Hewlett-packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

Bruce Edward LaVigne

Mark Gooch

Lewis Stephen Kootstra

Shaun Wakumoto

Paul T Congdon

Jechun Chiu

John Alan Wickeraad

Alan R Albrecht

Robert Lee Faulk, Jr

Wei Lu

Joseph A Curcio

Mauricio Sanchez

Jonathan Manuel Watts

Sebastien Tandel

Matthew Laswell

Mark A Tassinari

Freeman Yufei Huang

Nam Soo Kim

Tomas Navarro

An example of a computing system is described herein. The computing system includes a plurality of network security devices. The computing system also includes a network switch configured to direct network traffic. The computing system further includes a controller coupled to the network switch. The controller is to instruct the network switch in directing network traffic to the plurality of network security devices.

Network security

Examples include a network device to filter a packet for a packet type. The network device includes a filter to receive the packet and to determine whether the packet is a defined packet type. The network device also includes a Bloom filter to receive the packet from the filter based on the determination that the packet is a defined packet type and to determine whether the packet is a matched packet or an unmatched packet. A processing resource of the network device may receive the packet from the Bloom filter based on the determination that the packet is a matched packet and to determine whether the packet is an exact match.

Filtering of packets for packet types at network devices

System and methods for metering output packet traffic at network devices. Ingress packet lookups are employed in combination with egress packet meters, which can be arranged in parallel fashion, and used to meter traffic across multiple blades of a switch chassis. Also, egress packet traffic metering is accomplished while matching complex ingress rules without additional egress packet processing. The system has a first node for creating requests that contain a number of filter indicies for specifying packet forwarding criteria. The first node also specifies values for the filter and meter indicies based on a packet to be forwarded. The system also has a second node coupled to the first node and to a number of ports. The second node has at least one table for specifying which of the ports are to receive the packet based on the filter values, and at least one table for accounting for egress traffic bandwidth.

System and methods for distributed output packet metering using input lookups

A method of transmitting an upstream communication packet from a distributed trunk (DT) switch is described. The method comprises receiving a packet from a device connected to a DT port of the DT switch; and transmitting the received packet via a non-DT port of the DT switch if the DT switch is the owner of the device and transmitting the received packet via a DT interconnect (DTI) port of the DT switch if the DT switch is not the owner of the device.

Transmitting a packet from a distributed trunk switch

Network devices and methods are provided involving a support chip in association with network chips. One embodiment includes a network device having a processor, a high speed interconnect, and a number of network chips coupled to one another through the high speed interconnect. The number of network chips include a conduit port which can be selectively chosen to exchange packets, received to the number of network chips, with the processor. The support chip is coupled to the number of network chips in association with selecting a conduit port on one of the number of network chips to exchange packets with the processor.

Support chip for handling network chips on a network device

A method for generating a modified packet for output from a router. First, a received packet is stored in one memory location. Modified bytes corresponding to the received packet are computed and stored in a separate memory location. The modified packet is generated by multiplexing between select unmodified bytes of the received packet with the modified bytes.

Method and apparatus for computing, storing, and multiplexing modified bytes in a packet router

One embodiment disclosed relates to a method for remote mirroring of network traffic. A data packet to be remotely mirrored is received by an entry device. The entry device is pre-configured with a destination Internet Protocol (IP) address to which to mirror the data packet. An IP header is generated and added to IP encapsulate the data packet. The IP header includes the aforementioned destination IP address. The IP-encapsulated packet is forwarded to an exit device associated with the destination IP address. Subsequently, the exit device may decapsulate the IP-encapsulated packet to reproduce the original data packet.

Remote mirroring using IP encapsulation

Round robin arbitration system includes a first round robin arbitration module and a second round robin arbitration module. The first round robin arbitration module has a first bit width. It is configured to partition a plurality of requests into a plurality of blocks of requests, to select a block having one or more active requests using round robin arbitration, and to generate a first index corresponding to the selected block. The second round robin arbitration module has a second bit width. It is configured to store each request of the selected block, to select each active request of the selected block using round robin arbitration, to generate a second index corresponding to the selected active request, and to generate a first signal for synchronizing operation of the first and second modules. The round robin arbitration system has a bit width that is a product of the first and second bit width.

Multi-stage round robin arbitration system

One embodiment disclosed relates to a method for mirroring of select network traffic. A data packet is received by a network device. A determination is made as to whether a designated aspect of the packet matches a flagged entry in a look-up table on the network device. If a match is found, then copy of the packet is sent to an associated mirror destination. Another embodiment disclosed relates to a networking apparatus. The apparatus includes at least an operating system, a look-up table, and a mirroring engine. The operating system includes routines utilized to control the apparatus, and the look-up table includes selection information for mirror sources. The mirroring engine forwards copies of selected packets to a corresponding mirror destination. Another embodiment disclosed relates to a method of selecting packets to mirror that includes checking state information relating to the network traffic against dynamic mirroring criteria.

Methods and apparatus for selection of mirrored traffic

The present invention is a system and method for forwarding packets in order. A first packet may be received for forwarding. Subsequently, a second packet may be received for forwarding. A first memory request corresponding to the first packet is sent. A second memory request corresponding to the second packet may be sent prior to receiving a first memory reply corresponding to the first memory request. The first packet is forwarded prior to forwarding the second packet. In this novel manner, bandwidth in a network apparatus may be utilized with greater efficiency while maintaining packet ordering.

System and method for speculatively issuing memory requests while maintaining a specified packet order

A system for forwarding packets. The system has a first node for creating requests that contain a number of filters for specifying packet forwarding criteria. The first node also specifies values for the filters based on a packet to be forwarded. The system also has a second node coupled to the first node and to a number of ports. The second node has at least one table for specifying which of the ports are to receive the packet based on the filter values. The second node determines which of the ports are to receive the packet based on the table information and the filter values.

System and method for forwarding packets

System and method for determining expiration of a timestamp using a counter. Upon the occurrence of a first event, a time value derived from a binary counter with a length N is associated with the first event. At a later second time value derived from a binary counter with length N, the first time value is checked for expiration with respect to an expiration period. The second time value is summed with a predetermined offset value and the sum formatted as a number with length N+2. The first time value is subtracted from the sum and the two most significant bits are removed. The result is then compared to the expiration period to determine whether expiration has occurred.

System and method for resolving wraparound ambiguity in a counter

A method and system thereof for forwarding data packets according to an order of forwarding while lessening delays. A resource request corresponding to a first data packet that is first according to the order is generated. A first resource request corresponding to a second data packet that follows the first data packet according to the order is generated. Generation of a subsequent resource request for the second data packet is delayed for a specified time period. A second resource request for the second data packet is generated before the specified time period is due to expire when the first data packet is forwarded. In this manner, a delay attributable to the specified time period is lessened.

Forwarding ordered data packets with less delay

Round robin arbitration system includes a first round robin arbitration module and a second round robin arbitration module. The first round robin arbitration module has a first bit width. It is configured to partition a plurality of requests into a plurality of blocks of requests, to select a block having one or more active requests using round robin arbitration, and to generate a first index corresponding to the selected block. The second round robin arbitration module has a second bit width. It is configured to store each request of the selected block, to select each active request of the selected block using round robin arbitration, to generate a second index corresponding to the selected active request, and to generate a first signal for synchronizing operation of the first and second modules. The round robin arbitration system has a bit width that is a product of the first and second bit widths.

Growing community of inventors

Roseville, CA, United States of America

Bruce Edward LaVigne