Patent ID: 7937355
Filing Date: 2011-05-03
Classification: H04L

Abstract:
1. A computer system device, comprising: a processor in communication with a network computer system control point; and a memory coupled to the processor, the memory containing one or more sequences of instructions for controlling a network device and a data table, the data table comprising a plurality of rules organized in a first decision tree, the first decision tree comprising a plurality of chained branches of filter rules, each branch having a depth value defined by a number of linked pointers leading from a root of the tree to a tip of the branch; wherein execution of the one or more sequences of instructions by the processor causes the processor to apply the first decision tree plurality of rules to data packets through the network computer system control point by: setting a worst case tree depth threshold equivalent to a depth value of a longest chained branch of the first decision tree; deleting one of the plurality of filter rules or adding a new rule; if deleting the one of the plurality of filter rules, providing an incremental delete of the one filter rule from the first decision tree to a network data plane processor for application to network data packets; and if adding the new rule, adding the new rule to a branch of the first decision tree to form an enlarged branch and determining a total rule depth of the enlarged branch; comparing the enlarged branch total rule depth to the worst case tree depth threshold; and: