Data plane packet processing tool chain
AssigneeVeriSign, Inc.
InventorsJohn Bosco, Dow Summers, Kenneth Ryan
Life of this patent
Estimating the term…
Abstract
This present disclosure relates to systems and methods for providing a data plane processing tool chain for processing packets that can use OSI layers 4 and above in the data plane without using a hypervisor. The disclosure has multiple processing capabilities, including: packet filtering, resolving DNS packets, generating packets, packet forwarding, performing DNS look up, time-stamping DNS packets, writing packets to disk, load-balancing, and protecting against DDOS attacks.
Claims15
A method, comprising:
- reading, using a poll mode driver, a first Domain Name System (DNS) packet from a first queue of a network interface card, wherein the first DNS packet is a DNS query packet;
- sending, using the poll mode driver, the first DNS packet to a data plane;
- processing the first DNS packet in the data plane, wherein processing the first DNS packet comprises querying a database storing DNS information;
- generating, in the data plane, a second DNS packet in response to processing the first DNS packet, wherein the second DNS packet is a DNS response packet corresponding to the DNS query packet;
- and
- sending, using the poll mode driver, the second DNS packet from the data plane to a second queue of the network interface card.
A system, comprising:
- a processor;
- and
- a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to perform operations comprising:
- reading, using a poll mode driver, a first Domain Name System (DNS) packet from a first queue of a network interface card, wherein the first DNS packet is a DNS query packet;
- sending, using the poll mode driver, the first DNS packet to a data plane;
- processing the first DNS packet in the data plane, wherein processing the first DNS packet comprises querying a database storing DNS information;
- generating, in the data plane, a second DNS packet in response to processing the first DNS packet, wherein the second DNS packet is a DNS response packet corresponding to the DNS query packet;
- and
- sending, using the poll mode driver, the second DNS packet from the data plane to a second queue of the network interface card.
A non-transitory computer-readable medium storing instructions that, when executed by at least one processor of a computing system, cause the computing system to perform a method, comprising:
- reading, using a poll mode driver, a first Domain Name System (DNS) packet from a first queue of a network interface card, wherein the first DNS packet is a DNS query packet;
- sending, using the poll mode driver, the first DNS packet to a data plane;
- processing the first DNS packet in the data plane, wherein processing the first DNS packet comprises querying a database storing DNS information;
- generating, in the data plane, a second DNS packet in response to processing the first DNS packet, wherein the second DNS packet is a DNS response packet corresponding to the DNS query packet;
- and
- sending, using the poll mode driver, the second DNS packet from the data plane to a second queue of the network interface card.
Dependencies are inferred from the claim text.