Computer system and network interface supporting class of service queues

• US 9,348,789 B2
• Filed: 12/14/2012
• Issued: 05/24/2016
• Est. Priority Date: 08/27/2002
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Wang, Chi-Lie, Hu, Baodong, Mitchell, Scott W.
• Primary Examiner(s): Wong, Warner
• Application Number:
  US13/715,814
• Publication Number:
  US 20130132503A1
• Time in Patent Office: 1,257 Days
• Field of Search: 370/359, 370/419, 370/463, 370/389, 370/392, 370/412, 370/474
• US Class Current: 1/1
• CPC Class Codes: G06F 15/167 using a common memory, e.g. mailbox
• CPC Class Codes: H04L 12/40013 Details regarding a bus controller
• CPC Class Codes: H04L 49/90 Buffering arrangements
• CPC Class Codes: H04L 49/901 using storage descriptor, e.g. read or write pointers
• CPC Class Codes: H04L 49/9063 Intermediate storage in different physical parts of a node or terminal
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A data processing system adapted for high-speed network communications, a method for managing a network interface and a network interface for such system, are provided, in which processing of packets received over the network is achieved by embedded logic at the network interface level. Incoming packets on the network interface are parsed and classified as they are stored in a buffer memory. Functional logic coupled to the buffer memory on the network interface is enabled to access any data field within a packet in a single cycle, using pointers and packet classification information produced by the parsing and classifying step. Results of operations on the data fields in the packets are available before the packets are transferred out of the buffer memory. A data processing system, a method for management of a network interface and a network interface are also provided by the present invention that include an embedded firewall at the network interface level of the system, which protects against inside and outside attacks on the security of data processing system. Furthermore, a data processing system, a method for management of a network interface and a network interface are a provided by the present invention that support class of service management for packets incoming from the network, by applying priority rules at the network interface level of the system.

Claims

1. A method of managing packet transmission, the method comprising:

determining a classifier for an incoming packet comprising a data payload destined for an application;

storing the incoming packet in a buffer memory;

storing a plurality of lists of buffer descriptors for a plurality of packets stored in the buffer memory, the lists of buffer descriptors having respective priorities;

generating a pointer to a location in the buffer memory at which a predetermined data field in the incoming packet is found;

using the pointer to retrieve data associated with the predetermined data field from the buffer memory;

determining a priority for transferring the data payload associated with the retrieved data from the buffer memory to a host system memory based on data fields accessed from the plurality of packets and a rule parameter; and

using, by a processor, the pointer to transfer the data payload associated with the retrieved data from the buffer memory to an application running in the host system memory according to the determined priority; and

assigning the plurality of packets in the buffer memory to a buffer descriptor in one of said plurality of lists of descriptors according to the determined priority for transferring the data payload.

2. The method of claim 1, wherein determining the priority for transferring the data payload further comprises determining the priority by applying a rule of a plurality of rules to the retrieved data.

3. The method of claim 2, wherein the classifier indicates which rule of the plurality of rules is applied to the retrieved data associated with the data field of the incoming packet.

4. The method of claim 2, wherein applying the rule further comprises, for each rule:

storing a rule data value;

storing the retrieved data; and

performing a function defined by a rule parameter.

5. The method of claim 1, wherein generating a pointer to a location in the buffer memory at which the predetermined data field in the incoming packet is found comprises generating a pointer to a location in the buffer memory corresponding to one of a start of the incoming packet, a start of an IP header, a start of a transmission control protocol header of the packet, and a start of a data payload portion of the incoming packet.

6. The method of claim 1, wherein using the pointer to retrieve data associated with the predetermined data field further comprises using the pointer in combination with an offset parameter to retrieve the data, wherein the data is associated with the fields of the incoming packet from the buffer memory.

7. The method of claim 1, wherein determining a priority for transferring the data payload further comprises applying a rule to the retrieved data to determine the priority for transferring the data payload.

8. The method of claim 1, further comprising:

parsing the incoming packet to determine the classifier.

9. The method of claim 1, further comprising:

receiving the incoming packet at an interface between a network medium and a host system.

10. A method for transferring packets between a network medium and a host bus system, said method comprising:

accessing data fields in a plurality of packets stored in a buffer memory, wherein the buffer memory is to store packets in transit between the network medium and the host bus system; and

determining, by a processor, a priority for transfer of the plurality of packets out of the buffer memory based on the accessed data fields and a rule parameter;

storing a plurality of lists of buffer descriptors for the plurality of packets stored in the buffer memory, the lists of buffer descriptors having respective priorities; and

assigning the plurality of packets in the buffer memory to a buffer descriptor in one of said plurality of lists of descriptors according to the determined priority for transfer.

11. The method according to claim 10, wherein determining the priority for transfer of the plurality of packets further comprises performing a logic function based on the accessed data fields and the rule parameter that produces a result;

and

using the result to determine the priority for transfer of the plurality of packets out of the buffer memory.

12. The method according to claim 10, wherein the descriptors identify memory locations accessible via the host bus system for storage of the plurality of packets.

13. The method according to claim 10, further comprising:

uploading the plurality of packets according to the determined priorities.

14. The method according to claim 10, further comprising:

performing a logic function based on the accessed data fields and on the rule parameter that produces a result; and

using the result to deny or allow transfer of a corresponding packet.

15. The method according to claim 10, further comprising:

determining and storing a pointer to a location in the buffer memory at which a predetermined data field within the plurality of respective packets is found; and

using the pointers to access data fields from the buffer memory.

16. The method according to claim 10, wherein said rule parameter includes rule data and rule configuration values.

17. The method according to claim 10, wherein said rule parameter includes configuration values indicating a location of a field in the corresponding packet to be accessed.