Dynamic hardware classification engine updating for a network interface

Incoming network data is processed according to a current hardware classification “engine” configuration. As data is propagated from a network interface to a host system, an activity of one or more components of the host system is monitored. If it is determined that a desired/optimal resource utilization of the host system and/or a desired/optimal network performance is not being achieved, the hardware classification “engine” configuration is dynamically modified.

CROSS-REFERENCE TO RELATED APPLICATIONS

The present application contains subject matter that may be related to the subject matter in the following U.S. applications filed on Apr. 22, 2005, and assigned to the assignee of the present application: “Method and Apparatus for Managing and Accounting for Bandwidth Utilization Within A Computing System” (U.S. Pat. No. 7,471,689; “Method and Apparatus for Consolidating Available Computing Resources on Different Computing Devices” (U.S. patent application Ser. No. 11/112,368; “Assigning Higher Priority to Transactions Based on Subscription Level” (U.S. patent application Ser. No. 11/112,947; “Method and Apparatus for Dynamically Isolating Affected Services Under Denial of Service Attack” (U.S. patent application Ser. No. 11/112,158; “Method and Apparatus for Improving User Experience for Legitimate Traffic of a Service Impacted by Denial of Service Attack” (U.S. patent application Ser. No. 11/112,629; “Method and Apparatus for Limiting Denial of Service Attack by Limiting Traffic for Hosts” (U.S. patent application Ser. No. 11/112,328; “Hardware-Based Network Interface Per-Ring Resource Accounting” (U.S. patent application Ser. No. 11/112,222; “Network Interface Card Resource Mapping to Virtual Network Interface Cards” (U.S. patent application Ser. No. 11/112,063; “Network Interface Decryption and Classification Technique” (U.S. patent application Ser. No. 11/112,436; “Method and Apparatus for Enforcing Resource Utilization of a Container” (U.S. patent application Ser. No. 11/112,910; “Method and Apparatus for Enforcing Packet Destination Specific Priority Using Threads” (U.S. Pat. No. 7,499,457; “Method and Apparatus for Processing Network Traffic Associated with Specific Protocols” (U.S. patent application Ser. No. 11/112,228; and “Method and Apparatus for Enforcing Bandwidth Utilization of a Virtual Serialization Queue” (U.S. Pat. No. 7,499,463).

BACKGROUND OF INVENTION

In modern computing environments, computer systems are often required to communicate with other computer systems to perform any one or more of a vast number of different functions. Such communication may involve one computer system requiring the services or resources of another computer system. Referring toFIG. 1, in cases where multiple computer systems are not or cannot be directly and physically connected to one another due to, for example, being in different or remote locations, communication among multiple computer systems10,12,14,16,18,20is facilitated by one or more networks22(e.g., the Internet) to which the multiple computer systems10,12,14,16,18,20are operatively connected.

When a computer system sends data to a network for subsequent transmission to another computer system, that data is typically sent as numerous packets of data that can be universally recognized and handled by at least those networks that play a role in facilitating the transfer of that data between the computer systems (the propagation of packets in one or more networks hereinafter referred to generally as “network traffic”). A packet is typically formed of a header portion and a payload portion. The header portion may include information regarding, for example, an address of the sending system, an address of the desired receiving system, a size of the packet, a transport protocol used to transmit the packet, or other information identifying or characterizing the packet. The payload portion includes the actual data (e.g., data needed by the receiving system to perform a particular computation) to be transmitted from the sending system over the network to the receiving system.

To facilitate the sending and receiving of network traffic, a computer system typically includes or is otherwise connected to a network interface such as, for example, a hardware component known as a “network interface card” (NIC).FIG. 2shows a typical computing environment having a “host” system30in operative connection with a network interface card32. As shown inFIG. 2, the host system30includes a computing resource (e.g., a central processing unit (CPU), a temporary data structure)34that is operatively connected to the network interface card32.

The network interface card32, which is connected to a network36, includes a classifier38, receive rings (e.g., first-in, first-out queues)40that are each associated with a set of buffers, and send rings42used to transmit outgoing network traffic. Incoming network traffic is analyzed by the classifier38and assigned to one of the receive rings40based on, for example, an identification (e.g., an internet protocol (IP) address) or connection type (e.g., transmission control protocol (TCP)) of a particular packet. The classifier38is part of a larger hardware classification “engine” that is statically programmed to direct received traffic to particular receive rings40based on information present in the received traffic. Such programming of the network interface card32is done statically and is optimized for a default distribution of received traffic to the receive rings40.

Upon assignment by the classifier38of a particular packet to one of the receive rings40, the packet is forwarded to that receive ring and a corresponding interrupt may be issued to the computing resource34to indicate the receipt of new data. Depending on, for example, a priority attributed to a particular receive ring, the computing resource34may instantiate a thread or use a current thread to retrieve the new data forwarded to that particular receive ring. In other cases, the computing resource34may not actively retrieve new data forwarded to a particular receive ring, and instead, may simply wait for new data to be processed through that particular receive ring.

SUMMARY OF INVENTION

According to one aspect of one or more embodiments of the present invention, a system comprises: a network interface operatively connected to a network and arranged to operatively propagate data packets from the network to at least one of a plurality of receive rings based on configuration information; a plurality of virtual serialization queues arranged to receive data packets from the plurality of receive rings; and management software to (i) monitor an activity of at least one of the plurality of virtual serialization queues, and (ii) dynamically modify the configuration information based on the monitoring.

According to one aspect of one or more embodiments of the present invention, a method of processing network traffic in a host system comprises: receiving data packets from a network; classifying and routing the data packets in a network interface based on configuration information; propagating the data packets from the network interface to the host system; monitoring an activity of the host system; and dynamically modifying the configuration information at least partly based on the monitoring.

According to one aspect of one or more embodiments of the present invention, a system comprises: a network interface card connectable to a network, the network interface card configured to propagate data packets from the network to a host system based on configuration information, where the network interface card includes (i) a classifier configured to receive the data packets from the network, and (ii) a plurality of receive rings to which the classifier is configured to direct the data packets based on the configuration information; a plurality of structures residing in the host system and configured to receive the data packets from the plurality of receive rings; and instructions residing in the host system to dynamically modify the configuration information at least partly based on an activity of at least one of the plurality of structures.

DETAILED DESCRIPTION

Exemplary embodiments of the present invention will be described with reference to the accompanying drawings. Like items in the drawings are shown with the same reference numbers. In the following description of the various embodiments of the present invention, numerous specific details are set forth in order to provide a more thorough understanding of the present invention. However, it will be apparent to one of ordinary skill in the art that the present invention may be practiced without these specific details. In other instances, well-known features have not been described in detail to avoid obscuring the description of the present invention.

Embodiments of the present invention relate to a technique for processing network traffic in a computing environment in which multiple computing resources share a network interface.

FIG. 3shows a portion of an exemplary computing environment in accordance with an embodiment of the present invention. InFIG. 3, a host system50is in operative connection with a network interface card52. The host system52includes a plurality of virtual network interface cards62,64,66(each labeled inFIG. 3as “VNIC”) that are interfaced to a network (e.g., a local area network (LAN), a wide area network (WAN), a wireless network)60by the network interface card52.

In one or more embodiments of the present invention, each virtual network interface card62,64,66is associated with at least one virtual serialization queue54,56,58. Each serialization queue54,56,58corresponds to a data structure having at least two queues: an inbound queue and an outbound queue. Each of the queues within the virtual serialization queues54,56,58may be implemented as first-in, first-out (FIFO) queues. Further, each virtual serialization queue54,56,58may be configured to send and receive packets from associated virtual network interface cards62,64,66. In addition, each virtual serialization queue54,56,58is configured to send and receive packets from one or more associated packet destinations (e.g., services and/or containers of the host system50)65. Further, each virtual serialization queue54,56,58may be bound to a computing resource (e.g., a central processing unit (CPU)) (not shown) of the host system50. Those skilled in the art will appreciate that any number of virtual serialization queues may be bound to a CPU. Further, those skilled in the art will appreciate that any number of virtual serialization queues may be bound to a virtual network interface card.

As described above, each of the plurality of virtual serialization queues54,56,58is respectively associated with a “virtual” network interface card62,64,66(each labeled inFIG. 3as “VNIC”). The virtual network interface cards62,64,66provide an abstraction layer between the physical network interface card52and the various packet destinations (e.g., services and/or containers of the host system50)65present in the host system50. In other words, each virtual network interface card62,64,66operates like a physical network interface card. For example, in one embodiment of the present invention, each virtual network interface card62,64,66may be associated with one or more Internet Protocol (IP) addresses, one or more ports, and/or configured to handle one or more protocol types. Thus, while the host system50may be operatively connected to a single physical network interface card52, packet destinations65in the host system50operate as if each packet destination has its own physical network interface card.

The network interface card52, which is connected to the network60, includes a classifier (e.g., a hardware classifier)68, receive rings (e.g., first-in, first-out queues)70,72,74,76,78,80that are each associated with a set of buffers, and send rings82used to transmit outgoing network traffic. Incoming network traffic is analyzed by the classifier68and assigned to one of the receive rings70,72,74,76,78,80based on, for example, an identification (e.g., a destination/source internet protocol (IP) address) or connection type (e.g., transmission control protocol (TCP)) of a particular packet.

Those skilled in the art will note that in one or more embodiments of the present invention, a network interface may be implemented without a physical network interface card. For example, in one or more embodiments of the present invention, a network interface may be implemented in software.

As described above with reference toFIG. 3, in an embodiment of the present invention, a host system50is shared by multiple services and/or containers. In order to direct the flow of incoming traffic, policies are defined and implemented to control how resources of the network interface card52are utilized. In one or more embodiments of the present invention, and as exemplarily described below with reference toFIG. 4, these policies, in conjunction with rules of the host system50and current resource utilization information, may be used to dynamically program the overall hardware classification “engine” (which includes the classifier68) used to route incoming traffic to particular receive rings70,72,74,76,78,80. In one or more embodiments of the present invention, the policies may determine the resource utilization allowed for one or more services of the host system50. In one or more other embodiments of the present invention, the policies may determine the resource utilization for one or more containers of the host system50. Further, in one or more other embodiments of the present invention, the policies may determine the resource utilization for any combination of one or more services and one or more containers of the host system50.

FIG. 4, in accordance with an embodiment of the present invention, shows an exemplary portion of the portion of the networked computing environment shown inFIG. 3. Incoming traffic from network60is routed to the classifier68, which routes particular packets to particular receive rings (e.g., receive rings70,72,74,76,78,80shown inFIG. 3) based on information stored in a table69associated with the classifier68. In one or more embodiments of the present invention, the table69stores information indicating correspondence between a particular packet and the receive ring to which that particular packet should be directed. For example, the table69may include information that associates packets received from a particular IP address to a particular receive ring.

Incoming packets, once classified by the classifier68and as stored in the appropriate receive rings, are propagated to an appropriate virtual serialization queue54,56,58via a driver90(and a virtual network interface card62,64,66as shown inFIG. 3) residing in the host system50. For example, a packet received by a particular type of transmission protocol is (i) classified as such by the classifier68, (ii) stored in a receive ring indicated by the table69for that type of transmission protocol, and (iii) propagated to or retrieved by the one of the virtual serialization queues54,56,58associated with that particular type of transmission control.

Interfaced with one or more of the virtual serialization queues54,56,58is management software92that, among other things, monitors the activity of the one or more of the virtual serialization queues54,56,58. Based on rules (e.g., bandwidth constraint information) and policies (e.g., which virtual serialization queues54,56,58belong to which service or container of the host system50) defined in the host system50, the management software92is used to determine whether a current resource utilization of the host system50is at a desired or optimal level of performance with respect to at least the processing performance of incoming network traffic. By monitoring the activity/performance/behavior of the one or more of the virtual serialization queues54,56,58, the management software92may be used to dynamically modify either or both of the driver90and the table69to effectuate changes in the routing of incoming network traffic to particular points in the host system50. For example, based on some set of criteria detected by the management software92, the management software92, via the driver90, may dynamically modify the table69so as to cause a particular type of packet to be routed to one or more particular receive rings to which that type of packet was not particular routed to prior to the dynamic modification.

Those skilled in the art will note that by dynamically programming the hardware classification “engine” as described above with reference toFIG. 4, desired/optimal resource utilization and/or desired/optimal network performance may be achieved by, for example, avoiding bandwidth bottlenecks created by a particular hardware classification “engine” configuration.

FIG. 5shows an exemplary flow process in accordance with an embodiment of the present invention. As shown inFIG. 5, incoming network traffic is processed according to a current hardware classification “engine” configuration ST100. Specifically, for example, incoming packets are directed by a classifier (e.g., classifier68shown inFIG. 4) to particular receive rings (e.g., receive rings70,72,74,76,78,80shown inFIG. 3) based on information stored in a table (e.g., table69shown inFIG. 4).

As incoming network traffic is processed and propagated to and/or retrieved by components (e.g., virtual serialization queues54,56,58shown inFIG. 4) of a host system (e.g., host system50shown inFIG. 4), software (e.g., management software92shown inFIG. 4) monitors the packet activity of these components ST102. If it is determined, based on the monitoring in ST102, that a desired/optimum resource utilization of the host system and/or network performance is being achieved ST104, then the host system continues to process incoming network traffic according to the current hardware classification “engine” configuration ST100. However, if it is determined, based on the monitoring in ST102, that a desired/optimum resource utilization of the host system and/or network performance is not being achieved ST104, the hardware classification “engine” configuration is dynamically modified ST106, whereby the dynamically updated hardware classification “engine” configuration becomes the current hardware classification “engine” configuration and incoming network traffic is processed accordingly ST100.

An embodiment of the present invention may be associated with virtually any type of computer system regardless of the platform being used. For example, as shown inFIG. 6, a networked computer system200includes a processor202, associated memory204, a storage device206, and numerous other elements (not shown) and functionalities typical of modern computer systems. The networked computer system200may also include input means, such as a keyboard208and a mouse210, and output means, such as a monitor212. The networked computer system200is connected to a local area network (LAN) or a wide area network via a network interface connection (not shown). Those skilled in the art will appreciate that these input and output means may take other forms. Further, those skilled in the art will appreciate that one or more elements of the networked computer system200may be remotely located and connected to the other elements over a network. Further, software instructions to perform embodiments of the invention may be stored on a computer readable medium such as a compact disc (CD), a diskette, a tape, a file, or any other computer-readable storage device.

Advantages of the present invention may include one or more of the following. In one or more embodiments of the present invention, packet classification performed by a network interface may be programmed dynamically.

In one or more embodiments of the present invention, dynamic programming or “self-tuning” of a hardware classification “engine” may allow for the achievement of desired or optimal resource utilization.

In one or more embodiments of the present invention, dynamic programming or “self-tuning” of a hardware classification “engine” may allow for the achievement of desired or optimal network performance.