Patent ID: 8532107
Filing Date: 2013-09-10
Classification: H04L

Abstract:
1. A method comprising: receiving a plurality of packets on a network tunnel of a network device for which the network device is configured as an egress of the network tunnel, wherein at least some of the plurality of packets on the network tunnel comprise fragmented packets that are fragments of tunnel encapsulated packets, wherein at least some of the fragmented packets include network layer information associated with a network layer header of an original unfragmented tunnel encapsulated packet and do not include transport layer information associated with a transport layer header of the original unfragmented tunnel encapsulated packet; determining, in a forwarding plane of the network device, whether each of the packets conforms to tunnel definitions for the network tunnel, wherein the tunnel definitions define the network tunnel by specifying both network layer information and transport layer information required for the packets; for one of the plurality of packets comprising a non-first fragmented packet associated with an original unfragmented tunnel encapsulated packet, performing a lookup in a forwarding plane data structure comprising one or more long routes programmed based on the tunnel definitions, wherein each of the long routes identifies an endpoint device of the network tunnel, and wherein each of the long routes resolves to a respective node of the data structure, and wherein each of the nodes references a set of filters associated with one of the endpoint devices; determining based on the lookup whether a first fragmented packet associated with the original unfragmented tunnel encapsulated packet has been received having transport layer information that matches a filter of the set of filters; and processing the non-first fragmented packet in the forwarding plane of the network device after the first fragmented packet associated with the original unfragmented tunnel encapsulated packet is received having transport layer information that matches a filter of the set of filters.