Network device and packet filtering method

Abstract

This invention discloses a network device. The network device is used to receive at least one packet and includes a computing circuit, a storage circuit, and a network interface controller. The storage circuit is coupled to the computing circuit. The network interface controller is coupled to the computing circuit and the storage circuit and is used to perform the following operations: perform a hash operation on at least one of a source address and a destination address of the at least one packet to obtain a result; and determine whether to store the at least one packet in the storage circuit based on the result and a filter table.

Claims

1. A network device for receiving at least one packet, comprising: a computing circuit; a storage circuit coupled to the computing circuit; and a network interface controller coupled to the computing circuit and the storage circuit, configured to perform the following operations: performing a hash operation on at least one of a source address and a destination address of the at least one packet to obtain a result; and determining, based on the result and a filtering table, whether to store the at least one packet in the storage circuit; wherein, The source address or the destination address contains Y bits, and the result of the operation contains Z bits, where Z is an integer greater than 1 and Z is a factor of Y.

2. As in request item 1, the network equipment, wherein, The p-th bit of the result of the operation is the result of a mutual exclusion OR operation on the Y / Z bits of the source address or the destination address, where p is greater than or equal to 0 and less than or equal to Z-1.

3. As in request item 2, the network equipment, wherein, The Y / Z bits satisfy x=n*Z+p, where n is an integer greater than or equal to 0, x is a bit number, and x is greater than or equal to 0 and less than or equal to Y-1.

4. As in request item 1, the network equipment, wherein, The p-th bit of the result of this operation is the result of a mutual exclusion OR operation between the Y / Z bits of the source address and the Y / Z bits of the destination address, where p is greater than or equal to 0 and less than or equal to Z-1.

5. As in request item 4, the network equipment, The 2*Y / Z bits satisfy x=n*Z+p, where n is an integer greater than or equal to 0, x is a bit number, and x is greater than or equal to 0 and less than or equal to Y-1.

6. As in request item 1, the network equipment, wherein, The filter table contains 2Z values, and the network interface controller determines whether to store at least one packet in the storage circuit based on a target value corresponding to the calculation result.

7. A packet filtering method, comprising: receiving at least one packet; performing a hash operation on at least one of a source address and a destination address of the at least one packet to obtain a result; and discarding the at least one packet based on the result and a filtering table; wherein, The source address or the destination address contains Y bits, and the result of the operation contains Z bits, where Z is an integer greater than 1 and Z is a factor of Y.

8. A network device for receiving at least one packet, comprising: a computing circuit; a storage circuit coupled to the computing circuit; and a network interface controller coupled to the computing circuit and the storage circuit, configured to perform the following operations: classifying the at least one packet according to a destination address of the at least one packet to obtain a type of the at least one packet; and filtering the at least one packet according to the type of the at least one packet.

Images