Use of stateless marking to speed up stateful firewall rule processing
US11019030B2 · kind B2 · utility
11Cited by
26References
19Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Nov 17, 2017 |
| Grant date | May 25, 2021 |
| Priority date | — |
| Expiry date | Dec 23, 2038 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L69/326
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A novel method for stateful packet classification that uses hardware resources for performing stateless lookups and software resources for performing stateful connection flow handshaking is provided. To classify an incoming packet from a network, some embodiments perform stateless look up operations for the incoming packet in hardware and forward the result of the stateless look up to the software. The software in turn uses the result of the stateless look up to perform the stateful connection flow handshaking and to determine the result of the stateful packet classification.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.