CN103763194A - Message forwarding method and device - Google Patents
Message forwarding method and device Download PDFInfo
- Publication number
- CN103763194A CN103763194A CN201310754875.6A CN201310754875A CN103763194A CN 103763194 A CN103763194 A CN 103763194A CN 201310754875 A CN201310754875 A CN 201310754875A CN 103763194 A CN103763194 A CN 103763194A
- Authority
- CN
- China
- Prior art keywords
- message
- list item
- forwarding
- access device
- object information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a message forwarding method which is applied to access equipment with a quick forwarding table. When the access equipment receives a message with the purpose information not being matched with the quick forwarding table, the purpose information and a link layer head used for forwarding the message are stored in the quick forwarding table, so that when messages which are matched with the purpose information are received subsequently, the messages are forwarded or discarded directly according to a forwarding rule, filtering can be conducted on the forwarded messages, the safety of the network is effectively guaranteed, and the manageability and the convenience of message forwarding are also improved. The invention further discloses the access equipment.
Description
Technical field
The present invention relates to communication technical field, particularly a kind of message forwarding method.The present invention also relates to a kind of access device simultaneously.
Background technology
Portal(entrance of the prior art) system composition schematic diagram is as shown in Figure 1, access device is wherein the general designation of the broadband access equipments such as switch, router, be mainly used in carrying out alternately with Portal server, Security Policy Server, authentication/accounting server etc. in verification process, complete the function of authentication/safety certification/charging, and after authentication is passed through, the Internet resources that allow user's access person of being managed to authorize.
As shown in Figure 2, be the application scenarios schematic diagram of access device, terminal is by NAS(Network Access Server, network insertion service) equipment access network, the physical interface of connection is interface A, on interface A, enables Portal.The message that all terminals are sent, receives (Inbound processing) by interface A, and now, NAS carries out flag check to the message receiving, and during coupling Permit rule, message allows to let pass, and while not mating Permit rule, message is by Deny.For the message that sends to user from external network, when sending (outgoing direction processing) to user, interface A do not carry out any filtration treatment, and all let pass and process.
User, authenticate by rear, on interface A, will be issued user's ad hoc rules, in order to Limit Bandwidth Usage or the specific resource of permission access etc.For the flow of Inbound, mate completely and complete speed limit business and traffic statistics, and for the flow of outgoing direction, only carrying out traffic statistics and speed limit processing, not carrying out rule match.Therefore, after active user clicks the button that rolls off the production line, NAS no longer provides access service, this user's rule will be deleted, but physical connection also exists, the message user that NAS sends still can receive, and so not only the speed limit of outgoing direction is no longer valid, nor there is the traffic filtering of outgoing direction, message will directly be let pass.For example when user downloads large file, click the button that rolls off the production line, descending flow can't stop at once, also can continue to send, if do not make outgoing direction, filters, and this user still can receive message.
As can be seen here, prior art cannot make access device mate and filter for arbitrary message forwarding that needs, and causes the bandwidth of outgoing direction large in fact arbitrarily, does not have any limit bandwidth.If the words that this leak is utilized by malicious user, resource overdraft to greatest extent, cause ISP(Internet Service Provider, Internet service provider) service had a strong impact on, brought problems and hidden danger to safety and the management of network.
Summary of the invention
The invention provides a kind of message forwarding method, described method is applied in the access device that is provided with fast-forwarding table, also comprises:
Described access device judges whether the object information of the message receiving mates with the list item in described fast-forwarding table;
If do not exist in described fast-forwarding table and the list item of described object information matches, described access device forwards described message, and by described object information and the corresponding list item that saves as described fast-forwarding table of link layer header that forwards described message and use;
If exist and the list item of described object information matches in described fast-forwarding table, described access device is further determined forwarding rule corresponding to described list item, and according to described forwardings rule and the forwarding of described list item or abandon described message.
Accordingly, the invention allows for a kind of access device, this access device is provided with fast-forwarding table, also comprises:
Whether judge module, mate with the list item of described fast-forwarding table for the object information that judges received message;
Processing module, for judging that when described judge module described fast-forwarding table forwards described message while not existing with the list item of described object information matches, and the corresponding list item that saves as described fast-forwarding table of link layer header that described object information is used with the described message of forwarding;
Filtering module, further determine the forwarding rule that described list item is corresponding when judging that when described judge module described fast-forwarding table exists with the list item of described object information matches, and the regular and described list item forwarding or abandon described message according to described forwarding.
By applying above technical scheme, access device is when receiving the message that object information do not mate with fast-forwarding table, by this object information and forward the link layer header that this message uses and be saved in fast-forwarding table, thereby directly according to forwarding rule, forward or abandon this message follow-up while receiving with the message of this object information matches, can filter for the message forwarding, effectively guarantee the fail safe of network, also promoted manageability and the convenience of message repeating simultaneously.
Accompanying drawing explanation
Fig. 1 is Portal system composition schematic diagram of the prior art;
Fig. 2 is the application scenarios schematic diagram of existing access device;
Fig. 3 is the schematic flow sheet of a kind of message forwarding method of proposing of the present invention;
Fig. 4 is the structural representation of a kind of access device provided by the invention.
Embodiment
For cannot be for the problem that goes out inbound traffics and carry out complete exact matching and filtration treatment of equipment in prior art, the present invention proposes a kind of message forwarding method, when receiving the message that object information do not mate with fast-forwarding table, by this object information and forward the link layer header that this message uses and be saved in fast-forwarding table, thereby directly according to forwarding rule, forward or abandon this message follow-up while receiving with the message of this object information matches, effectively guaranteed the fail safe of network, also manageability and the convenience of message repeating have been promoted simultaneously.
In order to elaborate technological thought of the present invention, below in conjunction with concrete application scenarios, the step shown in Fig. 3 is described.It should be noted that, before realizing following methods, the present invention need to arrange fast-forwarding table in access device, and this is a kind of forwarding entry for example, generating in high-speed cache according to the characteristic information of data flow (comprising the five-tuple information of source IP, source port, order ground IP, order ground port and protocol number).System has also recorded packaging information and the interface message while forwarding when giving birth to corresponding fast-forwarding information cache according to characteristic information, after subsequent packet is come, system is checked the characteristic information in message, if hit fast cache, according to the packaging information in buffer memory, directly carry out the encapsulation of Layer 2 data frame, then in interruption, directly deliver to outgoing interface and send.
Based on above setting, a kind of message forwarding method that the present invention proposes as shown in Figure 3, comprises the steps:
S301, described access device judges that whether the object information of the message receiving mates with the list item in described fast-forwarding table, if not, goes to S302; If so, go to S303.
Technical solution of the present invention has set in advance fast-forwarding table in access device, when receiving message, first obtains relative object information.Particularly, object information refers to object IP address and destination slogan (TPC port or udp port), informational needs in this object information is used for identifying same data flow, affiliated data flow with the message to follow-up arrival is screened, the session of network all indicates by source IP source port, object IP destination interface, add protocol number after nominal for being five-tuple.Concrete form can be the five-tuple information that comprises source IP address, source port, object IP address, destination interface and transport layer protocol number.
S302, if do not exist in described fast-forwarding table and the list item of described object information matches, described access device forwards described message, and by described object information and the corresponding list item that saves as described fast-forwarding table of link layer header that forwards described message and use.
If the list item not mating with the object information that receives message in fast-forwarding table, illustrate that this message is the first message of certain data flow, therefore access device is when forwarding described message, be recorded as the packaged link layer header of this message, and generate the corresponding relation between described object information and described link layer header; After described message is forwarded, described access device is saved to described corresponding relation as list item in described fast-forwarding table.
Particularly, first message that the present invention is directed to data flow carries out common IP and forwards, and the forwarding-table item of finding according to this first message is recorded in interim fast-forwarding Cache pointer, the link layer header of this first message of encapsulation is also recorded in interim fast-forwarding Cache pointer simultaneously, when message sends, interim fast-forwarding Cache pointer is added in fast-forwarding table.
It should be noted that, what link layer header mentioned above referred to is the header in the link layer packaging in OSI network hierarchy model, and Body information is generally IP message.Link layer header generally comprises the information such as target MAC (Media Access Control) address, source MAC, three layer protocol types (IP, ARP or IPv6).Concrete realizing under scene, because be three layers of forwarding, so can remove link layer header at incoming interface, and determined the link layer header that after outgoing interface, Reseal is new (object MAC is the MAC Address of next-hop device (neighbor device), the MAC Address of the outgoing interface that source MAC is this equipment) looking into according to object IP to transmit.
In addition, after according to the first message generating table entry of certain data flow, because this list item has only recorded the feature of this data flow message and forwarded required link layer header, not yet for this list item, corresponding forwarding rule is set, so access device also needs for list item arranges corresponding matched indicia, the state of matched indicia is set to not to coupling (not yet obtaining or arrange relevant forwarding rule) completely.
S303, if exist and the list item of described object information matches in described fast-forwarding table, described access device is further determined forwarding rule corresponding to described list item, and according to described forwardings rule and the forwarding of described list item or abandon described message.
For the first message of data flow, because access device is to forward by common forwarding process, therefore in step S302, can only get its object information and link layer header, and in this flow process, do not forward regular matching treatment, only in fast-forwarding table, matched indicia is set.And for the subsequent packet (message mating with the list item of fast-forwarding table) of identical message flow, access device needs the state of inquiry and the corresponding matched indicia of list item, depending on the following differentiating and processing of state of matched indicia:
If matched indicia is incomplete matching status, illustrate that this message is second message of same data stream, access device is not still known with this data flow and is forwarded accordingly rule, therefore the matched rule that access device need to obtain and storage is corresponding with list item, if forward the message of this data flow of rule permission forwarding, access device forwards the link layer header recording in the upper list item of this message encapsulation; If forward the regular message that does not allow to forward this data flow, access device is by this packet loss.
After above-mentioned finishing dealing with, access device is set to complete matching status by matched indicia, thereby directly according to matched indicia state and forwarding rule, processes when processing follow-up message.
If described matched indicia is complete matching status, access device directly forwards or abandons described message according to the matched rule corresponding with described list item of having stored, without again obtaining the relevant rule that forwards.
For solving above technical problem, the invention allows for a kind of access device, as shown in Figure 4, this access device is provided with fast-forwarding table 410, also comprises:
Whether judge module 420, mate with the list item of described fast-forwarding table for the object information that judges received message;
In concrete application scenarios, also comprise mark module, after the corresponding list item that saves as described fast-forwarding table of link layer header described object information being used with the described message of forwarding in described processing module 430, for described list item arranges corresponding matched indicia, the state of described matched indicia is set to not to coupling completely.
In concrete application scenarios, described filtering module 440 is the state with the corresponding matched indicia of described list item specifically for inquiry;
If described matched indicia is incomplete matching status, the matched rule that described filtering module 440 obtains and storage is corresponding with described list item, forwards or abandons described message according to described forwarding rule, and described matched indicia is set to complete matching status;
If described matched indicia is complete matching status, described filtering module 440 forwards or abandons described message according to the matched rule corresponding with described list item of having stored.
In concrete application scenarios, described processing module 430, specifically for when forwarding described message, be recorded as the link layer header of described message encapsulation, and generate the corresponding relation between described object information and described link layer header, and after described message is forwarded, using described corresponding relation as list item, be saved in described fast-forwarding table.
In concrete application scenarios, also comprise receiver module, before judging at described judge module 420 whether the object information of received message mates with the list item of described fast-forwarding table, receive described message, and obtain the object information of described message; Wherein, described object information comprises IP information, protocol information and the port information of described message.
As can be seen here, by applying above technical scheme, access device is when receiving the message that object information do not mate with fast-forwarding table, by this object information and forward the link layer header that this message uses and be saved in fast-forwarding table, thereby directly according to forwarding rule, forward or abandon this message follow-up while receiving with the message of this object information matches, effectively guarantee the fail safe of network, also promoted manageability and the convenience of message repeating simultaneously.
Through the above description of the embodiments, those skilled in the art can be well understood to the present invention and can realize by hardware, and the mode that also can add necessary general hardware platform by software realizes.Based on such understanding, technical scheme of the present invention can embody with the form of software product, it (can be CD-ROM that this software product can be stored in a non-volatile memory medium, USB flash disk, portable hard drive etc.) in, comprise that each implements the method described in scene in order to make a computer equipment (can be personal computer, server, or the network equipment etc.) carry out the present invention in some instructions.
It will be appreciated by those skilled in the art that accompanying drawing is a schematic diagram of preferably implementing scene, the module in accompanying drawing or flow process might not be that enforcement the present invention is necessary.
It will be appreciated by those skilled in the art that the module in the device of implementing in scene can be distributed in the device of implementing scene according to implementing scene description, also can carry out respective change and be arranged in the one or more devices that are different from this enforcement scene.The module of above-mentioned enforcement scene can be merged into a module, also can further split into multiple submodules.
The invention described above sequence number, just to describing, does not represent the quality of implementing scene.
Disclosed is above only several concrete enforcement scene of the present invention, and still, the present invention is not limited thereto, and the changes that any person skilled in the art can think of all should fall into protection scope of the present invention.
Claims (10)
1. a message forwarding method, is characterized in that, described method is applied in the access device that is provided with fast-forwarding table, and the method comprises:
Described access device judges whether the object information of the message receiving mates with the list item in described fast-forwarding table;
If do not exist in described fast-forwarding table and the list item of described object information matches, described access device forwards described message, and by described object information and the corresponding list item that saves as described fast-forwarding table of link layer header that forwards described message and use;
If exist and the list item of described object information matches in described fast-forwarding table, described access device is further determined forwarding rule corresponding to described list item, and according to described forwardings rule and the forwarding of described list item or abandon described message.
2. the method for claim 1, is characterized in that, after the corresponding list item that saves as described fast-forwarding table of link layer header that described object information is used with the described message of forwarding, also comprises:
For described list item arranges corresponding matched indicia, the state of described matched indicia is set to not to coupling completely.
3. method as claimed in claim 2, is characterized in that, described access device is further determined forwarding rule corresponding to described list item, and forwards or abandon described message according to described forwarding rule, is specially:
The state of described access device inquiry and the corresponding matched indicia of described list item;
If described matched indicia is incomplete matching status, the matched rule that described access device obtains and storage is corresponding with described list item, forwards or abandons described message according to described forwarding rule, and described matched indicia is set to complete matching status;
If described matched indicia is complete matching status, described access device forwards or abandons described message according to the matched rule corresponding with described list item of having stored.
4. the method for claim 1, is characterized in that, described access device, by described object information and the corresponding list item that saves as described fast-forwarding table of link layer header that the described message of forwarding is used, is specially:
Described access device, when forwarding described message, is recorded as the link layer header of described message encapsulation, and generates the corresponding relation between described object information and described link layer header;
After described message is forwarded, described access device is saved to described corresponding relation as list item in described fast-forwarding table.
5. the method for claim 1, is characterized in that, before described access device judges whether the object information of the message receiving mates with the list item in described fast-forwarding table, also comprises:
Described access device receives described message, and obtains the object information of described message;
Wherein, described object information comprises IP information, protocol information and the port information of described message.
6. an access device, is characterized in that, this access device is provided with fast-forwarding table, also comprises:
Whether judge module, mate with the list item of described fast-forwarding table for the object information that judges received message;
Processing module, for judging that when described judge module described fast-forwarding table forwards described message while not existing with the list item of described object information matches, and the corresponding list item that saves as described fast-forwarding table of link layer header that described object information is used with the described message of forwarding;
Filtering module, further determine the forwarding rule that described list item is corresponding when judging that when described judge module described fast-forwarding table exists with the list item of described object information matches, and the regular and described list item forwarding or abandon described message according to described forwarding.
7. access device as claimed in claim 6, is characterized in that, also comprises:
Mark module, after the corresponding list item that saves as described fast-forwarding table of link layer header described object information being used with the described message of forwarding in described processing module, for described list item arranges corresponding matched indicia, the state of described matched indicia is set to not to coupling completely.
8. access device as claimed in claim 7, is characterized in that, described filtering module specifically for:
The state of inquiry and the corresponding matched indicia of described list item;
If described matched indicia is incomplete matching status, the matched rule that described filtering module obtains and storage is corresponding with described list item, forwards or abandons described message according to described forwarding rule, and described matched indicia is set to complete matching status;
If described matched indicia is complete matching status, described filtering module forwards or abandons described message according to the matched rule corresponding with described list item of having stored.
9. access device as claimed in claim 6, is characterized in that,
Described processing module, specifically for when forwarding described message, be recorded as the link layer header of described message encapsulation, and generate the corresponding relation between described object information and described link layer header, and after described message is forwarded, using described corresponding relation as list item, be saved in described fast-forwarding table.
10. access device as claimed in claim 6, is characterized in that, also comprises:
Receiver module, before judging at described judge module whether the object information of the message receiving mates with the list item of described fast-forwarding table, receives described message, and obtains the object information of described message;
Wherein, described object information comprises IP information, protocol information and the port information of described message.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310754875.6A CN103763194B (en) | 2013-12-31 | 2013-12-31 | A kind of message forwarding method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310754875.6A CN103763194B (en) | 2013-12-31 | 2013-12-31 | A kind of message forwarding method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103763194A true CN103763194A (en) | 2014-04-30 |
| CN103763194B CN103763194B (en) | 2017-08-22 |
Family
ID=50530356
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310754875.6A Active CN103763194B (en) | 2013-12-31 | 2013-12-31 | A kind of message forwarding method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103763194B (en) |
Cited By (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104052668A (en) * | 2014-05-29 | 2014-09-17 | 汉柏科技有限公司 | AH message forwarding method and system |
| CN104601468A (en) * | 2015-01-13 | 2015-05-06 | 杭州华三通信技术有限公司 | Message forwarding method and device |
| WO2017000878A1 (en) * | 2015-06-30 | 2017-01-05 | 杭州华三通信技术有限公司 | Message processing |
| CN106899576A (en) * | 2017-01-20 | 2017-06-27 | 烽火通信科技股份有限公司 | Guest network function realizing method based on home gateway |
| CN107888467A (en) * | 2017-11-20 | 2018-04-06 | 新华三技术有限公司 | Message forwarding method, device, BRAS and interchanger based on PPPOE |
| CN109474525A (en) * | 2018-12-17 | 2019-03-15 | 杭州迪普科技股份有限公司 | Processing method, device, equipment and the readable storage medium storing program for executing of message |
| WO2019113728A1 (en) * | 2017-12-11 | 2019-06-20 | 华为技术有限公司 | Network and network management method |
| CN110278152A (en) * | 2018-08-31 | 2019-09-24 | 新华三信息安全技术有限公司 | A kind of method and device for establishing fast-forwarding table |
| CN111510513A (en) * | 2020-01-03 | 2020-08-07 | 普联国际有限公司 | MAP-E link acceleration method, device, storage medium and network equipment |
| CN113645188A (en) * | 2021-07-07 | 2021-11-12 | 中国电子科技集团公司第三十研究所 | Data packet fast forwarding method based on security association |
| CN116800672A (en) * | 2023-08-24 | 2023-09-22 | 北京城建智控科技股份有限公司 | Method, device, electronic equipment and storage medium for accelerating message forwarding |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101202652A (en) * | 2006-12-15 | 2008-06-18 | 北京大学 | Device for classifying and recognizing network application flow quantity and method thereof |
| CN101938415A (en) * | 2010-08-30 | 2011-01-05 | 北京傲天动联技术有限公司 | Rapid forwarding method for network forwarding device |
| CN102647343A (en) * | 2012-03-30 | 2012-08-22 | 汉柏科技有限公司 | Flow control method and system for safe network equipment |
| CN102647345A (en) * | 2012-03-30 | 2012-08-22 | 汉柏科技有限公司 | Load sharing method and system for IPSEC (Internet Protocol Security) data message |
| US20130007257A1 (en) * | 2011-06-30 | 2013-01-03 | Juniper Networks, Inc. | Filter selection and resuse |
-
2013
- 2013-12-31 CN CN201310754875.6A patent/CN103763194B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101202652A (en) * | 2006-12-15 | 2008-06-18 | 北京大学 | Device for classifying and recognizing network application flow quantity and method thereof |
| CN101938415A (en) * | 2010-08-30 | 2011-01-05 | 北京傲天动联技术有限公司 | Rapid forwarding method for network forwarding device |
| US20130007257A1 (en) * | 2011-06-30 | 2013-01-03 | Juniper Networks, Inc. | Filter selection and resuse |
| CN102647343A (en) * | 2012-03-30 | 2012-08-22 | 汉柏科技有限公司 | Flow control method and system for safe network equipment |
| CN102647345A (en) * | 2012-03-30 | 2012-08-22 | 汉柏科技有限公司 | Load sharing method and system for IPSEC (Internet Protocol Security) data message |
Cited By (22)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104052668A (en) * | 2014-05-29 | 2014-09-17 | 汉柏科技有限公司 | AH message forwarding method and system |
| CN104052668B (en) * | 2014-05-29 | 2017-10-10 | 汉柏科技有限公司 | The retransmission method and system of a kind of AH messages |
| CN104601468A (en) * | 2015-01-13 | 2015-05-06 | 杭州华三通信技术有限公司 | Message forwarding method and device |
| CN104601468B (en) * | 2015-01-13 | 2018-10-09 | 新华三技术有限公司 | Message forwarding method and equipment |
| WO2017000878A1 (en) * | 2015-06-30 | 2017-01-05 | 杭州华三通信技术有限公司 | Message processing |
| CN106899576A (en) * | 2017-01-20 | 2017-06-27 | 烽火通信科技股份有限公司 | Guest network function realizing method based on home gateway |
| CN107888467A (en) * | 2017-11-20 | 2018-04-06 | 新华三技术有限公司 | Message forwarding method, device, BRAS and interchanger based on PPPOE |
| CN107888467B (en) * | 2017-11-20 | 2021-01-01 | 新华三技术有限公司 | Message forwarding method and device based on PPPOE, BRAS and switch |
| CN110313155A (en) * | 2017-12-11 | 2019-10-08 | 华为技术有限公司 | A kind of network and network management |
| US11223597B2 (en) | 2017-12-11 | 2022-01-11 | Huawei Technologies Co., Ltd. | Network and network management method |
| WO2019113728A1 (en) * | 2017-12-11 | 2019-06-20 | 华为技术有限公司 | Network and network management method |
| CN110313155B (en) * | 2017-12-11 | 2020-10-09 | 华为技术有限公司 | Network, network management method, controller and switch of network |
| CN110278152B (en) * | 2018-08-31 | 2020-05-29 | 新华三信息安全技术有限公司 | Method and device for establishing fast forwarding table |
| CN110278152A (en) * | 2018-08-31 | 2019-09-24 | 新华三信息安全技术有限公司 | A kind of method and device for establishing fast-forwarding table |
| US11646976B2 (en) | 2018-08-31 | 2023-05-09 | New H3C Security Technologies Co., Ltd. | Establishment of fast forwarding table |
| CN109474525A (en) * | 2018-12-17 | 2019-03-15 | 杭州迪普科技股份有限公司 | Processing method, device, equipment and the readable storage medium storing program for executing of message |
| CN111510513A (en) * | 2020-01-03 | 2020-08-07 | 普联国际有限公司 | MAP-E link acceleration method, device, storage medium and network equipment |
| CN111510513B (en) * | 2020-01-03 | 2022-08-30 | 普联国际有限公司 | MAP-E link acceleration method, device, storage medium and network equipment |
| CN113645188A (en) * | 2021-07-07 | 2021-11-12 | 中国电子科技集团公司第三十研究所 | Data packet fast forwarding method based on security association |
| CN113645188B (en) * | 2021-07-07 | 2023-05-09 | 中国电子科技集团公司第三十研究所 | Data packet rapid forwarding method based on security association |
| CN116800672A (en) * | 2023-08-24 | 2023-09-22 | 北京城建智控科技股份有限公司 | Method, device, electronic equipment and storage medium for accelerating message forwarding |
| CN116800672B (en) * | 2023-08-24 | 2024-01-12 | 北京城建智控科技股份有限公司 | Method, device, electronic equipment and storage medium for accelerating message forwarding |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103763194B (en) | 2017-08-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103763194A (en) | Message forwarding method and device | |
| KR102465085B1 (en) | Methods and apparatus for hypersecure last mile communication | |
| JP2020195141A (en) | Secure dynamic communication network and protocol | |
| US20180109953A1 (en) | Method, Apparatus, and System for Preventing Diameter Signaling Attack in Wireless Network | |
| EP3537741B1 (en) | Machine-to-machine node erase procedure | |
| CN109496409B (en) | Data transmission method and virtual switch | |
| CN102158409B (en) | Retransmission control method for IP (Internet Protocol) message and equipment thereof | |
| US10397047B2 (en) | Apparatus, system, and method for secure remote configuration of network devices | |
| CN107995144B (en) | Access control method and device based on security group | |
| US11418434B2 (en) | Securing MPLS network traffic | |
| US11509639B2 (en) | IPsec anti-replay window with quality of service | |
| WO2015070755A1 (en) | Network security method and device | |
| US20180013645A1 (en) | Attributing network address translation device processed traffic to individual hosts | |
| CN113873453B (en) | Communication method, apparatus, system and medium | |
| CN113746788A (en) | Data processing method and device | |
| CN102739684A (en) | Portal authentication method based on virtual IP address, and server thereof | |
| CN113852552B (en) | Network communication method, system and storage medium | |
| US8381301B1 (en) | Split-flow attack detection | |
| CN105516062A (en) | L2TP over IPsec access realizing method | |
| CN107154917B (en) | Data transmission method and server | |
| CN106161386A (en) | A kind of method and apparatus realizing that IPsec shunts | |
| Mershad et al. | REACT: secure and efficient data acquisition in VANETs | |
| CN109167774B (en) | Data message and data stream safety mutual access method on firewall | |
| CN106878099B (en) | Traffic management method, terminal equipment, server and system | |
| CN109150925B (en) | IPoE static authentication method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No. Applicant after: Xinhua three Technology Co., Ltd. Address before: 310053 Hangzhou hi tech Industrial Development Zone, Zhejiang province science and Technology Industrial Park, No. 310 and No. six road, HUAWEI, Hangzhou production base Applicant before: Huasan Communication Technology Co., Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |