Network Packet Broker Rule Generation via Maps and Filters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network packet brokers suffer from weak expressive power, manual and error-prone interactions, and inefficiencies due to the direct exposure of switch functionality and rule lists to users, leading to complex and error-prone configurations.
Innovation Solution
A network packet broker system that utilizes a configuration model comprising maps and filters, where maps specify source and destination ports, and filters define conditions for packet forwarding, with a rule generator converting this model into a set of rules that the switch chip can implement in a single pass, thereby simplifying and automating the configuration process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional network packet brokers expose switch functionality and rule lists directly to users, then users can configure packet forwarding, but the configuration process becomes manual and error-prone
Solution Approach 1:
The patent introduces an intermediary configuration model consisting of maps and filters that sits between the user interface and the switch chip. Users configure high-level maps (defining traffic flow between ports) and filters (defining packet matching criteria), and the system automatically translates these into switch rules. This intermediary layer eliminates direct exposure of complex switch functionality while ensuring configuration accuracy through automated rule generation.
Solution Approach 2:
The system performs preliminary action by automatically generating switch rules from the configuration model before traffic forwarding begins. The rule generator converts the user-defined maps and filters into executable switch rules in advance, eliminating manual rule configuration and reducing errors. This preliminary translation ensures that the switch is properly configured before it needs to operate.
2Adaptability or versatility
If multiple maps are converted into switch rules, then complex forwarding requirements can be met, but the switch chip requires multiple passes increasing processing time
Solution Approach 1:
The patent merges multiple maps into a single comprehensive set of switch rules that can be implemented in one pass. The rule generator consolidates the forwarding requirements from multiple maps and combines them with filter criteria to create unified rules that the switch chip can execute in a single traversal. This merging approach maintains complex forwarding capability while eliminating the need for multiple processing passes.
Solution Approach 2:
The system transitions from a multi-dimensional configuration approach (multiple separate maps requiring multiple passes) to a unified rule structure that operates in a single dimension (one pass). By transforming the configuration model into a different representational form that the switch chip can process in one traversal, the system achieves both complex forwarding requirements and high processing speed.
3Ease of operation
If a configuration model with maps and filters is introduced, then user interaction is simplified, but an additional translation step is required
Solution Approach 1:
The patent extracts the complexity of rule generation and translation from the user interface, placing it in a dedicated rule generator component. Users interact only with the simplified configuration model (maps and filters), while the extraction of complex translation logic into a separate module handles the conversion to switch rules. This extraction maintains ease of use while organizing system complexity into manageable, isolated components.
Data Source
AI summary
A network packet broker comprising a plurality of source ports for receiving incoming data packets, a plurality of destination ports for transmitting outgoing data packets, a switch chip arranged to direct incoming data packets from a source port to a destination port based on a configurable set of rules, and a port for receiving a configuration model from a user interface. The configuration model comprises a set of maps and a set of filters, each map specifying at least one source port and at least one destination port, and each filter specifying a condition under which a packet of interest may pass the filter. A rule generator is provided to convert the configuration model into a set of rules for configuring the switch chip. The rule generator is arranged to convert a plurality of maps into a set of rules which the switch chip can implement in one pass.