Abstract: Aspects of the disclosure provide a method for processing packets in a network device. The method can include populating a policy database with one or more bidirectional rules that are to be selectively applied in a packet processing operation. Ones of the bidirectional rules can include at least: a first address field populated with a first value corresponding to a source address for first packet flow that is traversing a network in a first direction and to a destination address for second packet flow that is traversing the network in a second direction different from the first direction, a second address field populated with a second value, and an action that is applicable to packet flow having a respective source address and destination address corresponding to the first values stored in the first address field and to the second values stored in the second address field.

Abstract: A forwarding engine in a network device selects one or more groups of multiple egress interfaces of the network device for forwarding packets received by the network device. An egress interface selector in the network device selects individual egress interfaces within the one or more groups selected by the forwarding engine. The egress interface selector includes a table associated with a first group of multiple egress interfaces, wherein elements in the table include values indicate individual egress interfaces in the first group. When the forwarding engine selects the first group, a table element selector of selects an element in the table to identify the individual egress interface for forwarding the packet.

Abstract: A TCAM database is partitioned into a plurality of sections. A set of rules to be stored in the TCAM database is analyzed to identify respective subsets of rules that match respective possible bit value combinations corresponding to a subset of bits in the rules, and to identify, in the subsets of rules, two or more subsets that share one or more rules. Then, it is determined whether two or more subsets that include shared rules can be written to a same section in the TCAM database, without exceeding a maximum number of rules that can be written to the same section, when one or more duplicates of one the the shared rules is omitted from the TCAM database. When it is determined that two or more subsets can be written to the same section, the two or more subsets are written to the same section in the TCAM database.

Abstract: Systems and methods are provided for a multi-core processor for processing different types of data units. A system includes a classifier configured to classify incoming data units into different type data units. A plurality of processing cores are selectably configurable into plural processing pipelines, respective processing pipelines including connected processing cores, ones of the processing cores being selectably programmed to execute a respective processing operation on a received incoming data unit, different ones of the processing pipelines defined by a selectable number of processing cores. A distributor is configured to distribute the different types of data units to one of the pipelines among the plural pipelines at least as a function of the classified type of the data units and the programmed processing operations of processing cores in the pipelines.

Abstract: A forwarding system includes a first processor coupled to connecting devices using a plurality of uplinks, and a second processor coupled to the connecting devices using a plurality of downlinks. The first processor includes, in a memory, one or more queues each corresponding to the second processor, a priority, and/or to a packet cast type (e.g., unicast or multicast). The first processor is configured to select a particular queue, select a particular uplink based on a comparison of measurements corresponding to respective loads of the plurality of uplinks, and cause a fragment or the entirety of a packet in the particular queue to be forwarded to the second processing device using the selected uplink and corresponding connecting device. The second processor is configured to reassemble the packet, reorder the packet into a flow, and forward the packet from the forwarding system.

Abstract: A forwarding engine in a network device selects one or more groups of multiple egress interfaces of the network device for forwarding packets received by the network device. An egress interface selector in the network device selects individual egress interfaces within the one or more groups selected by the forwarding engine. The egress interface selector includes a table associated with a first group of multiple egress interfaces, wherein elements in the table include values indicate individual egress interfaces in the first group. When the forwarding engine selects the first group, a table element selector of selects an element in the table to identify the individual egress interface for forwarding the packet.

Abstract: In a modular switching device that includes a plurality of packet processors interconnected by a plurality of connecting devices, one or more data packets are received at a first packet processor. The first packet processor generates a communication frame that includes at least a portion of a first data packet among the one or more data packets. The first packet processor divides the communication frame into a plurality of transmission units, includes a communication frame identifier in respective transmission units, and includes a respective position identifier in respective transmission units. The transmission units are transmitted to the plurality of connecting devices via a first plurality of uplinks, and the plurality of connecting devices transmits the transmission units to the second packet processor via a second plurality of uplinks. The communication frame is reassembled from the plurality of transmission units using the communication frame identifier and the position identifiers.

Abstract: A forwarding system includes a first processor coupled to connecting devices using a plurality of uplinks, and a second processor coupled to the connecting devices using a plurality of downlinks. The first processor includes, in a memory, one or more queues each corresponding to the second processor, a priority, and/or to a packet cast type (e.g., unicast or multicast). The first processor is configured to select a particular queue, select a particular uplink based on a comparison of measurements corresponding to respective loads of the plurality of uplinks, and cause a fragment or the entirety of a packet in the particular queue to be forwarded to the second processing device using the selected uplink and corresponding connecting device. The second processor is configured to reassemble the packet, reorder the packet into a flow, and forward the packet from the forwarding system.

Abstract: A method for processing network traffic in a modular switching device that includes a source device, a target device, and a plurality of connecting devices, includes generating a communication unit at the source device, where the communication unit is associated with a unique communication unit identifier, and where the communication unit is to be transmitted to the target device; dividing the communication unit into a plurality of transmission units, including assigning a respective position identifier to each of the plurality of transmission units, where the position identifier is indicative of a position of the transmission unit within the communication unit, and assigning the communication unit identifier to each of the plurality of transmission units; the method further comprising causing the plurality of transmission units to be transmitted in parallel to respective ones of the plurality of connecting devices, where each of the plurality of connecting devices connects the source device to the target dev