PLD-based packet filtering methods with PLD configuration data update of filtering rules

A method for updating the configuration of a programmable logic device-based packet filtering system (“PLD system”) operating to filter packets received from a packet-based network, wherein filtering rules are used to determine whether a packet is to be junked, wherein the PLD system is one of a plurality of PLD systems coupled to receive packets from the network, comprising the steps of:

• operating the PLD system in accordance with first configuration data, wherein, in accordance with the first configuration data, the PLD system receives packets including at least first packets from the network, processes the first packets including at least a filtering operation based on the filtering rules, and transmits the processed first packets to an electronic connection coupled to the PLD system, wherein the PLD system processes the first packets at least in part based on source or destination address information and based on the first configuration data;
• receiving second configuration data for the PLD system sent from a computing system over the network, wherein the second configuration data is selectively received via one or more second packets via the network, wherein the second configuration data are different from the first configuration data;
• loading the second configuration data into the PLD system;
• and
• operating the PLD system in accordance with the second configuration data, wherein, in accordance with the second configuration data, the PLD system receives packets including at least third packets from the network, processes the third packets including at least a filtering operation based on the filtering rules, and transmits the processed third packets to the electronic connection coupled to the PLD system, wherein PLD system processes the third packets at least in part based on sources or destination address information and based on the second configuration data;
• wherein, after receiving each of the one or more second packets, the PLD system sends at least a fourth packet to the computing system over the network, wherein each fourth packet acknowledges receipt of a corresponding one of the one or more second packets.