Systems and methods for reassembly of packets distributed across a cluster

摘要

The present application is directed towards systems and methods for handling fragmented packets in a cluster environment. Fragments received by the cluster may be hashed based on a tuple of network layer information, such as source and destination IP addresses. The tuple of network layer information may be used to identify a device of the cluster as a “fragment owner” or node responsible for assembling the fragments of the packet. The fragment may be transmitted or steered to the fragment owner for accumulation and assembly. Once all fragments of the packet have been received by the fragment owner, the packet may be assembled and a second hash may be calculated based on a four-tuple of network and transport layer information, such as source and destination IP addresses and port numbers. The packet may then be steered or transmitted to the “packet owner” or node responsible for processing the packet.

主权项

1. A method for handling fragmented packets distributed across intermediary devices of a cluster, the method comprising:
(a) receiving, by a first intermediary device of a cluster comprising a plurality of intermediary devices, a first fragmented packet of a plurality of fragmented packets; (b) transmitting the first fragmented packet to the second intermediary device, by the first intermediary device, responsive to a hash of a source internet protocol (IP) address and a destination IP address of the first fragmented packet identifying a second intermediary device of the cluster as an owner of fragmented packets for the plurality of fragmented packets; (c) receiving, by a third intermediary device of the cluster, a second fragmented packet of the plurality of fragmented packets; (d) transmitting the second fragmented packet to the second intermediary device, by the third intermediary device, responsive to the hash of the source IP address and the destination IP address of the second fragmented packet identifying the second intermediary device as the owner of fragmented packets for the plurality of fragmented packets; (e) collecting, by the second intermediary device, the first fragmented packet and the second fragmented packet of the plurality of fragmented packets; (f) determining, by the second intermediary device, that all the fragments of the plurality of fragments have been collected by the second intermediary device; and (g) computing, by the second intermediary device, a second hash of a four tuple of the plurality of fragmented packets the four tuple comprising the source IP, the destination IP, a source port and a destination port.