Methods and apparatuses for identifying and alleviating internal bottlenecks prior to processing packets in internal feature modules

摘要

Methods and apparatuses for identifying and alleviating bottlenecks prior to processing packets in internal feature modules are described. First, a method is provided for aggregating the service policies of various physical interfaces, and using results of the aggregation to determine whether a packet processing engine is capable of satisfying the aggregated service policy information. Second, a method and apparatus for applying the aggregated service policy prior to processing in an internal feature module, such as a crypto-engine. Packets on routers/switches are expected to be subjected to certain policies to address resource contention or streamlining/prioritization on outbound interfaces. Internal bottlenecks that a user can neither see nor control may cause packet transmission guarantees to be violated. Encryption is an example of an internal service that adds overhead thereby creating an internal bottleneck. Such internal bottlenecks are cured through intelligent means of pre-processing and pre-application of certain policy rules.

主权项

1. A method comprising:
determining, prior to a shared internal feature module processing a plurality of packets, whether a total bandwidth of the shared internal feature module is sufficient to concurrently meet a plurality of bandwidth requirements at a corresponding plurality of downstream egress interfaces; responsive to determining that the total bandwidth of the shared internal feature module cannot concurrently meet the plurality of bandwidth requirements at the corresponding plurality of downstream egress interfaces, providing a notification that the shared internal feature module cannot concurrently meet the plurality of bandwidth requirements at the corresponding plurality of downstream egress interfaces; wherein the method is performed by at least one device comprising a processor; and wherein the shared internal feature module is a crypto-processor.