Back to results
US 2020/0403974 A1Published application
Rule Swapping in a Packet Network
AssigneeCentripetal Networks, Inc.
InventorsDavid K. Ahn, Steven Rogers, Sean Moore
Life of this patent
Estimating the term…
Abstract
In some variations, first and second rule sets may be received by a network protection device. The first and second rule sets may be preprocessed. The network protection device may be configured to process packets in accordance with the first rule set. Packets may be received by the network protection device. A first portion of the packets may be processed in accordance with the first rule set. The network protection device may be reconfigured to process packets in accordance with the second rule set. A second portion of the packets may be processed in accordance with the second rule set.
Claims18
A method comprising:
- preprocessing, by a network protection device, a first rule set by performing operations on the first rule set, prior to the first rule set being implemented on the network protection device, to optimize performance of the network protection device;
- configuring the network protection device to process packets in accordance with the preprocessed first rule set after preprocessing the first rule set;
- receiving a plurality of packets after configuring the network protection device to process packets in accordance with the preprocessed first rule set;
- processing, by the network protection device, a first portion of the plurality of packets in accordance with the preprocessed first rule set;
- receiving, after configuring the network protection device to process packets in accordance with the preprocessed first rule set and after processing the first portion of the plurality of packets in accordance with the preprocessed first rule set, a second rule set;
- preprocessing, by the network protection device, the second rule set by performing operations on the second rule set, prior to the second rule set being implemented on the network protection device, to optimize performance of the network protection device, wherein the second rule set is preprocessed prior to the network protection device processing any packets in accordance with the second rule set;
- signaling the network protection device to process packets in accordance with the second rule set;
- and
- responsive to the signaling:
- ceasing processing of one or more packets by the network protection device;
- caching the one or more packets;
- reconfiguring the network protection device to process packets in accordance with the preprocessed second rule set;
- signaling completion of reconfiguration to process packets in accordance with the preprocessed second rule set;
- and
- responsive to signaling the completion of the reconfiguration, processing the one or more cached packets by the network protection device in accordance with the preprocessed second rule set.
12 more elements
A network protection device comprising:
- one or more processors;
- and
- memory comprising instructions that, when executed by the one or more processors, cause the network protection device to:
- preprocess a first rule set by performing operations on the first rule set, prior to the first rule set being implemented on the network protection device, to optimize performance of the network protection device;
- configure the network protection device to process packets in accordance with the preprocessed first rule set after preprocessing the first rule set;
- receive a plurality of packets after configuring the network protection device to process packets in accordance with the preprocessed first rule set;
- process a first portion of the plurality of packets in accordance with the preprocessed first rule set;
- receiving, after configuring the network protection device to process packets in accordance with the preprocessed first rule set and after processing the first portion of the plurality of packets in accordance with the preprocessed first rule set, a second rule set;
- preprocessing the second rule set by performing operations on the second rule set, prior to the second rule set being implemented on the network protection device, to optimize performance of the network protection device, wherein the second rule set is preprocessed prior to the network protection device processing any packets in accordance with the second rule set;
- signal the network protection device to process packets in accordance with the second rule set;
- and
- responsive to the signaling:
- cease processing of one or more packets by the network protection device;
- cache the one or more packets;
- reconfigure the network protection device to process packets in accordance with the preprocessed second rule set;
- signal completion of reconfiguration to process packets in accordance with the preprocessed second rule set;
- and
- responsive to signaling the completion of the reconfiguration, process the one or more cached packets by the network protection device in accordance with the preprocessed second rule set.
15 more elements
A non-transitory computer-readable medium comprising instructions that, when executed, cause a device to:
- preprocess a first rule set by performing operations on the first rule set, prior to the first rule set being implemented on the device, to optimize performance of the device;
- configure the device to process packets in accordance with the preprocessed first rule set after preprocessing the first rule set;
- receive a plurality of packets after configuring the device to process packets in accordance with the preprocessed first rule set;
- process a first portion of the plurality of packets in accordance with the preprocessed first rule set;
- receiving, after configuring the device to process packets in accordance with the preprocessed first rule set and after processing the first portion of the plurality of packets in accordance with the preprocessed first rule set, a second rule set;
- preprocessing the second rule set by performing operations on the second rule set, prior to the second rule set being implemented on the device, to optimize performance of the device, wherein the second rule set is preprocessed prior to the device processing any packets in accordance with the second rule set;
- signal the device to process packets in accordance with the second rule set;
- and
- responsive to the signaling:
- cease processing of one or more packets by the device;
- cache the one or more packets;
- reconfigure the device to process packets in accordance with the preprocessed second rule set;
- signal completion of reconfiguration to process packets in accordance with the preprocessed second rule set;
- and
- responsive to signaling the completion of the reconfiguration, process the one or more cached packets by the device in accordance with the preprocessed second rule set.
12 more elements
Dependencies are inferred from the claim text.