Network Interface Resource Coordinator for TLS Memory Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional integrated circuits (ICs) face challenges in managing multiple TLS connections due to inefficient memory resource allocation, leading to incomplete TLS sessions and increased memory requirements, which hinder performance, cost, and size targets in networking applications.
Innovation Solution
The ICs employ a resource coordinator to maintain active secure sessions, identify priority session triggers, and dynamically allocate receiver resources for incoming packets, allowing multiple TLS sessions to share resources and prioritize completion of critical sessions, thereby optimizing memory usage and enhancing throughput.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If conventional memory resource allocation is used for TLS connections, then the RX memory pool can be fully utilized, but TLS sessions remain incomplete and memory requirements increase
Solution Approach 1:
The patent implements dynamic memory allocation where the resource coordinator continuously monitors TLS session states and adjusts RX memory pool allocation in real-time. Memory is dynamically assigned to sessions based on their completion progress and priority, rather than using static allocation. This allows the system to adapt memory distribution as sessions transition from incomplete to complete states, preventing memory exhaustion while ensuring session completion.
Solution Approach 2:
The system changes the parameter of memory allocation from fixed to variable based on session state. The resource coordinator modifies allocation parameters dynamically, adjusting the amount of memory assigned to each TLS session based on whether the session is complete or incomplete. This parameter change enables the memory pool to serve multiple purposes: supporting incomplete sessions temporarily and completing active sessions, thereby resolving the contradiction between memory utilization and session completion reliability.
2Reliability
If the RX memory pool is increased to complete TLS sessions, then session completion improves, but IC cost and size targets are exceeded
Solution Approach 1:
Instead of increasing IC size with a larger fixed memory pool, the patent employs dynamic memory management that adapts to actual session needs. The resource coordinator monitors session states and allocates memory dynamically, ensuring that sufficient memory is available for completing TLS sessions without permanently increasing the IC's memory capacity. This dynamic approach maintains session completion reliability while keeping the IC size within targets.
Solution Approach 2:
The patent changes the memory allocation parameter from a fixed large size to a variable size that adjusts based on session completion status. By modifying allocation parameters in real-time, the system ensures adequate memory for session completion without requiring a permanently larger memory pool, thus avoiding increased IC size and cost while maintaining reliability.
3Productivity
If multiple TLS connections are supported simultaneously, then networking throughput improves, but memory resource management becomes inefficient
Solution Approach 1:
The patent introduces a resource coordinator as an intermediary layer between the RX memory pool and multiple TLS sessions. This mediator monitors the state of all active sessions, tracks memory usage, and intelligently allocates memory resources to ensure session completion. The resource coordinator simplifies complex memory management by providing a centralized control mechanism that automatically handles allocation and deallocation, enabling efficient support for multiple concurrent TLS connections without manual intervention.
Solution Approach 2:
The resource coordinator serves multiple functions: monitoring session states, allocating memory to incomplete sessions, managing complete sessions, and optimizing overall memory utilization. This multi-functional component handles diverse memory management tasks for multiple TLS connections simultaneously, improving networking throughput while maintaining efficient resource allocation through a single coordinated system rather than separate management for each connection.
Data Source
AI summary
An integrated circuit includes: a processor; a receiver coupled to the processor; and memory coupled to the processor. The memory stores resource coordinator instructions that, when executed by the processor, cause the processor to: maintain a plurality of active secure sessions; identify a priority session trigger; and allocate receiver resources for incoming packets related to the plurality of active secure sessions based on the priority session trigger.