Back to results
US 6,625,150 B1Granted
Policy engine architecture
AssigneeWatchGuard Technologies, Inc.
InventorJungJi John Yu
Life of this patent
Estimating the term…
Abstract
A policy engine for handling incoming data packets. The policy engine includes a stream classification module, a data packet input/output module, and a policy enforcement module. The policy enforcement module further includes a packet scheduler, an on-chip packet buffer circuitry, and a plurality of action processors. The stream classification module creates a packet service header for each data packet, wherein the packet service header indicates policies to be enforced for that data packet. The action processors enforce the policies.
Claims1
A policy engine comprising:
- a stream classification module;
- a packet input/output module that places received packets in an external packet memory and that notifies the stream classification module of the packets in the external packet memory;
- wherein the stream classification module creates a packet service header for each packet in the external packet memory indicating, based on a policy cache, policies to be enforced on that packet;
- a policy enforcement module to enforce policies on the packets, including
- a packet scheduler that fragments each packet into cells and schedules enforcement of the policies on each cell based on the packet service header;
- on-chip packet buffer circuitry to temporarily hold the packets during policy enforcement;
- and
- a plurality of action processors, each action processor performing a particular policy enforcement on a cell and routing the cell to a next one of the action processors.
5 more elements
Dependencies are inferred from the claim text.