| CPC H04L 63/0263 (2013.01) [G06N 5/02 (2013.01); H04L 41/16 (2013.01)] | 30 Claims |

|
1. A method comprising:
configuring a packet filtering device to process packets in accordance with a first set of packet filtering rules;
receiving, by the packet filtering device, a first plurality of packets after configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;
beginning processing, by the packet filtering device, the first plurality of packets in accordance with the first set of packet filtering rules;
receiving, by the packet filtering device, a second set of packet filtering rules;
preprocessing, by the packet filtering device and during processing of the first plurality of packets in accordance with the first set of packet filtering rules, the second set of packet filtering rules by performing operations on the second set of packet filtering rules, prior to the second set of packet filtering rules being implemented on the packet filtering device, to optimize performance of the packet filtering device, wherein the packet filtering device does not process packets using the second set of packet filtering rules while preprocessing the second set of packet filtering rules;
in response to receiving a signal to process packets in accordance with the second set of packet filtering rules:
ceasing processing, by the packet filtering device, of the first plurality of packets, wherein a first portion of the first plurality of packets has completed processing in accordance with the first set of packet filtering rules and a second portion of the first plurality of packets has not completed processing in accordance with the first set of packet filtering rules;
temporarily storing, by the packet filtering device, the second portion of the first plurality of packets;
reconfiguring the packet filtering device to process packets in accordance with the second set of packet filtering rules; and
responsive to receiving one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed, processing, by the packet filtering device, the second portion of the first plurality of packets and a second plurality of unprocessed packets in accordance with the second set of packet filtering rules.
|