公开(公告)号：US09380132B2

公开(公告)日：2016-06-28

申请号：US13524161

申请日：2012-06-15

申请人： David Melman ,  Tal Mizrahi

发明人： David Melman ,  Tal Mizrahi

IPC分类号： H04L12/56 ,  H04L29/06 ,  H04L12/931 ,  H04L12/46 ,  H04L1/00

CPC分类号： H04L69/18 ,  H04L12/4633 ,  H04L49/357 ,  H04L49/60

摘要： A method for processing packets, in a network device including at least one processing engine that i) is not configured to process destination information that conforms to a first protocol and ii) is configured to process destination information that conforms to a second protocol, includes receiving a packet at the network device, and determining, in the network device, first destination information included in the packet. The first destination information conforms to the first protocol. The method also includes generating, in the network device, second destination information conforming to a third protocol based on the first destination information. The method also includes generating, in the network device, third destination information conforming to the second protocol based on the second destination information. The method also includes processing the packet with the at least one processing engine included in the network device using the third destination information.

摘要翻译： 一种在包括至少一个处理引擎的网络设备中处理分组的方法，所述处理引擎未被配置为处理符合第一协议的目的地信息，并且ii）被配置为处理符合第二协议的目的地信息，包括接收 在网络设备处的分组，以及在所述网络设备中确定所述分组中包括的第一目的地信息。 第一个目的地信息符合第一个协议。 该方法还包括在网络设备中基于第一目的地信息生成符合第三协议的第二目的地信息。 该方法还包括在网络设备中基于第二目的地信息生成符合第二协议的第三目的地信息。 该方法还包括使用第三目的地信息处理包括在网络设备中的至少一个处理引擎的分组。

公开(公告)号：US09237100B1

公开(公告)日：2016-01-12

申请号：US12537078

申请日：2009-08-06

申请人： Tal Mizrahi ,  Aviran Kadosh ,  Denis Krivitski

发明人： Tal Mizrahi ,  Aviran Kadosh ,  Denis Krivitski

IPC分类号： G06F15/173 ,  H04L12/743 ,  H04L12/54 ,  H04L12/773

CPC分类号： H04L45/7453 ,  H04L12/56 ,  H04L45/60 ,  H04L47/125

摘要： A method for load balancing in a communication network having a plurality of link aggregate groups includes receiving a data unit at a first one of the plurality of network devices associated with a first one of the plurality of link aggregate groups, applying a hashing function to the data unit to generate a first hash value, where the first hash value identifies a communication link in the first one of the plurality of link aggregate groups, receiving the data unit at a second one of the plurality of network devices associated with a second one of the plurality of link aggregate groups, and applying the hashing function to the data unit to generate a second hash value that is distinct from the first value, where the second hash value identifies a communication link in the second one of the plurality of link aggregate groups along which the data unit is to be communicated.

摘要翻译： 一种用于具有多个链路聚合组的通信网络中的负载平衡的方法，包括在与所述多个链路聚合组中的第一个链路聚合组相关联的所述多个网络设备中的第一个处接收数据单元，对所述多个链路聚合组应用散列函数 数据单元以产生第一散列值，其中第一散列值标识多个链路聚合组中的第一个中的通信链路，在与第二散列值相关联的多个网络设备中的第二个处接收数据单元 所述多个链路聚合组，以及将哈希函数应用于所述数据单元以产生与所述第一值不同的第二哈希值，其中所述第二哈希值标识所述多个链路聚合组中的第二个链路聚集组中的通信链路 数据单元将沿其传送。

公开(公告)号：US20130016723A1

公开(公告)日：2013-01-17

申请号：US13548902

申请日：2012-07-13

申请人： Carmi ARAD ,  Tal MIZRAHI

发明人： Carmi ARAD ,  Tal MIZRAHI

IPC分类号： H04L12/56

CPC分类号： H04L61/103 ,  G06F9/45558 ,  G06F2009/45595

摘要： A device in a server having a processor and a storage. The device has a downstream communication unit configured to receive a data packet. The device also has a protocol blind network path indication unit configured to obtain an indicator corresponding to a predetermined path to a data communication unit in the network, by accessing the protocol blind correlation structure using a destination address of the data packet. The device, furthermore, has an upstream communication unit configured to transmit a network protocol blind packet including the data packet and the indicator corresponding to the predetermined data path to the data communication unit in the network. The device also includes a combiner configured to bind the indicator to the data packet received by the downstream communication unit.

摘要翻译： 具有处理器和存储器的服务器中的设备。 该设备具有被配置为接收数据分组的下游通信单元。 该设备还具有协议盲网路径指示单元，被配置为通过使用数据分组的目的地地址访问协议盲相关结构来获得与网络中的数据通信单元的预定路径相对应的指示符。 此外，该装置具有上游通信单元，被配置为将包括数据分组的网络协议盲分组和对应于预定数据路径的指示符发送到网络中的数据通信单元。 该设备还包括组合器，其被配置为将指示符绑定到由下游通信单元接收的数据分组。

公开(公告)号：US20120136999A1

公开(公告)日：2012-05-31

申请号：US13305794

申请日：2011-11-29

申请人： Amir Roitshtein ,  Tal Mizrahi

发明人： Amir Roitshtein ,  Tal Mizrahi

IPC分类号： G06F15/16

CPC分类号： H04L63/061 ,  H04L9/0643 ,  H04L9/0816 ,  H04L9/0819 ,  H04L47/125 ,  H04L47/193 ,  H04L47/41 ,  H04L47/70 ,  H04L49/50

摘要： Techniques to avoid polarization in a communication network include a network switch or device having a first interface to receive a data unit or packet, and a second interface via which the packet is transmitted from the network device. The network device includes a hash value generator configured to generate, using a depolarizer, a depolarized key from an initial key (where the initial key is based on contents of the packet and the depolarizer is unique to the network device), and to generate a hash value based on the depolarized key and the packet by using a hash function that is common to all network devices in the network. The hash value may be optionally modified to load balance egress traffic of the network device. The network device selects an egress link or port, such as by determining an index into an egress table based on the (modified) hash value.

摘要翻译： 在通信网络中避免极化的技术包括具有用于接收数据单元或分组的第一接口的网络交换机或设备，以及从网络设备发送分组的第二接口。 网络设备包括哈希值生成器，其被配置为使用去偏振器从初始密钥（其中初始密钥基于分组的内容并且去偏振器对于网络设备是唯一的）来产生去偏振的密钥，并且生成 通过使用网络中所有网络设备共有的散列函数，基于去极化密钥和数据包的哈希值。 可以可选地修改哈希值以对网络设备的负载平衡出口业务量。 网络设备例如通过基于（修改）散列值确定到出口表的索引来选择出口链路或端口。

公开(公告)号：US20120134497A1

公开(公告)日：2012-05-31

申请号：US13305802

申请日：2011-11-29

申请人： Amir Roitshtein ,  Tal Mizrahi

发明人： Amir Roitshtein ,  Tal Mizrahi

IPC分类号： H04L9/06

CPC分类号： H04L63/061 ,  H04L9/0643 ,  H04L9/0816 ,  H04L9/0819 ,  H04L47/125 ,  H04L47/193 ,  H04L47/41 ,  H04L47/70 ,  H04L49/50

摘要： Techniques to load balance traffic in a communication network include a network switch or device having an interface to receive a data unit or packet. The network device includes a hash value generator configured to generate a symmetric key from an initial key that is based on the packet, and configured to generate a hash value based on the symmetric key and the packet. The hash value may be optionally modified to load balance egress traffic of the network device. The network device selects an egress link or port, such as by determining an index into an egress table based on the (modified) hash value. The techniques described herein allow packets or data units of a particular flow to travel in both directions along a same path through the communication network.

摘要翻译： 在通信网络中负载均衡流量的技术包括具有接收数据单元或分组的接口的网络交换机或设备。 网络设备包括：哈希值生成器，被配置为从基于分组的初始密钥生成对称密钥，并且被配置为基于所述对称密钥和所述分组来生成哈希值。 可以可选地修改哈希值以对网络设备的负载平衡出口业务量。 网络设备例如通过基于（修改）散列值确定到出口表的索引来选择出口链路或端口。 本文描述的技术允许特定流的分组或数据单元沿着通过通信网络的相同路径在两个方向上行进。

公开(公告)号：US08054744B1

公开(公告)日：2011-11-08

申请号：US12259130

申请日：2008-10-27

申请人： Nafea Bishara ,  David Melman ,  Tal Mizrahi

发明人： Nafea Bishara ,  David Melman ,  Tal Mizrahi

IPC分类号： G01R31/08

CPC分类号： H04L47/2441 ,  H04L47/29

摘要： Packets are received from a network, and for each received packet, it is determined whether the packet belongs to one of a plurality of previously identified flows using a plurality of existing flow rules. For each received packet determined to belong to one of the previously identified flows, a flow identifier is assigned to the packet to indicate the previously identified flow to which the packet belongs and the packet or a packet descriptor corresponding to the packet is directed to a next location in a packet forwarding pipeline. Additionally, for each received packet determined not to belong to one of the previously identified flows, it is determined whether the packet belongs to a currently unknown flow. If a received packet is determined to belong to a currently unknown flow: the packet is sent to a processing unit associated with the packet forwarding pipeline; the packet is analyzed using the processing unit; an additional existing flow rule corresponding to the packet is determined using the processing unit; and based on the analysis of the packet; and the additional existing flow rule is added to the plurality of existing flow rules.

摘要翻译： 从网络接收分组，并且对于每个接收到的分组，使用多个现有流规则来确定分组是否属于多个先前识别的流中的一个。 对于被确定为属于之前识别的流之一的每个接收到的分组，向分组分配流标识符以指示分组所属的先前识别的流，并且与分组相对应的分组或分组描述符被引导到下一个 位置在数据包转发流水线。 此外，对于被确定为不属于先前识别的流之一的每个接收到的分组，确定分组是否属于当前未知的流。 如果接收到的分组被确定为属于当前未知的流程：该分组被发送到与分组转发流水线相关联的处理单元; 使用处理单元分析分组; 使用处理单元确定对应于分组的附加现有流规则; 并基于分组的分析; 并且附加的现有流规则被添加到多个现有的流规则。

公开(公告)号：US20110255540A1

公开(公告)日：2011-10-20

申请号：US13088667

申请日：2011-04-18

申请人： Tal Mizrahi ,  Martin White ,  David Melman

发明人： Tal Mizrahi ,  Martin White ,  David Melman

IPC分类号： H04L12/56

CPC分类号： H04L45/74 ,  H04L45/00 ,  H04L45/66 ,  H04L45/7457

摘要： An apparatus for forwarding packets includes a packet processing pipeline having a processing unit that processes packets compliant with a recognized communication protocol. A first port coupled to the packet processing pipeline is configured to receive a packet that does not comply with the recognized communication protocol and has a header that conforms to a second communication protocol. A data extraction unit extracts first destination information from the header of the packet and, based on the first destination information, generates second destination information that conforms to the recognized communication protocol. The processing unit determines, based on the second destination information, an egress interface to which the packet is to be forwarded.

摘要翻译： 用于转发分组的装置包括具有处理单元的分组处理流水线，处理单元处理符合识别的通信协议的分组。 耦合到分组处理流水线的第一端口被配置为接收不符合所识别的通信协议的分组，并具有符合第二通信协议的报头。 数据提取单元从分组的头部提取第一目的地信息，并且基于第一目的地信息，生成符合所识别的通信协议的第二目的地信息。 处理单元基于第二目的地信息确定要转发分组的出口接口。

公开(公告)号：US09197594B2

公开(公告)日：2015-11-24

申请号：US13548902

申请日：2012-07-13

申请人： Carmi Arad ,  Tal Mizrahi

发明人： Carmi Arad ,  Tal Mizrahi

IPC分类号： H04L29/12 ,  G06F9/455

摘要： A device in a server having a processor and a storage. The device has a protocol blind network path indication unit configured to obtain an indicator corresponding to a predetermined path to a data communication unit in the network using a destination address of a received data packet, an upstream communication unit configured to transmit a network protocol blind packet including the data packet and the indicator corresponding to the predetermined data path to the data communication unit in the network, a combiner configured to bind the indicator to the data packet received by the downstream communication unit, and a protocol blind correlation storage unit configured to provide information related to target addresses and indicators corresponding to a plurality of predetermined data paths in the network. The protocol blind network path indication unit obtains the indicator corresponding to a predetermined path by accessing the protocol blind correlation structure.

公开(公告)号：US08948037B1

公开(公告)日：2015-02-03

申请号：US13533952

申请日：2012-06-26

申请人： Tal Mizrahi

发明人： Tal Mizrahi

IPC分类号： H04J1/16 ,  H04L12/28

CPC分类号： H04L43/0847 ,  H04J3/0667 ,  H04J3/067 ,  H04J3/0673

摘要： In a method for processing data packets in accordance with a timing protocol, a data packet that includes i) a checksum and ii) a timestamp is received. The timestamp is modified to generate a modified timestamp and a checksum trailer value is determined to maintain correctness of the checksum in the data packet having the modified timestamp. Additionally, at least a portion of a field of the data packet is set to the checksum trailer value, where the field is defined by the timing protocol for use other than a checksum trailer.

摘要翻译： 在根据定时协议处理数据分组的方法中，接收包括i）校验和和ii）时间戳的数据分组。 时间戳被修改以生成修改的时间戳，并且确定校验和预告值，以保持具有修改的时间戳的数据分组中的校验和的正确性。 此外，数据分组的字段的至少一部分被设置为校验和预告值，其中该字段由除了校验和预告之外的定时协议定义。

公开(公告)号：US08756424B2

公开(公告)日：2014-06-17

申请号：US13305794

申请日：2011-11-29

申请人： Amir Roitshtein ,  Tal Mizrahi

发明人： Amir Roitshtein ,  Tal Mizrahi

IPC分类号： H04L9/32 ,  G06F15/173 ,  H04L29/06

CPC分类号： H04L63/061 ,  H04L9/0643 ,  H04L9/0816 ,  H04L9/0819 ,  H04L47/125 ,  H04L47/193 ,  H04L47/41 ,  H04L47/70 ,  H04L49/50

摘要： Techniques to avoid polarization in a communication network include a network switch or device having a first interface to receive a data unit or packet, and a second interface via which the packet is transmitted from the network device. The network device includes a hash value generator configured to generate, using a depolarizer, a depolarized key from an initial key (where the initial key is based on contents of the packet and the depolarizer is unique to the network device), and to generate a hash value based on the depolarized key and the packet by using a hash function that is common to all network devices in the network. The hash value may be optionally modified to load balance egress traffic of the network device. The network device selects an egress link or port, such as by determining an index into an egress table based on the (modified) hash value.

摘要翻译： 在通信网络中避免极化的技术包括具有用于接收数据单元或分组的第一接口的网络交换机或设备，以及从网络设备发送分组的第二接口。 网络设备包括哈希值生成器，其被配置为使用去偏振器从初始密钥（其中初始密钥基于分组的内容并且去偏振器对于网络设备是唯一的）来产生去偏振的密钥，并且生成 通过使用网络中所有网络设备共有的散列函数，基于去极化密钥和数据包的哈希值。 可以可选地修改哈希值以对网络设备的负载平衡出口业务量。 网络设备例如通过基于（修改）散列值确定到出口表的索引来选择出口链路或端口。