Egress packet processing using a modified packet header separate from a stored payload

Patent metadata

Field	Value
Publication number	US-12463922-B2
Application number	US-202318514652-A
Country	US
Kind code	B2
Filing date	Nov 20, 2023
Priority date	May 18, 2016
Publication date	Nov 4, 2025
Grant date	Nov 4, 2025

Abstract

A network device includes a receive processor configured to store, in a packet memory, a payload of a packet received from a communication network. The network device also includes a packet processor configured to modify one or more fields of a header of the packet to generate a modified header, perform egress classification of the packet based on the modified header, and store the modified header in the packet memory. The network device further includes a transmit processor configured to transmit the packet in accordance with the egress classification. The transmit processor is configured to, in response to a decision that the packet is to be transmitted from the network device, generate a transmit packet from the payload retrieved from the packet memory and the modified header retrieved from the packet memory and cause the transmit packet to be transmitted to a destination in the communication network.

First claim

What is claimed is:

1 . A network device for processing packets in a communication network, comprising:
a receive processor configured to store, in a packet memory, at least a payload of a packet received from the communication network; a packet processor configured to process the packet, the packet processor being configured to at least i) modify one or more fields of a header of the packet to generate a modified header of the packet, ii) determine whether the packet is to be discarded by the network device based at least in part on the modified header of the packet, iii) in response to the packet processor determining, based at least in part on the modified header of the packet, that the packet is not to be discarded by the network device, perform egress classification of the packet based at least in part on the modified header of the packet, and iv) when the packet processor determines the packet is not to be discarded, store the modified header of the packet in the packet memory; and a transmit processor configured to transmit the packet in accordance with the egress classification of the packet, the transmit processor being configured to, in response to a decision, made by the network device, that the packet is to be transmitted from the network device, i) generate a transmit packet from the at least the payload of the packet retrieved from the packet memory and the modified header of the packet retrieved from the packet memory and ii) cause the transmit packet to be transmitted to a destination in the communication network.

2 . The network device of claim 1 , wherein the packet processor is configured to:
store the at least the payload of the packet at a first memory location in the packet memory, and store the modified header at a second memory location, separate from the first memory location, in the packet memory.

3 . The network device of claim 2 , wherein the packet processor is configured to:
process the packet using a packet descriptor associated with the packet, and after processing the packet using the packet descriptor,
generate an egress packet descriptor corresponding to the packet, the egress packet descriptor being smaller than the packet descriptor used for processing of the packet, and
enqueue the egress packet descriptor in an egress queue for subsequent transmission of the transmit packet to the destination in the communication network.

4 . The network device of claim 3 , wherein the packet processor is configured to generate the egress packet descriptor to include at least memory location information, the memory location information indicating i) the first memory location at which the at least the payload of the packet is stored in the packet memory and ii) the second memory location at which the modified header is stored in the packet memory.

5 . The network device of claim 4 , wherein the transmit processor is configured to:
when the egress packet descriptor is dequeued from the egress queue,
retrieve, based on the memory location information in the egress packet descriptor, the at least the payload of the packet from the first memory location in the packet memory and the modified header from the second memory location in the packet memory, and
generate the transmit packet at least by combining the at least the payload of the packet retrieved from the first memory location in the packet memory with the modified header retrieved from the second memory location in the packet memory.

6 . The network device of claim 1 , wherein the packet processor is further configured to:
in response to determining that the packet is not to be discarded, trigger mirroring of the packet by the network device, the packet processor being configured to mirror the packet by at least:
generating a copy of the egress packet descriptor, and
enqueuing the copy of the egress packet descriptor in an additional egress queue for mirroring of the packet by the network device.

7 . The network device of claim 6 , wherein the transmit processor is configured to:
when the copy of the egress packet descriptor is dequeued from the additional egress queue,
retrieve, based on the memory location information in the copy of the egress packet descriptor, the at least the payload of the packet from the first memory location in the packet memory and the modified header from the second memory location in the packet memory,
generate a mirrored packet at least by combining the at least the payload of the payload retrieved, based on the memory location information in the copy of the egress packet descriptor, from the first memory location in the packet memory and the modified header retrieved, based on the memory location information in the copy of the egress packet descriptor, from the second memory location in the packet memory, and
provide the mirrored packet to one or both of i) a central processing unit (CPU) of the network device and ii) a port of the network device, the port being coupled directly or indirectly to an analyzer, for transmission of the mirrored packet to the analyzer.

8 . The network device of claim 1 , wherein the packet processor is configured to, in response to determining that the packet is to be discarded by the network device, i) discard the packet at the network device and ii) not trigger mirroring of the packet by the network device.

9 . The network device of claim 1 , wherein the packet processor is configured to perform egress classification of the packet at least by performing one or more of i) identifying an egress flow to which the packet belongs, ii) applying an access control policy is to the packet, or iii) applying egress policing to the packet.

10 . The network device of claim 9 , wherein the packet processor is further configured to determine whether the packet i) is to be transmitted from the network device or ii) is to be discarded by the network device based at least in part on application of the access control policy to the packet.

11 . A method for processing packets in a communication network, the method comprising:
receiving, at a network device, a packet from the communication network; storing, with the network device, at least a payload of the packet in a packet memory of the network device; processing, with the network device, the packet, the processing including at least i) modifying one or more fields of a header of the packet to generate a modified header of the packet, ii) determining whether the packet is to be discarded by the network device based at least in part on the modified header of the packet, iii) in response to the network device determining, based at least in part on the modified header of the packet, that the packet is not to be discarded by the network device, performing egress classification of the packet based at least in part on the modified header of the packet, and iv) when the network device determines the packet is not to be discarded, storing the modified header of the packet in the packet memory; and transmitting, with the network device, the packet in accordance with the egress classification of the packet, including, in response to a decision, made with the network device, that the packet is to be transmitted from the network device, i) generating a transmit packet from the at least the payload of the packet retrieved from the packet memory and the modified header of the packet retrieved from the packet memory and ii) transmitting the transmit packet to a destination in the communication network.

12 . The method of claim 11 , wherein:
storing the at least the payload of the packet in the packet memory comprises storing the at least the payload of the packet at a first mem

Assignees

• Marvell Israel Misl Ltd

Inventors

• Melman David
• Mayer-Wolf Ilan
• Arad Carmi
• Zemach Rami

Classifications

• H04L69/22 Primary

  Parsing or analysis of headers · CPC title

• H04L47/32

  by discarding or delaying data units, e.g. packets or frames · CPC title

• H04L47/2441

  relying on flow classification, e.g. using integrated services [IntServ] · CPC title

• H04L49/9084 Primary

  Reactions to storage capacity overflow · CPC title