Abstract: Embodiments of the invention a method for policing a packet at line rate. A hierarchical policer receives a policer request comprising packet characteristics and identifying request configuration information. The hierarchical policer retrieves meter states specified by the request configuration information. The hierarchical policer processes packet characteristics through meters to generate a meter result. The hierarchical policer generates a hierarchical policer table lookup address using a plurality of meter types, a plurality of input color controls, one or more of the packet characteristics, the meter results, and a plurality of coupling algorithm identifiers. The hierarchical policer reads a hierarchical meter result from a hierarchical policer result table, containing at least a final output packet attribute that classifies the packet. The hierarchical policer updates one or more of the meter states based on the plurality of meter state results.

Abstract: A method performed in a network element of a provider edge network to determine a downlink service path for a downlink packet. The method includes preserving an indication of the downlink service path while processing an uplink packet that has been transmitted from a subscriber end station toward a provider end station. The method also includes receiving the downlink packet at a line card of the network element. The downlink packet has been transmitted from the provider end station toward the subscriber end station. The method further includes determining, at the line card, the downlink service path for the downlink packet by using the indication of the downlink service path that was preserved while processing the uplink packet. The downlink service path is operable to identify a plurality of services and an order in which the plurality of services are to be performed on the downlink packet.

Abstract: Techniques for providing resilient multicast traffic processing in a network element are described herein. In one embodiment of the invention, a network element separately joins equivalent multicast traffic streams at a first and second interface respectively. During uninterrupted operation, the network element processes the packets of the multicast traffic stream it receives at the first interface and drops the packets of the equivalent multicast traffic stream it receives at the second interface. Upon an interruption of the packets of the multicast traffic stream being received at the first interface, the network element transitions to processing the packets of the equivalent multicast traffic stream it receives at the second interface. Other methods and apparatuses are also described.

Abstract: Techniques for providing wireless services to mobile subscribers using existing broadband network infrastructures are described herein. In one embodiment, in response to a request received at a gateway device from a mobile subscriber over a radio access network (RAN) for accessing a service provider network, the gateway device authenticates the mobile subscriber for accessing the RAN, where the gateway device interfaces the RAN and the existing broadband network. Upon successfully authenticating the mobile subscriber for accessing RAN, the gateway device accesses a network service provider over the existing network to acquire a network address on behalf of the mobile subscriber optionally using at least a portion of credentials derived from the authentication, where the network address allows the mobile subscriber to access the service provider network. Other methods and apparatuses are also described.

Abstract: In one aspect, the present invention reduces the amount of low-latency memory needed for rules-based packet classification by representing a packet classification rules database in compressed form. A packet processing rules database, e.g., an ACL database comprising multiple ACEs, is preprocessed to obtain corresponding rule fingerprints. These rule fingerprints are much smaller than the rules and are easily accommodated in on-chip or other low-latency memory that is generally available to the classification engine in limited amounts. The rules database in turn can be stored in off-chip or other higher-latency memory, as initial matching operations involve only the packet key of the subject packet and the fingerprint database. The rules database is accessed for full packet classification only if a tentative match is found between the packet key and an entry in the fingerprint database. Thus, the present invention also advantageously minimizes accesses to the rules database.

Abstract: Embodiments of the invention include a method performed in a packet processor core for policing a packet through a hierarchical policer coupled to one or more policing requestors. The hierarchical policer has a plurality of meter levels including an initial level and one or more subsequent levels. The hierarchical policer creates a meter result at the meter of each meter level using packet characteristics and a meter state for that meter level. The hierarchical policer generates meter level outputs that classify the packet for each meter level and for at least one of the subsequent levels the meter level output is based on the meter level output from a previous meter level. The hierarchical policer performs a meter combine operation that produces a final packet output attribute from the combination of the meter level outputs. The hierarchical policer returns the final packet output attribute to a policing requestor.

Abstract: Techniques for providing resilient multicast traffic processing in a network element are described herein. In one embodiment of the invention, a network element separately joins equivalent multicast traffic streams at a first and second interface respectively. During uninterrupted operation, the network element processes the packets of the multicast traffic stream it receives at the first interface and drops the packets of the equivalent multicast traffic stream it receives at the second interface. Upon an interruption of the packets of the multicast traffic stream being received at the first interface, the network element transitions to processing the packets of the equivalent multicast traffic stream it receives at the second interface. Other methods and apparatuses are also described.

Abstract: A method and apparatus of updating a forwarding plane of a network element in response to receiving a mobility event is described. The network element receives a mobility message indicating a mobile node has coupled to a new access port associated with the network element. The message further indicates that the mobile node moved from an old access port to a new access port. The network element adds an entry in a forwarding table of the old egress engine to redirect a set of packets destined to the mobile node to a new egress engine, where the new egress engine is associated with the new access port. Furthermore, the network element redirects the set of packet from the old egress engine to the new egress engine.

Abstract: Embodiments of the invention include a method performed by a bank aware mtrie control module for distributing a plurality of mtrie levels across a plurality of memory banks. The bank aware mtrie control module identifies the plurality of memory banks present and identifies one or more mtrie blocks in one or more mtrie levels, each mtrie block is an array of mtrie nodes associated with an mtrie level. The bank aware mtrie control module stores each mtrie block in one of the plurality of memory banks, all mtrie nodes in a given mtrie block are stored in the same memory bank. For each subsequent mtrie level, the bank aware mtrie control module ensures that each of the mtrie blocks in that mtrie level is stored in one of the plurality of memory banks other than the memory bank storing mtrie blocks of an immediately previous mtrie level.

Abstract: Embodiments of the invention include a method performed in a media access control (MAC) forwarding control module within a network element for looking up a MAC address and interface (I/F) identifier pair (MAC-I/F pair) from a MAC forwarding data structure that comprises a first tier data structure and a plurality of second tier data structures. The MAC forwarding data structure utilizes compressed keys to index each of the plurality second tier data structures. The compressed key is generated with a desired MAC address and a mask bit list that corresponds with enough bit positions such that all MAC addresses in second tier data structure can be uniquely addressed with just the values of each MAC address in the bit positions listed. As such, the MAC forwarding data structure is constructed so that the total cost of a lookup with the compressed key technique is deterministic and, therefore, O(1).

Abstract: Embodiments of the invention a method for policing a packet at line rate. A hierarchical policer receives a policer request comprising packet characteristics and identifying request configuration information. The hierarchical policer retrieves meter states specified by the request configuration information. The hierarchical policer processes packet characteristics through meters to generate a meter result. The hierarchical policer generates a hierarchical policer table lookup address using a plurality of meter types, a plurality of input color controls, one or more of the packet characteristics, the meter results, and a plurality of coupling algorithm identifiers. The hierarchical policer reads a hierarchical meter result from a hierarchical policer result table, containing at least a final output packet attribute that classifies the packet. The hierarchical policer updates one or more of the meter states based on the plurality of meter state results.

Abstract: Embodiments of the invention include a method performed by a bank aware mtrie control module for distributing a plurality of mtrie levels across a plurality of memory banks. The bank aware mtrie control module identifies the plurality of memory banks present and identifies one or more mtrie blocks in one or more mtrie levels, each mtrie block is an array of mtrie nodes associated with an mtrie level. The bank aware mtrie control module stores each mtrie block in one of the plurality of memory banks, all mtrie nodes in a given mtrie block are stored in the same memory bank. For each subsequent mtrie level, the bank aware mtrie control module ensures that each of the mtrie blocks in that mtrie level is stored in one of the plurality of memory banks other than the memory bank storing mtrie blocks of an immediately previous mtrie level.

Abstract: Embodiments of the invention include a method for avoiding memory bandwidth utilization during packet processing. The packet processing core receives a plurality of packets. The packet processing core identifies the packet's quality of service (QoS) descriptor. The packet processing core determines that at least one packet should be moved to an off-chip packet stored prior to the packet being transmitted to the egress port. The packet processing core bases that determination, at least in part, on the packet's QoS descriptor. The packet processing core moves the determined packets to the off-chip packet store. The packet processing core determines that at least one packet should not be moved to the off-chip packet store prior to the packet being transmitted to the egress port. This determination is also made, at least in part, based on the packet's QoS descriptor.

Abstract: Embodiments of the invention include a method performed in a packet processor core for policing a packet through a hierarchical policer coupled to one or more policing requestors. The hierarchical policer has a plurality of meter levels including an initial level and one or more subsequent levels. The hierarchical policer creates a meter result at the meter of each meter level using packet characteristics and a meter state for that meter level. The hierarchical policer generates meter level outputs that classify the packet for each meter level and for at least one of the subsequent levels the meter level output is based on the meter level output from a previous meter level. The hierarchical policer performs a meter combine operation that produces a final packet output attribute from the combination of the meter level outputs. The hierarchical policer returns the final packet output attribute to a policing requestor.

Abstract: Embodiments of the invention include a method performed in a media access control (MAC) forwarding control module within a network element for looking up a MAC address and interface (I/F) identifier pair (MAC-I/F pair) from a MAC forwarding data structure that comprises a first tier data structure and a plurality of second tier data structures. The MAC forwarding data structure utilizes compressed keys to index each of the plurality second tier data structures. The compressed key is generated with a desired MAC address and a mask bit list that corresponds with enough bit positions such that all MAC addresses in second tier data structure can be uniquely addressed with just the values of each MAC address in the bit positions listed. As such, the MAC forwarding data structure is constructed so that the total cost of a lookup with the compressed key technique is deterministic and, therefore, O(1).

Abstract: A method and apparatus of updating a forwarding plane of a network element in response to receiving a mobility event is described. The network element receives a mobility message indicating a mobile node has coupled to a new access port associated with the network element. The message further indicates that the mobile node moved from an old access port to a new access port. The network element adds an entry in a forwarding table of the old egress engine to redirect a set of packets destined to the mobile node to a new egress engine, where the new egress engine is associated with the new access port. Furthermore, the network element redirects the set of packet from the old egress engine to the new egress engine.

Abstract: Techniques for multiple protocol cross layer customized QoS propagation and mapping are described herein. In one embodiment of the invention, a first QoS code of a packet is determined, the packet having a first encapsulation layer and a second encapsulation layer, the first QoS code being included within the first encapsulation of the packet. From application of a first cross layer QoS map to the first QoS code, determining that the second encapsulation layer of the packet should be used in determining a QoS classification. The reference point to the second encapsulation layer is stored. The QoS classification is determined with use of the reference point. A representation of the QoS classification is stored in a QoS descriptor and the QoS descriptor is used to influence processing of the packet. Other methods and apparatuses are also described.

Abstract: Techniques for providing resilient multicast traffic processing in a network element are described herein. In one embodiment of the invention, a network element separately joins equivalent multicast traffic streams at a first and second interface respectively. During uninterrupted operation, the network element processes the packets of the multicast traffic stream it receives at the first interface and drops the packets of the equivalent multicast traffic stream it receives at the second interface. Upon an interruption of the packets of the multicast traffic stream being received at the first interface, the network element transitions to processing the packets of the equivalent multicast traffic stream it receives at the second interface. Other methods and apparatuses are also described.

Abstract: Techniques for multiple protocol cross layer customized QoS propagation and mapping are described herein. In one embodiment of the invention, a first QoS code of a packet is determined, the packet having a first encapsulation layer and a second encapsulation layer, the first QoS code being included within the first encapsulation of the packet. From application of a first cross layer QoS map to the first QoS code, determining that the second encapsulation layer of the packet should be used in determining a QoS classification. The reference point to the second encapsulation layer is stored. The QoS classification is determined with use of the reference point. A representation of the QoS classification is stored in a QoS descriptor and the QoS descriptor is used to influence processing of the packet. Other methods and apparatuses are also described.

Abstract: A method and apparatus of updating a forwarding plane of a network element in response to receiving a mobility event is described. The network element receives a mobility message indicating a mobile node has coupled to a new access port associated with the network element. The message further indicates that the mobile node moved from an old access port to a new access port. The network element adds an entry in a forwarding table of the old egress engine to redirect a set of packets destined to the mobile node to a new egress engine, where the new egress engine is associated with the new access port. Furthermore, the network element redirects the set of packet from the old egress engine to the new egress engine.