EXTENDING BERKELEY PACKET FILTER SEMANTICS FOR HARDWARE OFFLOADS

• Main Authors: Waskiewicz Jr, Peter, Chilikin, Andrey, Tamir, Eliezer, Berg, Johannes, Cunningham, Andrew
• Format: Patent
• Language: English; French; German
• Published: 28.04.2021
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

Embodiments of the subject disclosure concern a method implemented using network interface controller circuitry for use in association with host computer circuitry. The host computer circuitry is to execute, when the host computer circuitry is in operation, a Linux operating system and a user space application, the Linux operating system, when executed, having a kernel space. The method comprises: providing at least one call associated with the kernel space, the at least one call being usable to set packet filter rules, the packet filter rules corresponding to packet filter rule data, the packet filter rule data being for use in programming packet processing hardware offload circuitry of the network interface controller circuitry to determine, based upon header data of at least one incoming packet and the packet filter rule data, at least one action of the packet filter rules to apply to the at least one incoming packet. The at least one action is configurable to include: at least one network address translation-related operation associated with the header data; dropping the at least one incoming packet; and/or forwarding the at least one incoming packet. When the host computer is in the operation, after registration of at least one device driver of the network interface controller circuitry: the packet filter rule data is to be associated with the network interface controller circuitry via at least one callback function call; and the programming, of the packet processing hardware offload circuitry of the network interface controller circuitry is to be implemented by the at least one device driver associated with the network interface controller circuitry via code references to be associated with the at least one device driver associated with the network interface controller circuitry.