FlowSpec Rule Prioritization for Faster Service Packet Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication technologies face challenges in efficiently managing and processing service packets due to the complexity of flow specifications (FlowSpec) rules, leading to resource waste and suboptimal processing efficiency.
Innovation Solution
A method and apparatus that prioritize and manage FlowSpec rule groups based on their priorities, subdividing them into sub-groups for refined management, enabling efficient packet processing by determining a target rule group and applying actions in an expected order, and incorporating application-aware networking (APN) features for enhanced network resource allocation and quality of service assurance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If FlowSpec rules are managed without hierarchical structure, then rule management is simple, but rule matching efficiency is low and resource waste occurs
Solution Approach 1:
The patent segments FlowSpec rules into hierarchical groups with different priorities. Rules are organized into parent groups and child groups, allowing the system to process only relevant rule groups for each packet type. This segmentation reduces the effective search space during packet processing, improving efficiency without requiring complete rule sets to be managed at every level.
Solution Approach 2:
The patent introduces a hierarchical dimension to rule management by creating multiple levels of rule groups (parent and child groups). This adds an organizational layer that enables more efficient processing by allowing the system to evaluate rules in a structured sequence, matching packets against higher-priority groups first before proceeding to lower-priority groups.
2Reliability
If all FlowSpec rules are processed for every packet, then complete rule coverage is achieved, but processing time and resource consumption increase
Solution Approach 1:
The patent performs preliminary organization of rules into hierarchical groups with assigned priorities before packet processing occurs. This pre-structuring allows the system to quickly determine which rule groups are relevant for each packet type, avoiding the need to evaluate all rules uniformly. The preliminary hierarchical arrangement enables faster matching while maintaining complete rule coverage where applicable.
3Ease of operation
If FlowSpec rules are organized without priorities, then organization is simpler, but rule application order cannot be controlled
Solution Approach 1:
The patent implements a dynamic hierarchical structure where rule groups can have different priority levels and can be selectively applied based on packet characteristics. The system can adaptively navigate through the hierarchy, jumping between parent and child groups as needed, rather than following a rigid sequential order. This dynamic approach maintains operational simplicity while significantly improving matching efficiency.
Data Source
AI summary
A method, in which a first network device obtains a first service packet and a plurality of flow specification FlowSpec rule groups, where any FlowSpec rule group in the plurality of FlowSpec rule groups indicates a rule set for processing a service packet, and different FlowSpec rule groups correspond to different priorities. The first network device determines a target FlowSpec rule group, where the target FlowSpec rule group is a FlowSpec rule group in the plurality of FlowSpec rule groups that successfully matches the first service packet and that has the highest priority. The first network device processes the first service packet according to the target FlowSpec rule group. A service packet is processed according to a FlowSpec rule group, so that processing efficiency can be improved.