Configurable classification interface for networking devices supporting multiple action packet handling rules

• US 6,772,223 B1
• Filed: 04/10/2000
• Issued: 08/03/2004
• Est. Priority Date: 04/10/2000
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Corl, Everett Arthur Jr., Verrilli, Colin Beaton
• Primary Examiner(s): Alam, Hosain
• Assistant Examiner(s): WANG, LIANG CHE A
• Application Number:
  US09/546,486
• Time in Patent Office: 1,576 Days
• Field of Search: 709/220, 709/223, 709/224, 709/238, 714/13
• US Class Current: 709/238
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and apparatus for defining the types of actions that are to be applied to packets processed by a network processor device such as an IP router, switch, and the like. The apparatus includes an interface for configuring a packet classifier device in the network processor by enabling user specification of packet classification rules, each rule having one or more action types, and further, by enabling definition of one or more associated set of action attributes (characteristics) that may be associated with individual action types.

Claims

1. A configurable packet classifier implemented in a network processor device for processing data packets communicated in a network, said classifier comprising:

an attribute type definition table having a plurality of entries defining action types, each defined action type having a corresponding combination of action attributes;

classifier rule list structure comprising one or more data packet action rules, each classifier rule comprised of an identifying description, an action type, and one or more action attribute values for each action attribute corresponding to the action type;

packet handling device responsive to an arrived data packet for searching said classifier rule list structure and identifying one or more matching rules having identifying descriptions that match a key of said arrived data packet, said packet handling device referring to

said attribute type definition table to determine whether an action type has been defined for a particular matched rule, and if an action type is not defined, ending said searching, and if an action type is defined, determining a combination of action attributes that apply for the corresponding action type of the matching rule and applying said corresponding attribute values of each matching rule to said data packet, wherein application of multiple attributes reduce cycle time spent on searching said classifier rule list structure.

2. The configurable packer classifier according to claim 1, wherein each said action types is defined by a user of said classifier, said corresponding one or more action attributes being selected from a predetermined list of action attributes to create each said action type in the attribute type definition table.

3. The configurable packet classifier according to claim 1, wherein said attribute values are defined by a user of said classifier and are selected from a predetermined list of action values to create said classifier rule list structure.

4. The configurable packet classifier according to claim 1, wherein said classifier rule list structure comprises a binary tree.

5. The configurable packet classifier according to claim 1, wherein said rule list structure comprises a look-up table.

6. The configurable packet classifier according to claim 2, wherein said attribute type definition table entry defines a digital data structure having bit positions corresponding to user selectable action attributes, each bit position being set for assigning a corresponding attribute to an action type.

7. The configurable packet classifier according to claim 2, wherein said packet handling device comprises:

parsing mechanism for parsing said arrived data packet and extracting packet information; and

,

build mechanism for building a key associated with the extracted packet information, wherein said key is used for searching said classifier rule list structure.

8. The configurable packet classifier according to claim 2, wherein said predetermined list of action attributes includes one or more selected from a group comprising:

filtering, queuing according to packet quality of service class and redirecting said packet.

9. A method for implementing a packet classifier device including a classifier rule list structure configured for use in a network processor device that processes data packets communicated in a network according to classifier rules, each classifier rule comprising an identifying description and one or more action types, each action type corresponding to a combination of action attributes, and said classifier rule further storing one or more action attribute values for each action attribute corresponding to the action type, said method comprising steps of:

(a) searching said classifier rule list structure in response to an arrived data packet and identifying one or more matching rules having identifying descriptions that match a key of said arrived data packet;

(b) referring to an attribute definition table having entries that define said one or more action types, each action type representing a combination of action attributes to be applied to a data packet, and determining whether each said one or more action types have been defined for each one or more matching rules, and,

(c) for each action type defined, determining a combination of attributes that apply for the corresponding action type from the matching rule or, ending said searching if an action type is not defined; and

,

(d) applying said corresponding attribute values of each matching rule to said data packet, wherein application of multiple attributes reduce cycle time spent on searching said classifier rule list structure.

10. The method according to claim 9, further including repeating steps (c) through (d) for each of said action types of a classifier rule matched to said key of said data packet.

11. The method according to claim 9, wherein prior to said step a) the steps of:

generating said action attribute definition table having entries for defining one or more action types, said generating including;

selecting one or more action attributes to be associated with each action type; and

,

entering said selected action attributes for each associated action type in said attribute definition table.

12. The method according to claim 11, wherein each said attribute type definition table entry defines a digital data structure having bit positions corresponding to selectable action attributes, said entering step further including the step of setting a bit position for assigning a corresponding attribute to an action type.

13. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for implementing a packet classifier device including a classifier rule list stake configured for use in a network processor device that processes data packets communicated in a network according to classifier rules, each classifier rule comprising an identifying description and one or more action types, each action type corresponding to a combination of action attributes, and said classifier rule further storing one or more action attribute values for each action attribute corresponding to the action type, said method steps comprising:

(a) searching said classifier rile list structure in response to an arrived data packet and identifying one or more matching rules having identifying descriptions that match a key of said arrived data packet;

(b) referring to an attribute definition table having entries that define said one or more action types, each action type representing a combination of action attributes to be applied to a data packet, and determining whether each said one or more action types have been defined for each one or more matching rules, and,

(c) for each action type defined, determining a combination of attributes that apply for the corresponding action type from the matching rule or, ending said searching if an action type is not defined; and

,

(d) applying said corresponding attribute values of each matching rule to said data packet, wherein application of multiple attributes reduce cycle time spent on searching said classifier rule list structure.

14. The program storage device readable by a machine, tangibly embodying a program of instructions according to claim 13, wherein the method further includes repeating steps (c) through (d) for each of said action types of a classifier rule matched to said key of said data packet.

15. The program storage device readable by a machine as claimed in claim 13, wherein prior to said step a) the steps of:

generating said action attribute definition table having entries for defining one or more action types, said generating including;

selecting one or more action attributes to be associated with each action type; and

,

entering said selected action attributes for each associated action type in said attribute definition table.

16. The program storage device readable by a machine as claimed in claim 15, wherein each said attribute type definition table entry defines a digital data structure having bit positions corresponding to selectable action attributes, said entering step further including the step of setting a bit position for assigning a corresponding attribute to an action type.