Back to results
US 12,592,889 B2Granted
Denial of service protection
AssigneeMellanox Technologies, Ltd.
InventorYuval Avnery
Life of this patent
Estimating the term…
Abstract
Apparatuses, systems, and techniques to monitor incoming data flows from a plurality of network sources and identify a data flow from any of the plurality of sources that exceeds a threshold value. In at least one embodiment, the data flow from any of the plurality of sources that exceeds the threshold value are rate-limited while the data flow from any of the plurality of sources that do not exceed the threshold value are passed through without any rate limiting.
Claims22
A system comprising:
- an initial data rate monitor to measure a total data rate of a plurality of data flows into a network interface;
- one or more physical meters positioned between a queue pair (QP) of the network interface and at least one source of at least one of the plurality of data flows, the one or more physical meters to determine one or more rates at which one or more of the plurality of data flows flow into the network interface if the total data rate satisfies at least one first condition;
- and
- at least one physical rate limiter positioned between the QP and the at least one source, the at least one physical rate limiter to limit at least one rate of the one or more rates at which at least one of the plurality of data flows is provided to a receive queue of the QP if the total data rate satisfies the at least one first condition and the at least one rate satisfies at least one second condition to thereby provide access to at least one resource of the network interface to the plurality of data flows.
1 more element
A method comprising:
- determining a total data rate of a plurality of data flows within a network interface satisfies at least one first condition;
- after determining the total data rate satisfies the at least one first condition, using one or more physical meters positioned between a queue pair (QP) of the network interface and at least one source of at least a portion of the plurality of data flows to determine one or more rates of one or more of the plurality of data flows;
- providing, as a set of input flows, to at least one physical rate limiter positioned between the QP and the at least one source, any of the plurality of data flows that have a rate that satisfies at least one second condition;
- and
- using the at least one physical rate limiter to limit at least one rate at which at least one of the set of input flows is provided to a receive queue of the QP.
2 more elements
A processor comprising:
- one or more circuits to:
- operate an initial data rate monitor to measure a total data rate of a plurality of data flows into a network interface;
- use one or more physical meters positioned between a queue pair (QP) of the network interface and at least one source of at least one of the plurality of data flows to determine one or more rates at which one or more of the plurality of data flows flow into the network interface if the total data rate satisfies at least one first condition;
- and
- use at least one physical rate limiter positioned between the QP and the at least one source to limit at least one rate of the one or more rates at which at least one of the plurality of data flows is provided to a receive queue of the QP if the total data rate satisfies the at least one first condition and the at least one rate satisfies at least one second condition to thereby provide access to at least one resource of the network interface to the plurality of data flows.
2 more elements
Dependencies are inferred from the claim text.