includes a temporary flow record maintained by the network processor during an accelerated data flow session.

12. The method of claim 11, further comprising deleting the temporary copy of the flow record upon conclusion of the accelerated data flow session.

13. The method of claim 1, wherein general processor processes the at least one first frame in connection with at least one of a content billing policy and a content filtering policy of a particular subscriber associated with the first data flow.

14. The method of claim 1, further comprising sending an acknowledgement message from the network processor to the general processor in response to the received flow acceleration request.

15. The method of claim 1, further comprising receiving, at the network processor, a deceleration request from the general processor, requesting that processing of at least a next frame in the set of frames is to be returned to the general processor.

16. A system, comprising:

at least one memory element for storing data;

a general processor configured to;

perform a set of deep packet inspection operations on at least a first frame in a particular data flow;

generate an acceleration request for the particular data flow based on results of the deep packet inspection operations, the acceleration request including instructions to accelerate at least a portion of the particular data flow by bypassing the general processor; and

cause the acceleration request to be sent to a network processor; and

the network processor configured to;

receive frames in the particular flow;

pass frames in the particular flow received prior to the acceleration request to the general processor for processing; and

forward at least one other frame in the particular data flow to at least one remote network element according to the acceleration request received from the general processor.

17. The system of claim 16, further comprising:

an in-band communication link between the network processor and the general processor; and

an out-of-band communication link between the network processor and the general processor.

18. The system of claim 16, wherein the acceleration request includes at least one condition for decelerating an accelerated portion of the particular data flow, and the at least one network processor is further configured to identify that the at least one condition has been met and pass processing of at least a subsequent portion of the particular data flow to the general processor.

19. The system of claim 16, wherein the at least one network processor is further configured to initially receive the particular data flow, determine that a particular frame in the received data flow is to be processed by the general processor, and forward the particular frame to the general processor.

20. Logic encoded in non-transitory media that includes code for execution and when executed by a processor is operable to perform operations comprising:

receiving frames in a first data flow;

sending at least one first frame in a first data flow, from a network processor to a general processor for processing, wherein the processing comprises performing at least one deep packet inspection (DPI) operation on the at least one first frame;

receiving, at the network processor, a flow acceleration request from the general processor, wherein the flow acceleration request is generated by the general processor based, at least in part, on the DPI operation, the flow acceleration request including a set of conditions for accelerated processing, by the network processor, of a set of frames in the first data flow subsequent to the at least one first frame, wherein other frames in the first data flow received after the first frame and before the flow acceleration request are also forwarded to the general processor for processing;

receiving, at the network processor, a particular frame in the first data flow subsequent to the flow acceleration request; and

processing the particular frame, using the network processor, in connection with forwarding of the particular frame to at least one remote network node, wherein processing of the particular frame by the network processor is accelerated relative to processing of the at least one first frame by the general processor, processing of the particular frame bypasses the general processor, and the processing of the particular frame by the network processor is based, at least in part, on the set of conditions.