Controlling traffic congestion

[0001] This application makes reference to, incorporates the same herein, and claims all benefits accruing under 35 U.S.C. §119 from an application for APPARATUS FOR CONTROLLING TRAFFIC CONGESTION AND METHOD THEREOF earlier filed in the Korean Intellectual Property Office on 19 Jan. 2004 and there duly assigned Ser. No. 2004-03982.

[0002] 1. Field of the Invention

[0003] The present invention relates to a data communication network and, more particularly, to controlling traffic congestion between a network processor and a host processor in a router of a communication network.

[0004] 2. Description of the Related Art

[0005] In general, a router is functionally divided into a data plane, a control plane, and a management plane, and the respective functions are performed on a network processor and a host processor.

[0006] The data plane of the network processor includes a fast path to forward a large amount of packets to a switch at a high speed, for example, packet forwarding, and a slow path to transfer an exception packet to the host processor (the exception packet being a packet having an option header that is more than a basic header and a packet that is more than a basic packet in size and is divided), the exception packet requiring more complicated processing than simple forwarding such as with a control packet.

[0007] The control plane and the management plane of the host processor perform a configuration and a management function for an operator of a routing table via routing protocol message processing.

[0008] When excessive traffic that is over the processing capacity is transferred into the slow path between the high-speed network processor and the host processor, the upper host processor can fail to operate properly. Therefore, research has been carried out on efficient congestion control and stream control in such a situation.

[0009] A data buffer (shared queue) is used for the stream control between two processors having different CPU process capabilities, and a typical method controls a data transmission rate in a transmitting system to prevent a buffer overflow from occurring in a receiving system.

[0010] Typical stream control methods include:

[0011] 1. Tail-drop: a method in which packets coming in late are discarded when a full queue or overflow occurs.

[0012] 2. Stop-and-wait: a method which transmits the next packet when an ACK signal is received after transmitting a packet.

[0013] 3. Sliding window: a method which transmits the next data packet when ACK signals for all data packets are received after transmitting n data packets.

[0014] 4. Token generation rate dynamic control: a method which sets a threshold in a receiving data buffer and controls a token generation rate of a token generator according to whether or not cells stored in the data buffer are in excess of the threshold.

[0015] In the stop-and-wait method, a transmitting system waits for a response from a receiving system before transmitting a data packet after transmitting one data packet. The receiving system transmits an ACK signal when there is no error in the received data packet, and otherwise transmits a NACK signal. The stop-and-wait method can be simply implemented. However, the next packet can be transmitted after a response for a previous packet is received, and thus a time that one frame occupies a link is lengthened, leading to poor data processing efficiency (throughput).

[0016] On the other hand, in the sliding window method, a transmitting system transmits n data packets without waiting for an ACK signal. A receiving system receives a maximum of n data packets in order and stores them in a data buffer, and transmits an ACK signal for requesting a transmission of the next data packet when it is confirmed that all data packets have been received.

[0017] If a certain data packet is lost or has an error, the receiving system requests retransmission of a corresponding data packet. Here, a parameter “n” is called a window size and denotes the number of data packets which the transmitting system can transmit continuously before receiving the ACK signal. The sliding window method has improved performance compared to the stop-and-wait method but has a disadvantage in that it is complicated to implement because the transmitting and receiving systems must process a plurality of data packets.

[0018] Also, the token generation rate dynamic control method just suggests a mechanism of a rate limiting level without considering an available resource (CPU occupancy rate) of a receiving side.

[0019] The following patents each discloses features in common with the present invention but do not teach or suggest the inventive features specifically recited in the present application:

[0020] It is an object of the present invention to provide a method and apparatus to control traffic congestion which determines a priority according to significance of a packet and considers an available resource (for example, CPU occupancy rate) of a receiving system to prevent excessive traffic transfer from a transmitting system to the receiving system, thereby maintaining stable and smooth traffic processing.

[0021] In order to achieve the above objective, the present invention provides an apparatus for controlling traffic congestion comprising: a transmitting processor including a packet classifying unit adapted to classify packets to be processed in a receiving processor and packets to be forwarded via the transmitting processor, the transmitting processor and the receiving processor having different traffic processing speeds; a buffer adapted to store the packets to be forwarded from the packet classifying unit to the receiving processor; and the receiving processor including a token driver adapted to output the packets stored in the buffer in accordance with a token bucket algorithm in response to an interrupt signal of the transmitting processor and to transmit the packets to a corresponding application, and a monitoring unit adapted to analyze and monitor a resource occupancy rate and a traffic characteristic used by the token driver to set an amount of tokens.

[0022] The buffer includes a queue. One of the transmitting processor and the receiving processor is adapted to set a flag indicating whether or not resources are available for the receiving processor to process the packet before transmitting the packets to the buffer.

[0023] In order to achieve the above objective, the present invention also provides an apparatus for controlling traffic congestion comprising: a network processor and a host processor having different traffic processing speeds; the network processor including a packet classifying unit adapted to classify packets to be processed in the host processor and packets to be forwarded via the network processor, and a queue adapted to enque the packets to be forwarded from the packet classifying unit to the host processor; and the host processor including a token driver adapted to output the packets enqueued in the queue in accordance with a token bucket algorithm in response to an interrupt signal of the network processor and to transmit the packets to a corresponding application, and a monitoring unit adapted to analyze and monitor a resource occupancy rate and a traffic characteristic used by the token driver to set an amount of tokens.

[0024] The network processor and the host processor are adapted to process packets therebetween in accordance with an interrupt driven method.

[0025] The packet classifying unit is adapted to classify the packets to be forwarded to a switch and the packets to be forwarded to the host processor in accordance with a header of the packets received by the network processor.

[0026] The queue comprises a variable length queue adapted to enque a packet having a high priority into a high queue and to enque a packet having a low priority into a low queue.

[0027] The token driver of the host processor comprises: a token bucket adapted to be set in accordance with a traffic bandwidth and a packet speed; a token generating unit adapted to generate tokens at a rate determined periodically in accordance with information from the monitoring unit; and a packet processing unit adapted to manage a queue depth and to process the packets received in the queue.

[0028] The monitoring unit of the host processor comprises: a resource monitoring unit adapted to monitor an available resource of a system in real time; a traffic characteristic analyzing unit adapted to analyze characteristics of entering traffic; a traffic profile having a queue depth and a token generation rate which have been previously set in accordance with the measured available resources and traffic characteristics; and a traffic control unit adapted to control a token generation and packet processing parameter to control an amount of traffic in accordance with information from the resource monitoring unit and the traffic characteristic analyzing unit.

[0029] In order to achieve the above objective, the present invention further provides an apparatus for controlling traffic congestion comprising: a network processor and first and second host processors, the network processor having a different traffic processing speed than the first and second host processors; the network processor including a packet classifying unit adapted to classify packets to be processed in the host processor and packets to be forwarded via the network processor and a queue adapted to enque the packets to be forwarded from the packet classifying unit to the first and second host processors; the first host processor including a token driver adapted to output the packets enqueued in the queue in accordance with a token bucket algorithm in response to an interrupt signal of the network processor and to transmit the packets to a corresponding application; and the second host processor including a monitoring unit adapted to analyze and monitor a resource occupancy rate and a traffic characteristic used by the token driver to set an amount of tokens; and a system internal bus adapted to transmit data between the first host processor and the second host processor.

[0030] The network processor and the first host processor are adapted to process packets therebetween using an interrupt driven method.

[0031] The packet classifying unit is adapted to classify the packets to be forwarded to a switch and the packets to be forwarded to the first and second host processors in accordance with a header of the packets received by the network processor.

[0032] The queue comprises a variable length queue adapted to enque a packet having a high priority into a high queue and to enque a packet having a low priority into a low queue.

[0033] The token driver of the first host processor comprises: a token bucket adapted to be set in accordance with a traffic bandwidth and a packet speed; a token generating unit adapted to generate tokens at a rate determined periodically in accordance with information from the monitoring unit; and a packet processing unit adapted to manage a queue depth and to process the packets received in the queue.

[0034] The monitoring unit of the second host processor comprises: a resource monitoring unit adapted to monitor an available resource of a system in real time; a traffic characteristic analyzing unit adapted to analyze characteristics of entering traffic; a traffic profile having a queue depth and a token generation rate which have been previously set in accordance with the measured available resources and traffic characteristics; and a traffic control unit adapted to control a token generation and packet processing parameter to control an amount of traffic in accordance with information from the resource monitoring unit and the traffic characteristic analyzing unit.

[0035] In order to achieve the above objective, the present invention provides a method of controlling traffic congestion between a transmitting processor and a receiving processor having different traffic processing speeds, the method comprising: discriminating packets to be forwarded from the transmitting processor to the receiving processor; checking a flag of a packet which indicates whether or not the receiving processor can receive a packet to be forwarded to the receiving processor and transmitting the corresponding packet to the receiving processor upon the flag indicating that the receiving processor can receive the packet; and the receiving processor transmitting the packet received from the transmitting processor to a corresponding application or not receiving any more packets in accordance with whether or not a token exists.

[0036] Checking the flag and transmitting the packet comprises: discriminating a flag value which indicates whether or not the receiving processor can receive a packet upon a packet to be forwarded to the receiving processor being generated by the network processor; discarding the packet when the flag value is set to a value indicating that the receiving processor is incapable of receiving the packet; comparing a priority of the packet when the flag value is set to a value indicating that the receiving processor is capable of receiving the packet; enqueuing the packet in a corresponding priority queue in accordance with the priority of the packet; and transmitting an interrupt signal to the receiving processor after enqueuing.

[0037] An operator sets a corresponding item in accordance with a network characteristic, and wherein an item corresponding to a packet set by the operator to be preferentially processed is enqueued into a high priority queue.

[0038] An operator sets a corresponding item in accordance with a network characteristic, and wherein an item corresponding to a packet not set by the operator to be preferentially processed is enqueued into a low priority queue.

[0039] Transmitting the received packet from the transmitting processor or not receiving any more packets comprises: dequeuing a packet from the queue in response to the flag value indicating that the receiving processor can receive the packet; comparing an amount of tokens exhausted in a packet processing unit and an amount of tokens generated in a token generating unit to calculate a token remains; setting a flag to a value indicating that the receiving processor is incapable of receiving the packet in response to a determination that no token remains exist as a result of the calculation; updating the amount of exhausted tokens when token remains exist and transmitting a currently received packet to a corresponding application; and determining whether or not a packet which can be dequeued from the queue exists, and finishing a packet processing handler upon a determination that there is no packet to be dequeued.

[0040] The method further comprises dequeuing the packet from the corresponding queue upon a determination that the packet to be dequeued exists.

[0041] The method further comprises finishing the packet processing handler upon a determination that the flag value indicates that the receiving processor is incapable of receiving the packet.

[0042] Calculating the token remains comprises comparing a bandwidth value among values of tokens exhausted in the packet processing unit and a bandwidth value among values of tokens generated by the token generating unit.

[0043] Calculating the token remains comprises comparing a pps value among values of tokens exhausted in the packet processing unit and a pps value among values of tokens generated by the token generating unit.

[0044] In order to achieve the above objective, the present invention also provides a method of controlling traffic congestion between a transmitting processor and a receiving processor having different traffic processing speeds, the method comprising: initializing a bandwidth and a packet number; driving a timer of a token generating unit; comparing an amount of tokens exhausted in a packet processing unit and an amount of tokens generated by the token generating unit to calculate a token remains; subtracting a calculated token remain value from an initial token generation value to update the token bandwidth and packet number; and setting a flag indicating a state capable of receiving the packet.

[0045] Calculating the token remains includes comparing a bandwidth value among values of tokens exhausted in the packet processing unit and a bandwidth value among values of tokens generated by the token generating unit.

[0046] Calculating the token remains includes comparing a pps value among values of tokens exhausted in the packet processing unit and a pps value among values of tokens generated by the token generating unit.

[0047] In order to achieve the above objective, the present invention further provides a method of controlling traffic congestion between a transmitting processor and a receiving processor having different traffic processing speeds, the method comprising: periodically analyzing a resource occupancy rate and a traffic characteristic using a timer; searching for an item for a corresponding queue depth and a token value from a preset profile upon the resource occupancy rate being equal to or greater than a threshold; forwarding the new value for the queue depth to a packet processing unit to control the queue depth upon a determination that the queue depth needs to be set to a new value in accordance with searched profile information; and forwarding the new value for the token generation rate to a token generating unit to control an amount of tokens upon a determination that a token generation rate needs to be set to a new value in accordance with searched profile information.

[0048] Communication among a processing unit for monitoring the resources of the receiving processor, the packet processing unit and the token generating unit is performed in accordance with an ioct1 ( ) function. The token generation rate is in accordance with a bps and a pps.

[0049] A more complete appreciation of the present invention, and many of the attendant advantages thereof, will be readily apparent as the same becomes better understood by reference to the following detailed description when considered in conjunction with the accompanying drawings in which like reference symbols indicate the same or similar components, wherein:

[0050] FIG. 1 is a block diagram of an internal configuration of a router for traffic congestion according to an embodiment of the present invention;

[0051] FIG. 2 is a block diagram of another configuration of the router of FIG. 1;

[0052] FIG. 3 is a flowchart of a process of classifying packets to be transferred from a network processor to a host processor and packets to be simply forwarded to a switch according to an embodiment of the present invention;

[0053] FIGS. 4A and 4B are flowcharts of the operation of a packet processing unit which operates in a host processor according to an embodiment of the present invention;

[0054] FIGS. 5A and 5B are flowcharts of the operation of a token generating unit which is necessary for a token bucket algorithm utilizing a bandwidth and a pps of a host processor according to an embodiment of the present invention; and

[0055] FIG. 6 is a flowchart of the operation of monitoring resources and traffic characteristics of the host processor according to an embodiment of the present invention.

[0056] The present invention will now be described more fully hereinafter with reference to the accompanying drawings, in which exemplary embodiments of the present invention are shown. The present invention can, however, be embodied in different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the present invention to those skilled in the art. In the drawings, like numbers refer to like elements throughout the specification.

[0057] FIG. 1 is a block diagram of an internal configuration of a router for traffic congestion according to an embodiment of the present invention.

[0058] Referring to FIG. 1, the router according to an embodiment of the present invention comprises a network processor 100 which determines a destination where a received packet is sent and processed and then transmits it to the next line, a host processor 200 which searches a routing destination through routing protocol processing for a packet received from the network processor 100 and controls management functions of the entire system, and a switch 300 which switches the packet received via the network processor 100 to a destination.

[0059] The network processor 100 includes a packet classifying unit 110 for classifying an exception packet to be processed in the host processor from among the received packets, and a variable length priority queue 150 for storing a packet in a corresponding queue according to priority of the packet.

[0060] The exception packet is not a packet which is rapidly transferred to the switch 300 directly through the network processor 100 but is a packet which experiences a complicated processing in the host processor 200 and comprises a control packet, a packet to which has an option header that is more than a basic header, or a packet which is regarded as more than a basic packet size and is divided.

[0061] The variable length priority queue 150 is divided into a high priority queue 151 and a low priority queue 152 according to the priority, and a queue depth can be set variably.

[0062] The host processor 200 includes a token driver 210 which controls a packet enqueued in the priority queue 150 by an interrupt signal of the network processor 100 according to a token generation rate and transmits it to a corresponding application, and a monitoring process 220 which analyzes and monitors resource occupancy rate and traffic characteristics for the token driver 210 to set a parameter related to an adequate level of token generation and token processing.

[0063] As another embodiment of the present invention, for the sake of load sharing, as shown in FIG. 2, the token driver 210 and the monitoring process 220 are separately configured, and a data exchange between the token driver 210 and the monitoring process 220 is performed via a PCI bus 230.

[0064] The token driver 210 of FIGS. 1 and 2 includes a token generating unit 211 for periodically generating as many tokens as needed at a predetermined rate, a token bucket 212 for being set in consideration of a traffic bandwidth and a packet speed, and a packet processing unit 213 for managing a queue depth and processing a packet received in the queue.

[0065] To help understand the token bucket 212, a token bucket method is explained as follows. Inputted traffic is first stored in a data buffer and traffic stored in the data buffer is outputted by a token which is periodically generated. That is, a traffic output speed is controlled by transmitting the traffic after a token is obtained.

[0066] The monitoring process 220 of FIGS. 1 and 2 includes a resource (CPU) monitoring unit 221 for monitoring a system CPU available resource in real time, a traffic characteristic analyzing unit for analyzing characteristics of incoming traffic, a traffic profile 223 having a queue depth and a token generation rate which are preset according to the measured resource availability state and traffic characteristics, and a traffic control unit 222 for controlling a token generation and packet processing parameter for controlling a traffic amount through information obtained from the resource monitoring unit 220 and the traffic characteristic analyzing unit 224.

[0067] Data transmission and reception between the network processor 100 and the host processor 200 are performed by a mechanism of an interrupt driven method.

[0068] A bandwidth (bps: byte per second) and a packet counter (pps: packet per second) which can be processed in a receiving system (host processor) are applied to token generation and token processing rates of a token bucket in consideration of influence on system load according to the size and number of received packets.

[0069] The bandwidth (bps) and the packet counter (pps) are dynamically set by an operator.

[0070] CPU occupancy rate of the host processor is maintained between a maxCPU threshold and a minCPU threshold even through packet traffic congestion occurs as a result of combining the set bandwidth and packet counter.

[0071] The traffic characteristic analyzing unit 224 of the monitoring process 220 analyzes a counter and a transmission rate per unit time according to the size of the received packets, the number of packets discarded by the rate limiting, and the amount of exhausted tokens to determine the bps/pps suitable for a current traffic situation. The traffic characteristic analyzing unit 224 transfers the determined bps/pps information to the traffic control unit 222.

[0072] When the bps is low and the pps is high, this means that small packets are coming in fast and, thus it is preferable to increase the pps.

[0073] In contrast, when the bps is high and the pps is low, this means that large packets are slowly coming in and, thus it is preferable to increase the bps.

[0074] Therefore, when it is determined that the CPU occupancy rate (available resource) exceeds the set threshold as a result of monitoring the CPU occupancy rate of the host processor 200 periodically or in real time, the amount of generated tokens and a queue depth are controlled, thereby controlling the amount of packets which are coming in the host processor.

[0075] That is, when the CPU occupancy rate (available resource) exceeds the set threshold, the resource monitoring unit 221 of the monitoring unit 220 informs the traffic control unit 222 of the fact in real time, and the traffic control unit 222 resets a new traffic parameter in the token generating unit 211 and the packet processing unit 213 to control a traffic amount according to the CPU occupancy rate obtained from the resource monitoring unit 221 and traffic characteristics obtained from the traffic characteristic analyzing unit 224.

[0076] Detailed operation in respective cases can be summarized as follows:

[0077] 1. When the CPU occupancy rate of the host processor 200 is high and the bps/pps of the entering packets are low, a great amount of resources are being transiently used by other applications of the host processor 200 and an Operating System (OS), and thus a priority queue depth is lengthened to buffer the data.

[0078] 2. When the CPU occupancy rate of the host processor 200 is high and the bps/pps of the entering packets are high, the amount of generated tokens per unit time is reduced to control the amount of entering packets.

[0079] 3. When the CPU occupancy rate of the host processor 200 is low and the bps/pps of the entering packets are high, increasing the amount of entering packets does not burden to the operation of the host processor 200, and thus the number of generated tokens is increased.

[0080] 4. When the CPU occupancy rate of the host processor 200 is low and the bps/pps of the entering packets are low, the most stable level of queue depth and token generation rate is maintained.

[0081] Profiles of respective cases can be set as shown in table 1.

	TABLE 1
	Monitoring value
	CPU
	occupancy			Result application value
	rate	BPS	PPS	Queue Depth	Cp_bps	Cp_pps
1	<=minCPU	<=minBPS	<=minPPS	norQUEUE	norBPS	norPPS
2	<=minCPU	<=minBPS	>=maxPPS	norQUEUE	norBPS	maxPPS
3	<=minCPU	>=maxBPS	<=minPPS	norQUEUE	maxBPS	norPPS
4	<=minCPU	>=maxBPS	>=maxPPS	norQUEUE	maxBPS	maxPPS
5	>=maxCPU	<=minBPS	<=minPPS	maxQUEUE	norBPS	norPPS
6	>=maxCPU	<=minBPS	>=maxPPS	maxQUEUE	norBPS	maxPPS
7	>=maxCPU	>=maxBPS	<=minPPS	maxQUEUE	maxBPS	norPPS
8	>=maxCPU	>=maxBPS	>=maxPPS	maxQUEUE	maxBPS	maxPPS

[0082] Hereinafter, a process of controlling traffic congestion in the router of an embodiment of the present invention is explained in detail.

[0083] FIG. 3 is a flowchart of a process of classifying packets to be transferred from a network processor to a host processor and packets to be simply forwarded to a switch according to an embodiment of the present invention.

[0084] Referring to FIG. 3, before classifying and processing the packets which are transferred from the network processor 100 to the host processor 200, packets are received from a certain system (S1).

[0085] Data processing for a received packet is performed (S2), and then the packet classifying unit 110 classifies the received packet as an exception packet or a packet to be simply forwarded to the switch 300.

[0086] The packet can be classified via a header packet.

[0087] If the received packet is an exception packet (S3), a flow_control flag set by the token driver 210 of the host processor 200 is checked to determine whether to enqueue or discard the received packet (S4).

[0088] That is, a determination is made as to whether or not the flow_control indicates an ENQUEUE-possible state.

[0089] If the flag value is “1”, this indicates a state that the packets can not be received any more, and when the flag value is “0”, this indicates a state that the packets can be received.

[0090] Therefore, when the flag value is a “1”, this means that the flow_control is in an ENQUEUE-impossible state (STOP_ENQUEUE), and thus a currently received packet is discarded, and a packet drop count (Drop_count) is increased by “1” (S5).

[0091] If the flag value is a “0” at S4, this means that the flow_control is in an ENQUEUE-possible state, and thus, the priority of the currently received packet is determined (S6), so that the received packet is enqueued into a corresponding queue of the high priority queue 151 and the low priority queue 152 of the priority queue 150 (S7, S8).

[0092] A method of determining the priority of the packet can be set by an operator according to network characteristics, and in the present invention, it is a received packet via an IPC or can be set according to a protocol type.

[0093] When the packet is enqueued in the corresponding queue in the above described method, the network processor 100 transmits an interrupt signal to the host processor 200 to process the packet.

[0094] When the packet is being received in the host processor 200 according the above described process, the host processor 200 processes the received packet according to a series of algorithms, and the process is as follows.

[0095] FIGS. 4A-4B are flowcharts of the operation of a packet processing unit which operates in a host processor according to an embodiment of the present invention.

[0096] Referring to FIGS. 4A and 4B, the host processor 200 receives an interrupt signal from the network processor 100.

[0097] Since there can be a case of exceeding a predetermined rate while processing the previous packets, the flow_conrol flag is checked (S10).

[0098] That is, a determination is made as to whether the flow_control indicates an ENQUEUE-possible state or a STOP_ENQUEUE state.

[0099] If it is determined that the flow_control indicates the STOP_ENQUEUE state at S10, a packet processing handler is finished.

[0100] If it is determined that the flow_control indicates the ENQUEUE-possible state at S10, the high priority queue 151 is first checked to determine whether or not a queue is empty (S11).

[0101] If the high priority queue 151 is not empty, the packet is dequeued from the high priority queue (S12).

[0102] If the high priority queue 151 is empty, this means that there is no packet to be dequeued from the high priority queue 151, and thus the low priority queue 152 is checked to dequeue the packet from the “low” priority queue (S13).

[0103] At this time, the high priority queue 151 is first processed, and thus the packets of the high priority queue 151 are discarded less than those of the low priority queue 152.

[0104] The tokens (dp_bps, dp_pps) exhausted in the packet processing unit 213 and the tokens (cp_bps, cp_pps) generated by the token generating unit 211 are compared to calculate the token remains (S15, S16, S18, and S19)

[0105] If it is determined that there are no token remains as a result of calculating the token remains (S20), the flow_control is changed into a STOP_ENQUEUE state (S26) to prevent the network processor 100 from performing any more enqueuing operations and to process only the packets of a rate determined by the token generating unit 211.

[0106] If it is determined that token remains exist, the amount of exhausted tokens is updated (S21, S22), and then the packets are transmitted to a kernel (Stack) or an application (S23).

[0107] Thereafter, when the high priority queue 151 is not empty, the processes after S12 are repeated, and when the low priority queue 152 is not empty, the processes after S13 are repeated.

[0108] On the other hand, when it is determined that both the high priority queue 151 and the low priority queue 152 are empty, the packet processing handler is finished.

[0109] Hereinafter, a process of setting a token generation rate and a packet processing rate according to a token bucket algorithm is explained with reference to FIGS. 5A-5B.

[0110] FIGS. 5A and 5B are flowcharts of the operation of a token generating unit which is to necessary for a token bucket algorithm utilizing a bandwidth and a pps of a host processor according to an embodiment of the present invention.

[0111] In order to control traffic congestion, tokens are periodically generated in consideration of the bps and pps and periodically checked to update a token generation rate to an appropriate rate.

[0112] First, the pps and bps, and a data structure are initialized (S30, S31), and then a timer of the token generating unit 211 is driven (S32).

[0113] If the period of the timer has expired (S33), the timer is set to “0” and then restarted (S34).

[0114] The tokens (dp_bps, dp_pps) exhausted in the packet processing unit 213 and the tokens (cp_bps, cp_pps) generated by the token generating unit 211 are compared (S35, S39) to calculate the token remains (S36, S37, S40, and S41).

[0115] The cp_bps and cp_pps are updated so that the amount of tokens is set to predetermined pps/bbs values (S38, S42).

[0116] Thereafter, the flow_control is changed to indicate an ENQUEUE-possible state, so that the packets can be received.

[0117] As a result, tokens are periodically generated and updated through the above described process.

[0118] Hereinafter, operation of the monitoring process 220 is explained with reference to FIG. 6.

[0119] FIG. 6 is a flowchart of the operation of monitoring resources and a traffic characteristics of the host processor according to an embodiment of the present invention.

[0120] CPU occupancy rate and traffic characteristics are checked periodically or in real time by using a polling or a timer (S50).

[0121] If it is determined that the CPU occupancy rate is equal to or exceeds a preset max threshold (S51), the flow_control is set to a STOP_ENQUEUE state (S52), and then an appropriate queue depth and amount of tokens (cp_bps, cp_pps) are searched from the profile of Table 1 (S53).

[0122] If a current queue depth is changed based on this (S54), an ioct1( ) (input/output control function) is called and forwarded to the packet processing unit 213, so that the packet processing unit 213 can control a depth of the priority queue 150 (S55).

[0123] If a current cp_bps and a current cp_pps are changed (S56, S58), the ioct1( ) (input/output control function) is called and forwarded to the token generating unit 211, so that the token generating unit 211 can control the amount of tokens (cp_bps, cp_pps) (S57).

[0124] As described above, in processing packets between the two different processors (network processor and host processor) having different performances in the router, a queue depth and the amount of tokens are dynamically controlled in real time in consideration of characteristics of traffic having a priority order and available resource and load of the receiving system, so that a stable traffic amount can be maintained between the two processors, thereby improving service quality.

[0125] Furthermore, packet buffering and packet shaping can be considered to receive a temporary burst packet.

[0126] While the present invention has been described with reference to exemplary embodiments, it is understood that the disclosure has been made for purpose of illustrating the invention by way of examples and is not intended to limit the scope of the invention.