Fibre channel over ethernet (FCoE) link aggregation group (LAG) support in data center networks

    公开(公告)号:US10693784B1

    公开(公告)日:2020-06-23

    申请号:US15948403

    申请日:2018-04-09

    Abstract: Techniques are described for supporting Fibre Channel over Ethernet (FCoE) link aggregation groups (LAGs) between a server and a data center switch in a data center. The techniques enable an access switch in the data center switch to assign class identifiers to each member link in an FCoE LAG between an FCoE node (Enode) of the server and the access switch. In this way, the access switch is able to redirect FCoE traffic from a Fibre Channel forwarder (FCF) of a storage area network (SAN) toward the Enode on the correct member link of the FCoE LAG. The techniques also enable scaling of FCoE initialization protocol (FIP) and FCoE sessions by installing FIP snooping filters that use on a source media access control (MAC) address hit determination in ingress filter processors (IFPs) of the access switch to avoid session limitations of virtual local area network (VLAN) filter processors (VFPs).

    Hardware implementation of complex firewalls using chaining technique
    3.
    发明授权
    Hardware implementation of complex firewalls using chaining technique 有权
    使用链接技术的复杂防火墙的硬件实现

    公开(公告)号:US09391958B2

    公开(公告)日:2016-07-12

    申请号:US14318830

    申请日:2014-06-30

    CPC classification number: H04L63/0263 H04L63/02 H04L63/0209

    Abstract: A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action. The filter block may further determine whether a particular rule of the first hardware-implemented filter includes a next-filter action, where the next filter action identifies a third hardware-implemented filter; and process the third hardware-implemented filter independently of the sequence of hardware attachment points.

    Abstract translation: 防火墙设备可以包括包括过滤器块的转发组件。 滤波器块可以获得第一硬件实现的滤波器,其中硬件实现将第一硬件实现的滤波器限制为最大数量的规则; 确定与所访问的硬件实现的过滤器相关联的最后规则是否包括拆分过滤器动作,其中分割过滤器动作标识第二硬件实现的过滤器; 以及响应于确定所述最后一个规则包括所述分割过滤器动作,将所述第二硬件实现的过滤器链接到所述第一硬件实现的过滤器,以使得所述第二硬件实现的过滤器是所述第一硬件实现的过滤器的逻辑延续。 滤波器块还可以确定第一硬件实现的滤波器的特定规则是否包括下一个滤波器动作,其中下一个滤波器动作识别第三硬件实现的滤波器; 并且独立于硬件连接点的顺序处理第三个硬件实现的过滤器。

Patent Agency Ranking