Shared Match Filters for Network Device Interfaces
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network devices require redundant storage of match filters for each network interface, leading to high memory consumption, especially when a large number of filters are specified, as they are not shared across interfaces.
Innovation Solution
Implementing a system where match filters are specified collectively for multiple network interfaces, allowing the same filters to be applied across different interfaces, thereby reducing redundant storage and conserving memory by using a filtering unit to apply filters to packets and send data to accounting filters associated with specific rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate match filters are configured for each network interface, then each interface can independently apply filters to packets, but memory consumption increases due to redundant storage of the same filters across multiple interfaces
Solution Approach 1:
The patent merges match filters into a shared pool that can be referenced by multiple network interfaces. Instead of duplicating filter definitions for each interface, the system consolidates unique filters into a common repository, allowing interfaces to reference the same filter objects. This eliminates redundant storage while maintaining the ability of each interface to independently apply appropriate filters to packets.
Solution Approach 2:
The patent creates universal match filters that can serve multiple network interfaces simultaneously. A single match filter definition can be instantiated and applied across different interfaces, making the filter system multi-functional. This universal approach allows the same filtering logic to be reused across multiple interfaces, reducing overall memory consumption while maintaining interface-specific filtering capabilities through selective instantiation.
2Adaptability or versatility
If a large number of match filters are specified for network interfaces, then comprehensive packet filtering is achieved, but the memory required to store redundant filter copies increases significantly
Solution Approach 1:
The patent implements a selective copying mechanism where match filters are copied to interface-specific structures only when needed, rather than pre-duplicating all filters for all interfaces. The system creates lightweight references or instantiations of filter objects at the interface level only when a filter is actually applied, reducing memory overhead while maintaining comprehensive filtering coverage across multiple interfaces.
Data Source
AI summary
A network device includes match filters to be applied to packets transiting two or more network interfaces. In one example, a network device includes a filtering unit configured to apply one or more filters to a first packet transiting a first network interface to determine a first rule the first packet matches, send the first packet and data representing the first network interface to a first accounting filter associated with the first rule, apply the filters to a second packet transiting a second network interface to determine a second rule that the second packet matches, the second packet being different than the first packet, and the second network interface being different than the first network interface, and send the second packet and second data representing the second network interface to a second accounting filter associated with the second rule.