Cisco Technology, Inc.

Allot Communications Ltd.

Faisal Mushtaq

Michael R Smith

Shreeram Bhide

Ali Golshan

Sitaram Dontu

Michael D Fox

Jayaraman R Iyer

Dileep Kumar Devireddy

Ahmed Refaat Bashandy

Karl Gierach

Ashwani Arya

Gyaneshwar S Saharia

Herman Levenson

Manas Barooah

Karthikeyan Gurusamy

Hemant K Hebbar

Nelson B D'Souza

Ron Garrison

Sitaram Dontn

Sheeram Bhide

An intermediate device receives a content data message addressed to a receiving device for a communication session between a source device and the receiving device. The intermediate device substitutes adapted content data for content data of the content data message and then sends the adapted content data to the receiving device such that it appears to the receiving device that the adapted content data originated from the source device. The communication from the source device to the receiving device is intercepted by the intermediate device in a manner that is transparent to the source device and receiving device.

Method and apparatus for session bandwidth estimation and rate control

Data path processing

Various methods and systems for detecting whether a network device supports a protocol, which defines a supplemental header, are disclosed. One method involves detecting a value within a preamble generated by a sending device and verifying that a header format of a header, also generated by the sending device, conforms to a header format definition of a protocol. The header format definition of the protocol defines a supplemental header. The preamble can be an Ethernet preamble. In one embodiment, the preamble is a converged data link (CDL) preamble or other type of preamble that is used to convey operation, administration and management (OAM) information.

Method and apparatus for detecting support for a protocol defining supplemental headers

A method and apparatus to apply aggregate ACL/QoS features using a redirect cause is disclosed. According to one embodiment of the present invention, a control processor configured to support a plurality of virtual interfaces is provided, wherein each of the plurality of virtual interfaces is associated with a quality of service level. According to another embodiment, each quality of service level is associated with a processing bandwidth of the control processor. According to yet another embodiment, a control processor interface is provided coupled to the control processor which is configured to select a virtual interface of the plurality of virtual interfaces using data of a received data unit, and to transfer the received data unit to the selected virtual interface.

Method and apparatus to apply aggregate access control list/quality of service features using a redirect cause

A virtual network device sub-unit includes an interface to a virtual network device link and a distributed forwarding module. The interface receives a packet, and the distributed forwarding module forwards the packet received by the interface. The distributed forwarding module performs an ingress lookup if the packet includes a multicast destination address and an egress lookup if the packet includes a unicast destination address. If the packet includes a multicast destination address, the distributed forwarding module replicates the packet for each of several outgoing VLANs associated with the multicast destination address. If an additional multicast packet is received via an interface that is not coupled to a virtual network device link, the distributed forwarding module sends at most one copy of the additional multicast packet via the virtual network device link.

Distributed forwarding in virtual network devices

A virtual network device cluster includes several different virtual network device sub-units, which collectively operate as a single logical network device. The virtual network device cluster identifies the virtual network device sub-unit via which a given packet enters the virtual network device cluster. A packet is forwarded through the virtual network device cluster based on which virtual network device sub-unit has been identified for that packet. In one embodiment, a method involves receiving a packet via a first interface of a first one of several virtual network device sub-units of a virtual network device and associating the packet with the first one of the virtual network device sub-units. The method also involves inhibiting the packet from being sent via an interface of one of the virtual network device sub-units, in response to the packet being associated with the first one of the virtual network device sub-units.

Virtual network device clusters

An efficient distributed architecture for forwarding packets. The packet to be forwarded arrives in an ingress port, is processed by an ingress forwarding engine, transferred to an egress forwarding engine, and then transmitted via an egress port. An address-based lookup at the ingress forwarding engine identifies the correct egress forwarding engine and also identifies a translation index specifying the forwarding equivalence class (e.g., combination of address prefix and mask) of the packet. The egress forwarding engine then uses the translation index as a memory pointer to recover adjacency information with which to rewrite the packet header. The egress forwarding engine may maintain its adjacency information entirely locally without the need to share the information or propagate updates to ingress forwarding engines. This approach results in a scalable and highly efficient packet forwarding architecture.

Distributed router forwarding architecture employing global translation indices

Methods and apparatus are disclosed for a token bucket metering or policing system with a delayed filing scheme which may be used, inter alia, in a computer or communications system, such as a packet switching system, router, or other device. The token bucket scheme updates the number of tokens in a particular bucket in response to an expiration of a timer or a receipt of a packet corresponding to a packet stream being metered or policed based on the particular bucket. One implementation determines whether a difference between a current time value with a last bucket update time value equals or exceeds a predetermined time interval. If the difference between the current time value with the last bucket update time value equals or exceeds the predetermined time interval, then a predetermined number of tokens is added to a bucket, and the last bucket update time value is incremented by approximately the predetermined time interval. In one implementation, the predetermined number of tokens corresponds to the number of tokens required to send a maximum sized packet and the predetermined time interval corresponds to the time required to accumulate the number of tokens required to send a maximum sized packet at the corresponding token generation rate. In this manner, a simple addition operation may be used to update the number of tokens in a token bucket to ensure that a maximum sized packet may be sent. Also, by updating the last bucket update time value by approximately the predetermined time interval, and not merely setting it to the current time, tokens which should be added to the token bucket are not lost, but rather added at a later time.

Method and apparatus for a token bucket metering or policing system with a delayed filling scheme

Growing community of inventors

Santa Clara, CA, United States of America

Faisal Mushtaq