Condition code approach for comparing rule and packet data that are provided in portions
First Claim
1. A method for comparing dimension match data of a rule with corresponding data in a packet, the method comprising:
- in a rule match engine (RME) provided with dimension match data divided into a first portion and a second portion, the first portion of the dimension match data provided in a first cycle of the RME and the second portion provided in a second cycle of the RME;
in the first cycle of the RME, comparing the first portion of the dimension match data with a corresponding first portion of data in a packet;
in the first cycle of the RME, setting a first condition code to equal to, greater than, or less than based on the comparison of the first portion of the dimension match data with the corresponding first portion of data in the packet;
in the second cycle of the RME, comparing the second portion of the dimension match data with a corresponding second portion of data in the packet;
in the second cycle of the RME, setting a second condition code to equal to, greater than, or less than based on the comparison of the second portion of the dimension match data with the corresponding second portion of data in the packet;
determining whether the dimension match data is equal to, greater than, or less than the corresponding data in the packet based on the first and second condition codes, the determination being a combined result of the RME partially comparing the dimension match data with the packet as each portion of the dimension match data is provided to the RME over multiple cycles; and
returning a response indicating whether the dimension match data and the corresponding data in the packet match based on the determination, and the response causing an action to be taken on the packet by a network service.
6 Assignments
0 Petitions
Accused Products
Abstract
A condition code approach for comparing dimension match data of a rule with corresponding data in a key is provided. The approach includes, given dimension match data divided into first and second portions, comparing the first portion with a corresponding first portion of data in a key and setting a first condition code based on the comparison. The approach further includes comparing the second portion with a corresponding second portion of key data and setting a second condition code based on the comparison. The approach further includes determining whether the dimension match data is equal to, greater than, or less than the corresponding data in the key based on the first and second condition codes, and returning a response indicating whether the data matches based on the determination.
-
Citations
11 Claims
-
1. A method for comparing dimension match data of a rule with corresponding data in a packet, the method comprising:
-
in a rule match engine (RME) provided with dimension match data divided into a first portion and a second portion, the first portion of the dimension match data provided in a first cycle of the RME and the second portion provided in a second cycle of the RME;
in the first cycle of the RME, comparing the first portion of the dimension match data with a corresponding first portion of data in a packet;in the first cycle of the RME, setting a first condition code to equal to, greater than, or less than based on the comparison of the first portion of the dimension match data with the corresponding first portion of data in the packet; in the second cycle of the RME, comparing the second portion of the dimension match data with a corresponding second portion of data in the packet; in the second cycle of the RME, setting a second condition code to equal to, greater than, or less than based on the comparison of the second portion of the dimension match data with the corresponding second portion of data in the packet; determining whether the dimension match data is equal to, greater than, or less than the corresponding data in the packet based on the first and second condition codes, the determination being a combined result of the RME partially comparing the dimension match data with the packet as each portion of the dimension match data is provided to the RME over multiple cycles; and returning a response indicating whether the dimension match data and the corresponding data in the packet match based on the determination, and the response causing an action to be taken on the packet by a network service. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A system for comparing dimension match data of a rule with corresponding data in a packet, the system comprising:
-
a memory; at least one interface for receiving dimension match data divided into a first portion and a second portion; a rule match engine (RME) communicatively coupled to the memory and the at least one interface, the RME configured to; in a first cycle of the RME, compare the first portion of the dimension match data with a corresponding first portion of data in a packet, the first portion of the dimension match data provided in the first cycle of the RME; in the first cycle of the RME, set a first condition code to equal to, greater than, or less than based on the comparison of the first portion of the dimension match data with the corresponding first portion of data in the packet; in a second cycle of the RME, compare the second portion of the dimension match data with a corresponding second portion of data in the packet, the second portion provided in the second cycle of the RME; in the second cycle of the RME, set a second condition code to equal to, greater than, or less than based on the comparison of the second portion of the dimension match data with the corresponding second portion of data in the packet; determine whether the dimension match data is equal to, greater than, or less than the corresponding data in the based on the first and second condition codes, the determination being a combined result of the RME partially comparing the dimension match data with the packet as each portion of the dimension match data is provided to the RME over multiple cycles; and return a response indicating whether the dimension match data and the corresponding data in the packet match based on the determination, and the response causing an action to be taken on the packet by a network service.
-
-
11. A tangible non-transitory computer-readable storage medium having computer readable instructions stored therein for comparing dimension match data of a rule with corresponding data in a packet, which when executed by a rule match engine (RME), provided with dimension match data divided into a first portion and a second portion, the first portion of the dimension match data provided in a first cycle of the RME and the second portion provided in a second cycle of the RME:
- in the first cycle of the RME, cause the RME to;
in the first cycle of the RME, compare the first portion of the dimension match data with a corresponding first portion of data in a packet; in the first cycle of the RME, set a first condition code to equal to, greater than, or less than based on the comparison of the first portion of the dimension match data with the corresponding first portion of data in the; in the second cycle of the RME, compare the second portion of the dimension match data with a corresponding second portion of data in the packet; in the second cycle of the RME, set a second condition code to equal to, greater than, or less than based on the comparison of the second portion of the dimension match data with the corresponding second portion of data in the packet; determine whether the dimension match data is equal to, greater than, or less than the corresponding data in the packet based on the first and second condition codes, the determination being a combined result of the RME partially comparing the dimension match data with the packet as each portion of the dimension match data is provided to the RME over multiple cycles; and return a response indicating whether the dimension match data and the corresponding data in the packet match based on the determination, and the response causing an action to be taken on the packet by a network service.
- in the first cycle of the RME, cause the RME to;
Specification