US 12,375,411 B2
Generic tree policy search optimization for high-speed network processor configuration
Shushan Wen, Pleasant Hill, CA (US)
Assigned to Fortinet, Inc., Sunnyvale, CA (US)
Filed by Fortinet, Inc., Sunnyvale, CA (US)
Filed on Dec. 31, 2021, as Appl. No. 17/566,855.
Prior Publication US 2023/0214388 A1, Jul. 6, 2023
Int. Cl. H04L 47/20 (2022.01); G06F 16/22 (2019.01); H04L 9/40 (2022.01); H04L 47/2441 (2022.01); H04L 49/20 (2022.01)
CPC H04L 47/20 (2013.01) [G06F 16/2246 (2019.01); H04L 47/2441 (2013.01); H04L 49/20 (2013.01); H04L 63/0263 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A network processor of a computing device coupled to a data communication network, for generic tree policy search optimization for high-speed network processor configuration, the network processor comprising:
a raw policy set for the network processor and dimension bitmaps corresponding to the raw policy set, wherein a first dimension bitmap indicates which dimensions to skip a boundary check for candidate policies at a leaf node and a second dimension bitmap indicates which dimensions to enact a boundary check on a current node;
a policy tree builder to generate a control image from a set of recursive operations on the raw policy set including selecting boundaries of the raw policy set from cuts on a given dimension of the raw policy set, the dimension cut based on a dimension selection and a partition number selection for the raw policy set; and
network processor hardware to configure at least one set of registers, at least one set of tables, and at least one sequence of instructions according to the control image; and
a queue to receive packets of a packet session from the data communication network,
wherein the network processor searches the optimized policy set for application to the packet session by the network processor hardware.