Network data packet classification and demultiplexing

Abstract

The present invention provides methods and apparatus for classifying and demultiplexing packets in a network protocol stack. It provides extendibility for packet processing in the network protocol stack by defining a standard method for adding new functionality. It provides a method to obtain external information, from an application scheduled outside of the forwarding or interrupt context of the kernel, in order to augment packet classification and/or augment packet disposition. In some embodiments, external information augments a criteria of a node in a classification tree with additional information. It presents a way of augmenting which suspends the classification process until an application, scheduled outside of the forwarding or interrupt context of the kernel, completes. The resulting external information is used to augment the packet classification. In some embodiments of the method, the external information includes authentication of an originator of the packet by correlating a tunnel id with a userid, and/or using s/ident for out of band authentication. The classification process enables enforcement of a site policy.

1 - 6 . (canceled)  
   
   
       7 . A method for classifying a packet, said method comprising suspending a packet classification process in progress for said packet; and obtaining external information employed in said classifying.  
   
   
       8 . A method in  claim 7 , wherein the step of obtaining includes augmenting a node-criteria of a node in a classification tree with external information.  
   
   
       9 . A method as in  claim 8 , wherein the external information includes identification of the originator of said packet.  
   
   
       10 . A method as in  claim 8 , wherein the external information includes authentication of an originator of said packet.  
   
   
       11 . A method as recited in  claim 7 , wherein the classification process is an extendible classifier process.  
   
   
       12 - 35 . (canceled)  
   
   
       36 . An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing classification of a data packet, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of  claim 8 .  
   
   
       37 - 39 . (canceled)