Systems and methods for policing network traffic rates
AssigneeJuniper Networks, Inc.
InventorsPrashant Singh, Sreekanth Rupavatharam
Life of this patent
Estimating the term…
Abstract
The disclosed method may include (1) determining a size of a packet received at a network device, (2) identifying, within a plurality of packet policers that track rates of packets with various sizes received at the network device, a packet policer that tracks rates of packets whose sizes are within a range that includes the size of the packet, (3) determining a current rate of packets tracked by the packet policer, and then (4) handling the packet based at least in part on whether the current rate exceeds a threshold rate. Various other apparatuses, systems, and methods are also disclosed.
Claims20
A method comprising:
- determining a size of a packet received at a network device;
- identifying, within a plurality of packet policers that track rates of packets with various sizes received at the network device, a packet policer that tracks rates of packets whose sizes are within a range that includes the size of the packet;
- determining a current rate of packets tracked by the packet policer;
- and
- handling the packet based at least in part on whether the current rate exceeds a threshold rate.
A system comprising:
- a sizing module, stored in memory, that determines a size of a packet received at a network device;
- a policing module, stored in memory, that identifies, within a plurality of packet policers that track rates of packets with various sizes received at the network device, a packet policer that tracks rates of packets whose sizes are within a range that includes the size of the packet;
- a rate module, stored in memory, that determines a current rate of packets tracked by the packet policer;
- a handling module, stored in memory, that handles the packet based at least in part on whether the current rate exceeds a threshold rate;
- and
- at least one hardware processor configured to execute the sizing module, the policing module, the rate module, and the handling module.
A non-transitory computer-readable medium comprising computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
- determine a size of a packet received at a network device;
- identify, within a plurality of packet policers that track rates of packets with various sizes received at the network device, a packet policer that tracks rates of packets whose sizes are within a range that includes the size of the packet;
- determine a current rate of packets tracked by the packet policer;
- and
- handle the packet based at least in part on whether the current rate exceeds a threshold rate.
Dependencies are inferred from the claim text.