Use of stateless marking to speed up stateful firewall rule processing
US9729512B2 · kind B2 · utility
12Cited by
19References
18Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jun 4, 2014 |
| Grant date | Aug 8, 2017 |
| Priority date | — |
| Expiry date | Nov 10, 2034 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L43/028
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A novel method for stateful packet classification that uses hardware resources for performing stateless lookups and software resources for performing stateful connection flow handshaking is provided. To classify an incoming packet from a network, some embodiments perform stateless look up operations for the incoming packet in hardware and forward the result of the stateless look up to the software. The software in turn uses the result of the stateless look up to perform the stateful connection flow handshaking and to determine the result of the stateful packet classification.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.