Configuration of energy savings

• US 10,481,665 B2
• Filed: 03/19/2018
• Issued: 11/19/2019
• Est. Priority Date: 08/28/2013
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Overcash, Michael
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US15/925,454
• Publication Number:
  US 20180239411A1
• Time in Patent Office: 610 Days
• Field of Search: 726 11- 14
• CPC Class Codes: G06F 1/32 Means for saving power
• CPC Class Codes: G06F 1/3209 Monitoring remote activity, e.g. over telephone lines or network connections
• CPC Class Codes: G06F 1/3278 Power saving in modem or I/O interface
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: Y02D 10/00 Energy efficient computing, e.g. low power processors, power management or thermal management
• CPC Class Codes: Y02D 30/50 in wire-line communication networks, e.g. low power modes or reduced link rate

Abstract

According to one example embodiment, a modem or other network device include an energy module configured to enter a low-power, low-bandwidth state when not in active use by a user. The low-power state may be maintained under certain conditions where network activity is not present, and or when only non-bandwidth-critical traffic is present. The network device may include a user interface for configuring firewall rules, and the user may be able to concurrently designate particular types of traffic as important or unimportant. The energy module may also be integrated with a firewall, and power saving rules may be inferred from firewall rules.

Claims

1. A firewall, comprising:

logic for providing firewall rules; and

a user interface for configuring the firewall rules, the interface configured to permit a user to designate a first species of traffic as blocked, a second species of traffic as allowed, and for allowed traffic, to designate a first subspecies and a second subspecies;

wherein the first subspecies designates traffic as important for a network device energy module, and the second subspecies designates traffic as unimportant for the network device energy module, wherein important traffic comprises traffic that the user identifies as requiring a high-power state for the network device energy module, and unimportant traffic comprises traffic that the user identifies as suitable for a low-power state of the network device energy module.

2. The firewall of claim 1, further comprising:

logic for inferring an access control list (ACL) for the network device energy module from the firewall rules; and

a communication interface for communicating the ACL to the network device energy module.

3. The firewall of claim 1, further comprising:

logic for querying whether a particular rule of the firewall rules is for outgoing traffic;

logic for evaluating whether an exception is provided for blocking the outgoing traffic;

logic for evaluating whether a low-power flag has been set for the outgoing traffic; and

logic for deleting the particular rule.

4. The firewall of claim 1, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a source IP address;

a destination IP address;

a source port;

a destination port;

a protocol;

an ingress interface; and

an egress interface.

5. The firewall of claim 1, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a source MAC address;

a destination MAC address;

an EtherType field;

a 802.1P tag; and

a 802.1Q tag.

6. The firewall of claim 1, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a Differentiated Services Field;

an Explicit Congestion Notification;

an originating device;

an originating application;

a time of day; and

a direction of traffic.

7. The firewall of claim 1, wherein the user interface is further configured to permit the user to designate an additional subspecies comprising an intermediate importance.

8. A system comprising:

a memory storage; and

a processing unit coupled to the memory storage, wherein the processing unit is operative to;

provide firewall rules; and

provide a user interface for configuring the firewall rules, the user interface configured to permit a user to designate a first species of traffic as blocked, a second species of traffic as allowed, and for allowed traffic, to designate a first subspecies and a second subspecies;

wherein the first subspecies designates traffic as important for a network device energy module, and the second subspecies designates traffic as unimportant for the network device energy module, wherein important traffic comprises traffic that the user identifies as requiring a high-power state for the network device energy module, and unimportant traffic comprises traffic that the user identifies as suitable for a low-power state of the network device energy module.

9. The system of claim 8, wherein the processing unit is further operative to:

infer an access control list (ACL) for the network device energy module from the firewall rules; and

communicate, by a communication interface, the ACL to the network device energy module.

10. The system of claim 8, wherein the processing unit is further operative to:

query whether a particular rule of the firewall rules is for outgoing traffic;

evaluate whether an exception is provided for blocking the outgoing traffic;

evaluate whether a low-power flag has been set for the outgoing traffic; and

delete the particular rule.

11. The system of claim 8, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a source IP address;

a destination IP address;

a source port;

a destination port;

a protocol;

an ingress interface;

an egress interface, a source MAC address;

a destination MAC address;

an EtherType field;

a 802.1P tag; and

a 802.1Q tag.

12. The system of claim 8, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a Differentiated Services Field;

an Explicit Congestion Notification;

an originating device;

an originating application;

a time of day; and

a direction of traffic.

13. The system of claim 8, wherein the user interface is further configured to permit the user to designate an additional subspecies comprising an intermediate importance.

14. A non-transitory computer-readable medium that stores a set of instructions which when executed perform a method comprising:

providing firewall rules; and

providing a user interface for configuring the firewall rules, the user interface configured to permit a user to designate a first species of traffic as blocked, a second species of traffic as allowed, and for allowed traffic, to designate a first subspecies and a second subspecies;

wherein the first subspecies designates traffic as important for a network device energy module, and the second subspecies designates traffic as unimportant for the network device energy module, wherein important traffic comprises traffic that the user identifies as requiring a high-power state for the network device energy module, and unimportant traffic comprises traffic that the user identifies as suitable for a low-power state of the network device energy module.

15. The non-transitory computer-readable medium of claim 14, further comprising:

inferring an access control list (ACL) for the network device energy module from the firewall rules; and

communicating, by a communication interface, the ACL to the network device energy module.

16. The non-transitory computer-readable medium of claim 14, further comprising:

querying whether a particular rule of the firewall rules is for outgoing traffic;

evaluating whether an exception is provided for blocking the outgoing traffic;

evaluating whether a low-power flag has been set for the outgoing traffic; and

deleting the particular rule.

17. The non-transitory computer-readable medium of claim 14, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a source IP address;

a destination IP address;

a source port;

a destination port;

a protocol;

an ingress interface; and

an egress interface.

18. The non-transitory computer-readable medium of claim 14, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a source MAC address;

a destination MAC address;

an EtherType field;

a 802.1P tag; and

a 802.1Q tag.

19. The non-transitory computer-readable medium of claim 14, wherein the user interface is configured to provide for designating traffic as high-power or low-power based on a factor selected from a group of factors, the group of factors consisting of:

a Differentiated Services Field;

an Explicit Congestion Notification;

an originating device;

an originating application;

a time of day; and

a direction of traffic.

20. The non-transitory computer-readable medium of claim 14, wherein the user interface is further configured to permit the user to designate an additional subspecies comprising an intermediate importance.