System and method for supporting host channel adapter (HCA) filtering in an engineered system for middleware and application execution

Patent metadata

Field	Value
Publication number	US-9559990-B2
Application number	US-201414467896-A
Country	US
Kind code	B2
Filing date	Aug 25, 2014
Priority date	Aug 27, 2013
Publication date	Jan 31, 2017
Grant date	Jan 31, 2017

Abstract

A system and method can provide a data service in a network environment. The network environment can include a node, which supports a data service component that can provide a data service. Additionally, a filter can be provided on a networking device, such as a host channel adaptor (HCA) that is associated with the node. The networking device operates to use the filter to identify one or more packets targeting the data service component without protocol termination. Furthermore, the filter can forward said one or more packets to the data service component.

First claim

What is claimed is:

1. A system for providing a data service in a network environment, comprising:
one or more microprocessors;
a node, running on said one or more microprocessors, wherein the node includes a data service component executing on the node that operates to provide the data service; and
a networking device, associated with the node that operates to
receive a mixed data flow of packets, wherein all of the received packets are targeted to the node, and wherein only some of the received packets are targeted to the data service component executing on the node;
use a filter of the network device to identify the received packets targeted to the data service component executing on the node; and
forward the received packets targeted to the data service component executing on the node in raw format, including all packet headers.

2. The system according to claim 1 , wherein:
said data service component is deployed in one of
a virtual machine as a virtual appliance, and
a dedicated node.

3. The system according to claim 1 , wherein:
the data service component provides at least one of a firewall (FWL) service and traffic routing service.

4. The system according to claim 1 , wherein:
said filter is based on at least one of
filtering a destination local identifier (DLID) in each said packet,
filtering a destination global identifier (DGID) in each said packet, and
invert filtering.

5. The system according to claim 1 , wherein:
the data service component operates to process said one or more packets, and the networking device operates to transmit the processed packets to one or more destination nodes.

6. The system according to claim 1 , wherein:
the node is associated with a plurality of queue pairs (QPs), wherein one or more said QPs are associated with an application server, and one or more said QPs are associated with the data service component.

7. The system according to claim 1 , wherein:
the networking device operates to separate a traffic targeting the data service component from a traffic targeting the application server.

8. The system according to claim 1 , wherein:
the network environment is based on an Infiniband protocol and the networking device is a host channel adaptor (HCA).

9. The system according to claim 1 , wherein:
the networking device operates to perform cyclic redundancy check (CRC) validation and CRC generation on the one or more packets, and wherein the networking device operates to perform incremental CRC update for the invariant CRC to preserve end-to-end data integrity when a transport header is updated.

10. The system according to claim 7 , wherein:
the networking device operates to spread traffic targeting the data service component across multiple QPs for parallel processing, and wherein said QPs operates to expose a hardware interface directly to the data service component bypassing an operating system on the node.

11. A method for providing a data service in a network environment, comprising:
associating a networking device with a node in the network environment, wherein the node is deployed with a data service component that executes on the node and that provides the data service;
receiving, at the network device, a mixed data flow of packets, wherein all of the packets in the mixed data flow are targeted to the node, and wherein only some of the received packets are targeted to the data service component executing on the node;
using a filter of the network device to identify the received packets targeted to the data service component executing on the node; and
forwarding the received packets targeted to the data service component executing on the node in raw format, including all packet headers.

12. The method according to claim 11 , further comprising:
deploying said data service component in one of
a virtual machine as a virtual appliance, and
a dedicated node.

13. The method according to claim 11 , further comprising:
allowing the data service component to provide at least one of a firewall (FWL) service and traffic routing service.

14. The method according to claim 11 , further comprising:
allowing said filter to be based on at least one of
filtering a destination local identifier (DLID) in each said packet,
filtering a destination global identifier (DGID) in each said packet, and
invert filtering.

15. The method according to claim 11 , further comprising:
allowing the data service component to process said one or more packets, and
transmitting the processed packets to one or more destination nodes.

16. The method according to claim 15 , further comprising:
associating the node with a plurality of queue pairs (QPs), wherein one or more said QPs are associated with the application server, and one or more said QPs are associated with the data service component.

17. The method according to claim 15 , wherein the networking device operates to separate a traffic targeting the data service component from a traffic targeting the application server.

18. The method according to claim 17 , further comprising:
allowing the network environment to be based on an Infiniband protocol, and
allowing the networking device to be a host channel adaptor (HCA).

19. The method according to claim 17 , further comprising:
allowing the networking device to at least one of
perform cyclic redundancy check (CRC) validation and CRC generation on the one or more packets,
perform incremental CRC update for the invariant CRC to preserve end-to-end data integrity when a transport header is updated,
spread traffic targeting the data service component across multiple QPs for parallel processing, and
allow one or more QPs to expose a hardware interface directly to the data service component bypassing an operating system on the node.

20. A non-transitory machine readable storage medium having instructions stored thereon that when executed cause a system to perform the steps comprising:
associating a networking device with a node in the network environment, wherein the node is deployed with a data service component that executes on the node and that provides the data service;
receiving, at the network device, a mixed data flow of packets, wherein all of the packets in the mixed data flow are targeted to the node, and wherein only some of the received packets are targeted to the data service component executing on the node;
using a filter of the network device to identify the received packets targeted to the data service component executing on the node; and
forwarding the received packets targeted to the data service component executing on the node in raw format, including all packet headers.

Assignees

• Oracle Int Corp

Inventors

• Makhervaks Vadim
• Johnsen Bjørn Dag
• Brean David M
• Mousseau Richard P

Classifications

• H04L49/9036 Primary

  Common buffer combined with individual queues · CPC title

• H04L49/35

  Switches specially adapted for specific applications · CPC title

• H04L45/42

  Centralised routing · CPC title

• H04L49/25

  Routing or path finding in a switch fabric · CPC title

• H03M13/093 Primary

  CRC update after modification of the information word · CPC title