High assurance packet router

摘要

Systems (100) and methods (800) for routing packets within a Multi-Channel Communications Device (“MCCD”). The methods involve receiving a first packet (300) which has a first classification level and a second packet (300) which has a second different classification level. Subsequently, modified first and second packets (400) are generated by inserting routing headers (402) between data link layer protocol headers (308, 308′) and network layer protocol headers (310, 310′) of the first and second packets. Each routing header comprises an error-detecting code (512) and routing information (502) describing a route within the MCCD along which the first or second packet is to travel. The routing headers are then used by a single packet router (160) to simultaneously route the modified first and second packets through the MCCD to at least one port of a plurality of output interface ports (116, 1901, . . . , 190N) of the MCCD.

主权项

1. A method for routing packets within a Multi-Channel Communications Device (“MCCD”) of a plurality of different classification levels, comprising:
receiving, at the MCCD, a first packet which has a first classification level of the plurality of different classification levels and a second packet which has a second classification level different from the first classification level; generating modified first and second packets by inserting routing headers between data link layer protocol headers and network layer protocol headers of the first and second packets, each routing header comprising routing information describing a route within the MCCD along which the first or second packet is to travel; using the routing headers by a single packet router to sequentially route the modified first and second packets through the MCCD to at least one port of a plurality of output interface ports of the MCCD.