Hardware implemented ethernet multiple tuple filter system and method

Patent metadata

Field	Value
Publication number	US-9313131-B2
Application number	US-201314025749-A
Country	US
Kind code	B2
Filing date	Sep 12, 2013
Priority date	Sep 6, 2013
Publication date	Apr 12, 2016
Grant date	Apr 12, 2016

Abstract

A filter in a DOCSIS bridge performs IP Filtering of incoming Ethernet packets in hardware. The filter includes a parser circuit which, in hardware, parses each of the incoming Ethernet packets and then utilizes the parsed information in combination with a content-addressable memory (CAM) that stores filtering information, to filter and route the incoming Ethernet packets. Detailed statistical data may also be generated to provide information on the type of filtering being performed by the DOCSIS bridge.

First claim

What is claimed is:

1. An electronic device, comprising:
a specialized content addressable memory configured to store filter information that is utilized in filtering upstream and downstream Ethernet frames;
a downstream bridge circuit coupled to the specialized content addressable memory, the downstream bridge circuit including hardware circuitry operable to parse downstream Ethernet frames to obtain parsed information from these downstream Ethernet frames and to route and filter the downstream Ethernet frames based on this parsed information and the filter information stored in the specialized content addressable memory;
an upstream bridge circuit coupled to the specialized content addressable memory, the upstream bridge circuit including hardware circuitry operable to parse upstream Ethernet frames to obtain parsed information from these upstream Ethernet frames and to route and filter the upstream Ethernet frames based on this parsed information and the filter information stored in the specialized content addressable memory; and
wherein the downstream bridge circuit includes a downstream IP filter implemented entirely in hardware circuitry, the downstream IP filter configured to filter and route the downstream Ethernet frames based on the contents of fields extracted from the Ethernet frames and from higher level packets encapsulated in the Ethernet frames, and on the filter information stored in the specialized content addressable memory.

2. The electronic device of claim 1 , wherein the downstream IP filter comprises:
a pre-CAM filter configured to extract commonly utilized fields in each downstream Ethernet frame and to filter the Ethernet frame based on the values of these extracted fields;
an ingress filter coupled to the pre-CAM filter to receive filtered Ethernet frames from the pre-CAM filter and configured to extract fields from these Ethernet frames to perform DOCSIS Set-top gateway (DSG) filtering, Link Level Control (LLC) filtering, Internet Protocol (IP) filtering and IP routing filtering on the Ethernet frames from the pre-CAM filter; and
an egress filter coupled to the ingress filter and configured to extract fields from the Ethernet frames from the ingress filter and to modify routing of the Ethernet frames when the extracted fields of the Ethernet frames have specified values.

3. The electronic device of claim 2 , wherein the pre-CAM filter comprises a second specialized content addressable memory.

4. The electronic device of claim 3 , wherein the commonly utilized fields comprise the Ethernet type field and the frame-type field.

5. The electronic device of claim 4 , wherein the pre-CAM filter is configured to drop an Ethernet frame or to set subsequent filtering and routing to be performed on the Ethernet frame when the pre-CAM filter determines the value contained in the extracted fields is contained in the second specialized content addressable memory.

6. The electronic device of claim 5 , wherein the pre-CAM filter is configured to set subsequent filtering and routing by enabling or disabling subsequent egress, DOCSIS Set-top gateway (DSG), Link Level Control (LLC), Internet protocol (IP) and IP routing filtering of the Ethernet frame.

7. The electronic device of claim 2 , wherein the ingress filter further comprises:
a DOCSIS Set-top gateway (DSG) filter configured to classify packets encapsulated by the Ethernet frames into different DSG data streams;
a Link Level Control (LLC) filter configured to filter Ethernet frames based on Data Link Layer information in the fields of the packet encapsulated in the Ethernet frame;
an IP filter configured to filter Ethernet frames based on Network Layer and Transport Layer protocol information in the fields of the packet encapsulated in the Ethernet frame; and
an IP routing filter configured to modify the routing of the Ethernet frames based on the fields of the packet encapsulated in the Ethernet frame.

8. The electronic device of claim 7 , wherein the DSG filter, LLC filter, and IP filter are configured to drop routing destinations from selected downstream Ethernet frames and the IP routing filter is configured to add routing destinations to selected Ethernet frames.

9. The electronic device of claim 8 , wherein the ingress filter is configured to give precedence to the determinations of the DSG, LLC, and IP filters to drop routing destinations over determinations by the IP routing filter to add routing destinations.

10. An electronic device, comprising:
an upstream bridge configured to perform IP filtering on incoming Ethernet frames, the upstream bridge comprising:
a specialized content-addressable memory configured to store filtering information; and
hardware IP filters coupled to the specialized content-addressable memory, the hardware IP filters configured to extract frame information from the Ethernet frames and to route and filter the incoming Ethernet packets responsive to the extracted routing and frame information and the filtering information of the content-addressable memory;

wherein the hardware IP filters comprise:
a pre-CAM filter configured to extract commonly utilized fields in each downstream Ethernet frame and to filter the Ethernet frame based on the values of these extracted fields;
an ingress filter coupled to the pre-CAM filter to receive filtered Ethernet frames from the pre-CAM filter and configured to extract fields from these Ethernet frames to perform DOCSIS Set-top gateway (DSG) filtering, Link Level Control (LLC) filtering, Internet Protocol (IP) filtering and IP routing filtering on the Ethernet frames from the pre-CAM filter; and
an egress filter coupled to the ingress filter and configured to extract fields from the Ethernet frames from the ingress filter and to modify routing of the Ethernet frames when the extracted fields of the Ethernet frames have specified values.

11. The electronic device of claim 10 ,
wherein each Ethernet frame includes a special packet header that includes a route map containing routing information for the Ethernet frame, and
wherein the ingress filter is configured to extract the route map and provide an ingress default route map when the extracted route map has a specified value.

12. The electronic device of claim 11 ,
wherein the IP routing filter is operable to generate a route map for the Ethernet frame, and
wherein the ingress filter is configured to apply the route map generated by the IP routing filter to modify the ingress default route map.

13. The electronic device of claim 12 ,
wherein each of the DSG, LLC and IP filters is operable to generate a corresponding drop map indicating destinations of the Ethernet frame that are to be dropped, and
wherein the ingress filter is configured to apply the drop maps generated by the DSG, LLC, and IP filters to further modify the ingress default route map as modified by the route map from the IP routing filter to thereby generate an ingress exit route map.

14. The electronic device of claim 13 ,
wherein the egress filter is configured to generate an egress IP drop map indicating additional destinations of the Ethernet frame that are to be dropped, and
wherein the egress filter is further configured to apply the egress IP drop map to the ingress exit route map to thereby generate an egress exit route map that is placed in the special packet header and forwarded with the frame according to the egress exit route map.

15. An electronic device, comprising:
a downstream bridge configured to perform IP filtering on incoming Ethernet frames, the downstream bridge comprising:
a hardware IP filter adapted to receive fil

Assignees

• St Microelectronics Inc
• Cisco Tech Inc

Inventors

• Hammond Maynard Darvel
• Hanna Charaf
• Ni Zhifang J
• Whitlow Andrew Graham
• Darby Benjamin Nelson
• Shallow Gale L

Classifications

• H04L45/741

  Routing in networks with a plurality of addressing schemes, e.g. with both IPv4 and IPv6 · CPC title

• H04L45/7457 Primary

  Electricity · mapped topic

• H04L12/2801 Primary

  Broadband local area networks · CPC title

• H04L45/16

  Multipoint routing · CPC title

• H04L45/74591 Primary

  using content-addressable memories [CAM] · CPC title