Marvell Israel (misl) Ltd.

Marvell International Limited

Marvellworld Trade Ltd.

Uri Safrai

Tsahi Daniel

David Melman

Gil Levy

Nafea Bishara

Michael Orr

Gad Hutt

Ehud Sivan

A packet processor includes an extraction circuit, a lookup circuit, an assignment circuit, a rule matching circuit, and an action circuit. The extraction circuit generates a first set of values based on a first packet. The lookup circuit stores metadata values. Each of the metadata values corresponds to a respective metadata identifier. The assignment circuit assigns a first metadata identifier to the first packet. The lookup circuit selectively retrieves a first metadata value that corresponds to the first metadata identifier. The rule matching circuit selects a first rule from among a predetermined set of rules based on the first set of values and the first metadata value. The action circuit identifies a first action specified by the first rule and performs the first action. The first action includes modifying the first metadata value of the plurality of metadata values.

Mechanism for wire-speed stateful packet inspection in packet processors

A multi-unit switch includes a plurality of network devices, and a central switch communicatively. The central switch includes a forwarding database for making virtual port forwarding decisions, the forwarding database being populated with virtual port entries corresponding to virtual ports of the central switch, ones of the virtual ports mapped to corresponding ones of physical ports of the plurality of network devices. The central switch is configured to make forwarding decisions to determine virtual ports to which packets are to be forwarded, and forward packets to appropriate physical ports of the central switch based on the virtual port forwarding decisions based on the mapping of virtual ports to physical ports. Network devices are configured to receive packets from the central switch and to forward the received packets to appropriate physical ports of the network devices responsively to indications of the virtual port forwarding decisions made by the central switch.

Multi-unit switch employing virtual port forwarding

In a method of processing a packet in a network device, a packet is received at an ingress port of the network device. A metadata set for the packet is generated. The metadata set includes data generated by the network device for the packet. The metadata set is stored in a memory of the network device. A subset of data included in the stored metadata set is used to generated a key corresponding to the packet. The subset of data does not include all of the data included in the stored metadata set. A processing action for the packet is determined based on the key and the packet is processed by the network device using the processing action.

Policy control list keys for network devices

A packet is received at an ingress port of a network device. A set of user defined bytes corresponding to the packet are populated with data included in or associated with the packet. One or more user defined bytes are selected, from the set of user defined bytes, to be used in a key for the packet. An ordering of the selected user defined bytes to be used for generating the key is specified. The key is generated using the selected user defined bytes and according to the ordering of the selected user defined bytes specified for the key. A processing action for the packet is determined based on the key. The network device processes the packet using the processing action.

A network device comprises a plurality of physical ports and a packet processing pipeline. The packet processing pipeline is configured to assign a virtual port from a plurality of virtual ports to a packet received via one of the physical ports, wherein a quantity of the virtual ports is larger than a quantity of the physical ports, and wherein, for each of at least some of the physical ports, multiple virtual ports correspond to one physical port. The packet processing pipeline is also configured to assign a virtual domain from a plurality of virtual domains to the packet based on the assigned virtual port, and process the packet based on one or more of i) the assigned virtual port, ii) the assigned virtual domain, and iii) a header field of the packet, including determining zero, one, or more physical ports to which the packet is to be forwarded.

Switching apparatus and method based on virtual interfaces

A method for processing packets in a centralized packet processor includes configuring the centralized packet processor to operate as a part of a communication system that includes a plurality of component systems configured to operate as components of the communication system, where each of the plurality of component systems includes a respective set of physical interfaces to provide interfaces to ports associated with other devices on a network, and where each of the plurality of component systems is configured to forward selected packets to an external device via a dedicated physical interface, receiving the selected packets via a plurality of physical ports of the centralized packet processor, generating, for use at the centralized packet processor, a plurality of virtual ports to uniquely identify a plurality of physical interfaces of the component systems, where a quantity of the plurality of virtual ports is larger than a quantity of physical interfaces available at the centralized packet processor, and performing a processing operation on the selected packets at the centralized packet processor using the plurality of virtual ports.

Interface mapping in a centralized packet processor for a network

A centralized packet processor device for use in a communication system includes a plurality of physical ports to couple the centralized packet processor device to a plurality of network devices, a port manager coupled to the plurality of physical ports and configured to assign to a packet received at the centralized packet processor device a virtual port that uniquely identifies at least one of a physical port and a trunk of the network device from which the packet is received and that is used with the centralized packet processor to process the packet, and a packet processor unit coupled to the plurality of physical ports, where the packet processor is configured to process the packet using the assigned virtual port.

Centralized packet processor for a network

Techniques for processing packets in a network device include using a configuration table to determine a key corresponding to a packet. The configuration table may be indexed based on contents of a field of the packet (e.g., e/port or e/VLAN) to find a corresponding entry indicating a key format. When a key extension indicator has a first pre-determined value, a key extension field is added to the key format, and when the key extension indicator has a second pre-determined value, the key extension indicator is excluded from the key format. The populated key format or key (including any key extension field, if so determined) is used to determine a processing action for the packet. Key extension indicators support compatibility with non-legacy devices that utilize extended fields in packets, and with legacy devices. Embodiments of methods and network devices that support standard and extended keys are disclosed.

Extended policy control list keys having backwards compatibility

A network device comprises a plurality of physical ports, and a packet processing pipeline coupled to the plurality of physical ports. The packet processing pipeline is configured to assign a virtual port from a plurality of virtual ports to a packet received via one of the physical ports, wherein a quantity of the plurality of virtual ports is larger than a quantity of the plurality of physical ports, and wherein, for each of at least some of the physical ports, multiple virtual ports correspond to one physical port. The packet processing pipeline is also configured to assign a virtual domain from a plurality of virtual domains to the packet based on the assigned virtual port, and process the packet based on one or more of i) the assigned virtual port, ii) the assigned virtual domain, and iii) a header field of the packet, including determining zero, one, or more physical ports to which the packet is to be forwarded.

Growing community of inventors

Haifa, Israel

Uri Safrai