Packet processing using distribution algorithms

A network system, comprising:

• a number of network devices having processor and memory resources;
• a checking functionality associated with at least one network device;
• and
• wherein the system includes logic and computer executable instructions stored in memory and executable by processor resources to:
• receive a checking functionality rule set as an input to a distribution algorithm;
• provide separate configuration instructions, as an output from the distribution algorithm, to a first logic plane associated with the at least one network device and to a second logic plane associated with the checking functionality;
• and
• use a collaboration algorithm to provide processing coordination between the at least one network device and the checking functionality,
• wherein the checking functionality is configured with patterns which can be indexed by a set of pattern indices associated with packets that have satisfied a number of pre-conditions in processing on the first logic plane, operates to perform a pattern search only when the number of pre-conditions has been satisfied,
• wherein the distribution algorithm executes instructions to output separate configuration instructions to the network device and the checking functionality such that the checking functionality does not process packet information which the number of pre-conditions have already expressed, and
• wherein first logic plane appends an ASIC context to a matched packet and forwards the matched packet to the checking functionality when a number of pre-conditions have been satisfied according to the configuration instructions provided to the first logic plane.

A non-transitory computer readable medium having instructions stored thereon which are executable to cause a device to perform a method, comprising:

• providing intrusion prevention system (IPS) signatures as an input to a distribution algorithm;
• generating different configuration instructions, as an output from the distribution algorithm, to provide to a first logic plane associated with a first logical entity and to a second logic plane associated with a second logical entity;
• providing the different configuration instructions generated by the distribution algorithm and providing n-tuple flow information as inputs to a collaboration algorithm;
• and
• using the collaboration algorithm to provide packet processing coordination between the first logical entity and the second logical entity.