Patent ID: 8559423

Claim:
A packet processing apparatus, applied in an L4˜L7 network device, comprising: a plurality of interface processing units and a plurality of service processing units, the interface processing units are connected with the service processing units through a first connection unit; and each of the interface processing units is adapted to select, after receiving a packet from outside, a service processing unit from all the service processing units and transmit the packet to the selected service processing unit through the first connection unit; and each of the service processing units is adapted to perform service processing to the packet after receiving the packet, wherein all the service processing units are connected with a service control unit through a second connection unit; each of the service processing units is further adapted to determine, after receiving the packet, whether the packet received belongs to an established session, transmit the packet to the service control unit through the second connection unit if the packet does not belong to an established session, and perform service processing to the packet according to stored session information and session processing actions if the packet belongs to an established session; and the service control unit is adapted to establish a session for the packet after receiving the packet, select a service processing unit and transmit the session information and the session processing actions to the selected service processing unit through the second connection unit.