Layer-1 packet filtering
AssigneeForce10 Networks, Inc.
InventorLivio Ricciulli
Life of this patent
Estimating the term…
Abstract
An apparatus to perform hardware-based lossless stateful signature matching is disclosed. In one embodiment, the apparatus comprises a memory and multiple finite state machine (FSM) comparison units operating in parallel to compare packets to signatures to identify matches, if any, between data units in the packets and the plurality of signatures. Each of the FSM comparison units include FSMs having states stored in the memory and at least one transition between pairs of states, and a transition to a new state results in a non-destructive additive operation being performed to store any previous state with the new state.
Claims39
An apparatus to perform hardware-based lossless stateful signature matching, the apparatus comprising:
- a memory;
- a plurality of finite state machine (FSM) comparison units operating in parallel to compare packets to a plurality of signatures to identify matches, if any, between data units in the packets and the plurality of signatures, wherein each of the FSM comparison units include FSMs having a plurality of states stored in the memory and at least one transition between pairs of states, and a transition to a new state results in a non-destructive additive operation being performed to store any previous state with the new state.
An apparatus to perform hardware-based lossless stateful signature matching, the apparatus comprising:
- a memory;
- a plurality of finite state machine (FSM) comparison units operating in parallel to compare packets to a plurality of signatures to identify matches, if any, between data units in the packets and the plurality of signatures, wherein each of the FSM comparison units include FSMs having a plurality of states stored in the memory and at least one transition between pairs of states, and a transition to a new state results in a non-destructive bitwise ORing operation being performed to store any previous state with the new state, and further wherein at least one FSM comparison unit has a FSM having a plurality of states with a transition between pairs of the set of states, including an idle state, wherein each state is revisited only after transitioning through the idle state.
Dependencies are inferred from the claim text.