Use of stateless marking to speed up stateful firewall rule processing
US9825913B2 · kind B2 · utility
12Cited by
20References
23Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jun 4, 2014 |
| Grant date | Nov 21, 2017 |
| Priority date | — |
| Expiry date | Jun 4, 2034 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L69/326
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A novel method for stateful packet classification that uses hardware resources for performing stateless lookups and software resources for performing stateful connection flow handshaking is provided. To classify an incoming packet from a network, some embodiments perform stateless look up operations for the incoming packet in hardware and forward the result of the stateless look up to the software. The software in turn uses the result of the stateless look up to perform the stateful connection flow handshaking and to determine the result of the stateful packet classification.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.