NPAL Network Pipeline for Flexible DPU Interface Steering

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current SFC architectures lack support for flexible steering rules and configurable interface mappings in a single accelerated data plane on a DPU, limiting network acceleration and flexibility.

Innovation Solution

Implementing a network pipeline abstraction layer (NPAL) and hardware-accelerated flexible steering rules on a DPU to enable flexible and dynamic interface mappings, allowing user-defined steering rules and optimized network acceleration in a single data plane.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional middlebox functions are implemented using separate physical devices, then network security and performance functions are provided, but device complexity and capital investment increase significantly

Engineering Contradiction:

Improvenetwork security functionVSAvoidnumber of physical devices

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple middlebox functions (firewall, load balancer, IDS, DLP, VPN gateway, WAN optimizer) into a single integrated network pipeline on the DPU. Instead of deploying separate physical devices for each function, the system merges them into unified hardware-accelerated processing stages that operate cooperatively in sequence, reducing device complexity while maintaining all security and performance functions

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The DPU is designed as a universal platform that can perform multiple network functions simultaneously through its programmable pipeline architecture. A single DPU device can function as a firewall, load balancer, intrusion detection system, and other network services, eliminating the need for specialized hardware for each function and reducing overall system complexity

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If multiple specialized hardware devices are deployed for different network functions, then comprehensive network security and performance are achieved, but operational complexity and maintenance requirements increase

Engineering Contradiction:

Improvenetwork function coverageVSAvoidoperational complexity

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The DPU provides a universal control interface that manages all network functions through a single programmable pipeline. Network administrators can configure and manage firewall, load balancing, intrusion detection, and other functions through unified software interfaces rather than dealing with multiple specialized devices, significantly reducing operational complexity while maintaining comprehensive network function coverage

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces a control plane that acts as an intermediary between the network administrator and the hardware-accelerated pipeline stages. This control plane provides unified configuration, monitoring, and management capabilities, simplifying operations by presenting a single interface to manage multiple network functions rather than requiring direct interaction with each hardware component

Inventive Principle:

Principle #24Intermediary (Mediator)

3Adaptability or versatility

If traditional software-based network processing is used, then flexibility in configuring network functions is maintained, but processing speed and network acceleration are limited

Engineering Contradiction:

Improvenetwork function configurabilityVSAvoidnetwork processing speed

Core Design Contradiction:

Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent replaces traditional software-based network processing with hardware-accelerated processing using programmable pipeline stages on the DPU. The hardware pipeline executes network functions at line rate with deterministic performance, while the programmable nature of the pipeline stages maintains flexibility for configuring different network functions and policies

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The DPU pipeline is designed to be dynamically reconfigurable, allowing network functions to be programmed and adjusted in real-time. The hardware-accelerated stages can be dynamically programmed to handle different network protocols, security policies, and traffic patterns, providing both high-speed processing and adaptability without requiring physical device changes

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS20250337743A1Network pipeline abstraction layer (NPAL) optimized pipeline for network acceleration

Publication Date: 2025.10.30 MELLANOX TECHNOLOGIES LTD(IL)

AI summary

Technologies for creating an optimized and accelerated network pipeline using a network pipeline abstraction layer (NPAL) are described. A DPU includes DPU hardware and memory that stores DPU software with the NPAL that supports multiple network protocols and network functions in a network pipeline. The network pipeline includes a set of tables and logic organized in a specific order to be accelerated by an acceleration hardware engine of the DPU. The acceleration hardware engine processes network traffic data using the network pipeline.