Network device and method for processing traffic using multi-network interface card
AssigneeElectronics and Telecommunications Research Institute
InventorsSang-Kil Park, Joon-Kyung Lee, Dong-Won Kang, Sang-Sik Yoon, Sang-Wan Kim, Wang-Bong Lee, Jong-Dae Park
Life of this patent
Estimating the term…
Abstract
A method for processing traffic using a multi-network interface card and a network device employing the method are provided. The network device includes a first network card configured to classify and filter traffic, a second network card configured to inspect and process the traffic classified by the first network card, a processor configured to manage the first and second network cards and apply network policies to the first and second network cards, respectively, and a memory configured to store the network policies.
Claims13
A network device comprising:
- a first network card configured to classify input packets, filter and discard a first packet of classified packets, and transmit a second packet of the classified packets to a second network card;
- the second network card configured to perform deep packet inspection and processing of the second packet received by the first network card;
- a processor configured to manage the first and second network cards and apply network policies to the first and second network cards, respectively,
- wherein the first network card filters and discards the packets corresponding to second to fourth layers of the input packets, transmits the packets requiring inspection and not corresponding to the second to fourth layers to the second network card, and transmits other normal packets to networks,
- wherein the deep packet inspection comprises parsing application services from the packets, retrieving applications policies, and attempting to match the application services with corresponding application policies, and
- wherein the second network card transfers the packets back to the first network card after changing a payload of the packets according to a matching result of the deep packet inspection,
- wherein the first network card:
- receives packets from the second network card,
- stores the packets received in an asynchronous first in a first out (FIFO) device, and
- transmits the packets stored to a network;
- and
- a memory configured to store the network policies.
A method of processing traffic using a first network card and a second network card at a network device, comprising:
- classifying, at the first network card, input packets, filtering and discarding a first packet of classified packets, and transmitting a second packet of the classified packets to the second network card;
- and
- performing deep packet inspection and processing of the second packet received by the first network card at the second network card,
- wherein the first network card filters and discards the packets corresponding to second to fourth layers of the input packets, transmits the packets requiring inspection and not corresponding to the second to fourth layers to the second network card, and transmits other normal packets to networks,
- wherein the deep packet inspection comprises parsing application services from the packets, retrieving applications policies, and attempting to match the application services with corresponding application policies, and
- wherein the second network card transfers the packets back to the first network card after changing a payload of the packets according to a matching result of the deep packet inspection,
- wherein the first network card:
- receives packets from the second network card,
- stores the packets received in an asynchronous first in first out (FIFO) device, and transmits the packets stored to a network.
Dependencies are inferred from the claim text.