The present invention relates to embodiments of nodes and methods in a node in a data telecommunication network. The method and embodiments thereof enables control of data packet traffic belonging to different access technologies to be sent with the same Quality of Service class over an aggregated encrypted Internet Security tunnel, IPsec tunnel. The received data packets are encrypted and encapsulated as payload in an IP data packet to be sent over an aggregated encrypted IPsec tunnel, which header is marked with an access technology index comprising a code for the identified access technology of the one or more received data packets encrypted and encapsulated as payload in the IPsec tunnel and a hash identifier code enabling enhanced scheduling and routing.

Indirect destination determinations for forwarding tunnel network packets may be performed. Tunneling may be initiated for network packets received at a packet processor according to a forwarding route or other prior packet processing stage, such as an access control list stage. A corresponding entry in a tunnel lookup table may be accessed to determine the tunneling to be applied to the network packet, such as Internet Protocol tunneling or Multiprotocol Label Switching tunneling. The corresponding entry may also include a pointer to a next hop address table that stores a next hop address for the tunneled version of the network packet. The tunneled version of the network packet may be forwarded to the next hop address.

Example implementations relate to fragmented packet processing resource determination. For example, an apparatus includes a processor receive an initial fragmented packet from a source device. The initial fragmented packet includes a first header and a second header. The processor is also to generate a first hash value based on the first header and based on the second header. The processor is further to determine an initial fragmented packet processing resource based on the first hash value and to generate a second hash value based on the first header. The processor is further to associate the second hash value with the processing resource and transmit the initial fragmented packet to the initial fragmented packet processing resource,

Techniques for sharing network information, such as routing table information, are described. In some examples, network nodes share information about the topology of their network. For example, nodes may share routing tables with their neighbors from time to time. To improve the performance of the network, by reducing the overhead of transmitting routing tables, the nodes share their routing tables with neighbor nodes only when those tables are updated or upon request. In other circumstances, such as when a routing table has not changed since it was last shared, each network node instead transmits an indicator, such as a routing table checksum, hash, or the like, that can be used by a neighbor node to determine the routing table is unchanged.

Methods and devices for processing packets are provided. The processing device may include an input interface for receiving data units containing header information of respective packets; a first module configurable to perform packet filtering based on the received data units; a second module configurable to perform traffic analysis based on the received data units; a third module configurable to perform load balancing based on the received data units; and a fourth module configurable to perform route lookups based on the received data units.

A method of sending data to a switch fabric includes assigning a destination port of an output module to a data packet based on at least one field in a first header of the data packet. A module associated with a first stage of the switch fabric is selected based on at least one field in the first header. A second header is appended to the data packet. The second header includes an identifier associated with the destination port of the output module. The data packet is sent to the module associated with the first stage. The module associated with the first stage is configured to send the data packet to a module associated with a second stage of the switch fabric based on the second header.

Concepts and technologies are disclosed herein for providing and using a distributed forwarding service. A service request can be received at a computing device and can relate to a distributed forwarding service. The computing device can configure the distributed forwarding service by determining a number of nodes that are to provide the distributed forwarding service and configuring a shared control function to control the nodes. The computing device can trigger instantiation of the distributed forwarding service. Instantiation of the distributed forwarding service can include dedicating a shared incoming switch for the distributed forwarding service, dedicating a shared outgoing switch for the distributed forwarding service, instantiating the nodes, and instantiating the shared control function. The distributed forwarding service can include the shared incoming switch, the shared control function, the nodes, and the shared outgoing switch.

Technologies for packet flow classification on a computing device include a hash table including a plurality of hash table buckets in which each hash table bucket maps a plurality of keys to corresponding traffic flows. The computing device performs packet flow classification on received data packets, where the packet flow classification includes a plurality of sequential classification stages and fetch classification operations and non-fetch classification operations are performed in each classification stage. The fetch classification operations include to prefetch a key of a first received data packet based on a set of packet fields of the first received data packet for use during a subsequent classification stage, prefetch a hash table bucket from the hash table based on a key signature of the prefetched key for use during another subsequent classification stage, and prefetch a traffic flow to be applied to the first received data packet based on the prefetched hash table bucket and the prefetched key. The computing device handles processing of received data packets such that a fetch classification operation is performed by the flow classification module on the first received data packet while a non-fetch classification operation is performed by the flow classification module on a second received data packet.

An apparatus includes a memory storing a table including packet identification information and information indicating a process corresponding to the packet identification information, a unit to search for a process corresponding to packet identification information of a received packet from the table, a unit to acquire table candidates that have different types and in which all packets identified by new identification information for a packet and existing identification information for a packet are retrievable from the table candidates, based on the existing packet identification information and the new packet identification information when a addition request of a new entry including the new identification information for a packet is received, and a unit to select a table used for a search among the table candidates based on the number of packet identification information stored in each of the table candidates.

Methods, apparatuses, and systems are provided for improving utilization of the communications system through various “deltacasting” techniques for handling content sets (e.g., feeds or websites). In some embodiments, within a client-server context, content sets are anticipatorily pre-positioned in client dictionaries using multicasting techniques to share forward link capacity. Pre-positioning determinations are made according to byte-level data, set-level metadata, and/or user preferences. In some embodiments, when locally stored information from the content sets is requested by a user, deltacasting techniques are used to generate fingerprints for use in identifying and exploiting multicasting and/or other opportunities for increased utilization of links of the communications system.