Filtering of packets for packet types at network devices

Patent metadata

Field	Value
Publication number	US-10348684-B2
Application number	US-201615255095-A
Country	US
Kind code	B2
Filing date	Sep 1, 2016
Priority date	Sep 1, 2016
Publication date	Jul 9, 2019
Grant date	Jul 9, 2019

Abstract

Examples include a network device to filter a packet for a packet type. The network device includes a filter to receive the packet and to determine whether the packet is a defined packet type. The network device also includes a Bloom filter to receive the packet from the filter based on the determination that the packet is a defined packet type and to determine whether the packet is a matched packet or an unmatched packet. A processing resource of the network device may receive the packet from the Bloom filter based on the determination that the packet is a matched packet and to determine whether the packet is an exact match.

First claim

What is claimed is:

1. A network device to filter a packet for a packet type comprising:
a filter to receive the packet and to determine whether the packet is a defined packet type;
a Bloom filter to receive the packet from the filter based on the determination that the packet is a defined packet type and to determine whether the packet is a matched packet or an unmatched packet by comparing the packet against a list of domains comprising a blacklist of domains; and
a processing resource to receive the packet from the Bloom filter based on the determination that the packet is a matched packet and to determine whether the packet is an exact match, wherein based on a determination that the packet is an exact match, the processing resource is to drop the packet and send an error message to indicate to a sender of the packet, and wherein based on a determination that the packet is an unmatched packet or based on a determination that the packet is not an exact match, the processing resource is to forward the packet to an SDN controller.

2. The network device of claim 1 , wherein the network device is an edge device, a switch, a router, or a combination thereof.

3. The network device of claim 1 , wherein the filter comprises a ternary content addressable memory (TCAM) filter, a look-up table, or hardcoded logic.

4. The network device of claim 1 , wherein the defined packet type is a domain name service (DNS) request.

5. The network device of claim 1 , wherein the Bloom filter is further to receive the list of domains from a software designed networking (SDN) controller and store the list of domains in a Bloom table.

6. The network device of claim 1 , wherein the Bloom filter is to determine whether the packet is a matched packet or an unmatched packet b comparing the packet a list of domains comprising a white list domains and wherein the Bloom filter is further to drop the packet based on the determination that the packet is an unmatched packet.

7. The network device of claim 6 , wherein the processing resource is further to, based on the determination that the packet is an exact match, forward the packet according to a normal forwarding procedure, and monitor each exact match.

8. The network device of claim 1 , wherein the Bloom filter is further to, based on the determination that the packet is an unmatched packet, forward the packet according to a normal forwarding procedure.

9. The network device of claim 1 , wherein the filter is further to forward the packet according to a normal forwarding procedure based on the determination that the packet is not a defined packet type.

10. A system filter a packet, the system comprising:
a software defined networking (SDN) controller to control a list of domains and to selectively filter the packet, wherein the list of domains comprises a blacklist of domains;
a network device to filter the packet for a packet type and to receive the list of domains from the SDN controller, the network device comprising:
a ternary content addressable memory (TCAM) filter to receive the packet and to determine whether the packet is a defined packet type, wherein the defined packet type is a domain name service (DNS) request;
a Bloom filter to receive the packet from the TCAM filter based on the determination that the packet type is a defined packet type and to compare the packet against the list of domains in a Bloom table to determine whether the packet is a matched packet or an unmatched packet; and
a processing resource to receive the packet from the Bloom filter based on the determination that the packet is a matched packet and to determine whether the packet is an exact match, wherein based on a determination that the packet is an exact match, the processing resource is to drop the packet and send an error message to indicate an error to a sender of the packet, and wherein based on a determination that the packet is an unmatched packet or based on a determination that the packet is not an exact match, the packet is forwarded to the SDN controller.

11. The system of claim 10 , wherein the network device is an edge device, a switch, a router, or a combination thereof.

12. The system of claim 10 wherein the list comprises a whitelist of domains and based on the determination that the packet is an exact match, the processing resource is further to forward the packet according to a normal forwarding procedure to resolve the DNS request, and based on the determination that the packet is an unmatched packet or based on the determination that the packet is not an exact match, the packet is forwarded to the SDN controller.

13. A method of filtering a packet for a packet type at a network device, the method comprising:
receiving the packet at a filter of the network device;
determining, at the filter, whether the packet is a defined packet type; wherein the defined packet type is a domain name service (DNS) request;
based on the determination t the packet is not a defined packet type, forwarding the packet according to a normal forwarding process;
based on the determination that the packet is a defined packet type, receiving the packet at a Bloom filter of the network device from the filter;
receiving, at the Bloom filter, a list of domains, wherein the list of domains comprises a blacklist of domains;
determining, at the Bloom filter, whether the packet is a matched packet or an unmatched packet by comparing the packet against the list of domains;
based on the determination that the packet is a matched packet, receiving the packet at a processing resource of the network device from the Bloom filter; and
determining, at the processing resource, whether the packet is an exact match;
based on the determination that the packet is an exact match, dropping the packet and sending an error message to indicate an error to a sender of the packet; and
based on the determination that packet is an unmatched packet or a determination that the packet is not an exact match, forwarding the packet according to a normal forwarding procedure.

14. The method of claim 13 , wherein the list of domains comprises a whitelist of domains, and wherein the method further comprises:
based on the determination that the packet is an unmatched packet or the determination that the packet is not an exact match, dropping the packet and sending an error message to indicate an error to a sender of the packet; and
based on the determination that the packet is an exact match, forwarding the packet according to a normal forwarding procedure.

Assignees

• Hewlett Packard Entpr Dev Lp

Inventors

• Wakumoto Shaun
• Huang Freeman Yufei
• NAVARRO Tomas
• Kim Nam Soo
• Lavigne Bruce E
• Chiu Jechun
• Tandel Sebastien

Classifications

• H04L63/0263

  Rule management · CPC title

• H04L63/0245 Primary

  Filtering by information in the payload · CPC title

• H04L61/1511

  Electricity · mapped topic

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L45/74591

  using content-addressable memories [CAM] · CPC title