CN108650215A - A kind of net based on label installs standby network data flow preprocess method - Google Patents
A kind of net based on label installs standby network data flow preprocess method Download PDFInfo
- Publication number
- CN108650215A CN108650215A CN201810226401.7A CN201810226401A CN108650215A CN 108650215 A CN108650215 A CN 108650215A CN 201810226401 A CN201810226401 A CN 201810226401A CN 108650215 A CN108650215 A CN 108650215A
- Authority
- CN
- China
- Prior art keywords
- data
- label
- data packet
- net
- network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
- H04L47/2441—Traffic characterised by specific attributes, e.g. priority or QoS relying on flow classification, e.g. using integrated services [IntServ]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention relates to a kind of nets based on label to install standby network data flow preprocess method.Net of the present invention based on label installs standby network data flow preprocess method, to installing standby network data flow into networking the standby data flow classification keyword for being handed down to network chip is installed according to net, stamp stream label, classify to data stream, before net installs standby processor processes data, data packet is pre-processed, it is avoided that processor detects the repetition of data packet, system processor load is reduced, treatment effeciency, lifting means process performance are effectively improved.
Description
Technical field
The present invention relates to a kind of nets based on label to install standby network data flow preprocess method, belongs to net peace device data
The technical field of processing.
Background technology
The continuous development of information system, installing standby process performance to net, more stringent requirements are proposed, and domestic processor
In terms of network data processing compared with external advanced processor also have certain gap, how under existence conditions promoted net install
Standby performance is that current domestic net installs a standby vital task.
Invention content
In view of the deficiencies of the prior art, the present invention provides a kind of net based on label and installs standby network data flow pretreatment side
Method.
The technical scheme is that：
A kind of net based on label installs standby network data flow preprocess method, and process is：
1) net is installed for network packet basis source, type of data packet and port parameter to be divided into different Tstreams
Type, and the keyword of data flow is handed down to network chip group；The network chip group includes multiple network chips；The network
Chip is gigabit or 10,000,000,000 network chips with stream label function；Network packet is Ethernet data frame format；
2) network chip group utilizes its memory space, record to need matched keyword；
3) after network chip group receives the data packet of forwarded, the stream label processing module of the network chip is according to net
Which kind of data stream type the data flow keyword comparison data packet that peace device handler issues, automatic decision data packet belong to；Institute
It is the included network data preprocessing module of network chip to state stream label processing module, can be carried out just to the data packet received
Step checks, and the keyword (parameters such as source, type of data packet, port) issued according to upper layer processor distinguishes data packet, sentences
Whether disconnected data packet belongs to the corresponding data flow classification of keyword, and tagged to corresponding data packet；
4) the stream label processing module of network chip group stamps stream label to data packet；
5) net, which installs standby processor and receives the data packet of stream label, is no longer detected, according to stream label to data packet
Do alignment processing；Detailed process is as follows：Label checks the stream label of module check data packet, and takes according to stream label different
Action；If it is believable data flow that net, which installs standby judgement data packet, data packet is sent directly to data forwarding module；Such as
Fruit data packet belongs to that net installs the standby data flow not detected or net installs standby judgement data packet and belongs to incredible data
Stream, then data packet issues data forwarding module after safety check module is detected；
6) data forwarding module delivers a packet to network chip group, and network chip group is sent the packet within away.
According to currently preferred, the network chip group is the network chip group for having Flow Director functions.
According to currently preferred, label of the label inspection module for checking data packet；The data forwarding mould
The data forwarding that block will have been handled；Safety detection module is used for network security detection and protection.
Beneficial effects of the present invention are：
1. the net of the present invention based on label installs standby network data flow preprocess method, to installing standby net into networking
Network data flow installs the standby data flow classification keyword for being handed down to network chip according to net, stamps stream label, is carried out to data stream
Classification pre-processes data packet, is avoided that weight of the processor to data packet before net installs standby processor processes data
Reinspection is surveyed, and is reduced system processor load, is effectively improved treatment effeciency, lifting means process performance.
Description of the drawings
Fig. 1 is that the net of the present invention based on label installs standby network data flow preprocess method flow chart.
Specific implementation mode
With reference to embodiment and Figure of description, the present invention will be further described, but not limited to this.
Embodiment 1
As shown in Figure 1.
A kind of net based on label installs standby network data flow preprocess method, and process is：
1) net is installed for network packet basis source, type of data packet and port parameter to be divided into different Tstreams
Type, and the keyword of data flow is handed down to network chip group；The network chip group includes multiple network chips；The network
Chip is gigabit or 10,000,000,000 network chips with stream label function；Network packet is Ethernet data frame format；
2) network chip group utilizes its memory space, record to need matched keyword；
3) after network chip group receives the data packet of forwarded, the stream label processing module of the network chip is according to net
Which kind of data stream type the data flow keyword comparison data packet that peace device handler issues, automatic decision data packet belong to；Institute
It is the included network data preprocessing module of network chip to state stream label processing module, can be carried out just to the data packet received
Step checks, and the keyword (parameters such as source, type of data packet, port) issued according to upper layer processor distinguishes data packet, sentences
Whether disconnected data packet belongs to the corresponding data flow classification of keyword, and tagged to corresponding data packet；
4) the stream label processing module of network chip group stamps stream label to data packet；
5) net, which installs standby processor and receives the data packet of stream label, is no longer detected, according to stream label to data packet
Do alignment processing；Detailed process is as follows：Label checks the stream label of module check data packet, and takes according to stream label different
Action；If it is believable data flow that net, which installs standby judgement data packet, data packet is sent directly to data forwarding module；Such as
Fruit data packet belongs to that net installs the standby data flow not detected or net installs standby judgement data packet and belongs to incredible data
Stream, then data packet issues data forwarding module after safety check module is detected；
6) data forwarding module delivers a packet to network chip group, and network chip group is sent the packet within away.
The network chip group is the network chip group for having Flow Director functions.The label checks that module is used for
Check the label of data packet；The data forwarding that the data forwarding module will have been handled；Safety detection module is used for network security
Detection and protection.
Claims (3)
1. a kind of net based on label installs standby network data flow preprocess method, which is characterized in that its process is：
1) net is installed for network packet basis source, type of data packet and port parameter to be divided into different data stream types,
And the keyword of data flow is handed down to network chip group；The network chip group includes multiple network chips；
2) network chip group utilizes its memory space, record to need matched keyword；
3) after network chip group receives the data packet of forwarded, the stream label processing module of the network chip is installed according to net
Which kind of data stream type the data flow keyword comparison data packet that standby processor issues, automatic decision data packet belong to；
4) the stream label processing module of network chip group stamps stream label to data packet；
5) net, which installs standby processor and receives the data packet of stream label, is no longer detected, and is done pair to data packet according to stream label
It should handle；Detailed process is as follows：Label checks the stream label of module check data packet, and takes different move according to stream label
Make；If it is believable data flow that net, which installs standby judgement data packet, data packet is sent directly to data forwarding module；If
Data packet belongs to that net installs the standby data flow not detected or net installs standby judgement data packet and belongs to incredible data flow,
Then data packet issues data forwarding module after safety check module is detected；
6) data forwarding module delivers a packet to network chip group, and network chip group is sent the packet within away.
2. the net according to claim 1 based on label installs standby network data flow preprocess method, which is characterized in that institute
It is the network chip group for having Flow Director functions to state network chip group.
3. the net according to claim 1 based on label installs standby network data flow preprocess method, which is characterized in that institute
It states label and checks that module is used to check the label of data packet；The data forwarding that the data forwarding module will have been handled；Safety inspection
It surveys module and is used for network security detection and protection.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810226401.7A CN108650215A (en) | 2018-03-19 | 2018-03-19 | A kind of net based on label installs standby network data flow preprocess method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810226401.7A CN108650215A (en) | 2018-03-19 | 2018-03-19 | A kind of net based on label installs standby network data flow preprocess method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN108650215A true CN108650215A (en) | 2018-10-12 |
Family
ID=63744358
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810226401.7A Pending CN108650215A (en) | 2018-03-19 | 2018-03-19 | A kind of net based on label installs standby network data flow preprocess method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108650215A (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1610335A (en) * | 2004-11-25 | 2005-04-27 | 上海复旦光华信息科技股份有限公司 | Safety filtering current shunt of exchange structure based on network processor and CPU array |
| CN103281333A (en) * | 2013-06-17 | 2013-09-04 | 苏州山石网络有限公司 | Forwarding method and device of data flow |
| CN103685321A (en) * | 2013-12-31 | 2014-03-26 | 北京神州绿盟信息安全科技股份有限公司 | Data packet forwarding and safety protection detection system, load balancing method and device |
| US20160036713A1 (en) * | 2006-06-19 | 2016-02-04 | Iii Holdings 1, Llc | Secure handle for intra-and inter-processor communications |
-
2018
- 2018-03-19 CN CN201810226401.7A patent/CN108650215A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1610335A (en) * | 2004-11-25 | 2005-04-27 | 上海复旦光华信息科技股份有限公司 | Safety filtering current shunt of exchange structure based on network processor and CPU array |
| US20160036713A1 (en) * | 2006-06-19 | 2016-02-04 | Iii Holdings 1, Llc | Secure handle for intra-and inter-processor communications |
| CN103281333A (en) * | 2013-06-17 | 2013-09-04 | 苏州山石网络有限公司 | Forwarding method and device of data flow |
| CN103685321A (en) * | 2013-12-31 | 2014-03-26 | 北京神州绿盟信息安全科技股份有限公司 | Data packet forwarding and safety protection detection system, load balancing method and device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20220006666A1 (en) | Method and system for detecting and defending against abnormal traffic of in-vehicle network based on information entropy | |
| US20130243254A1 (en) | Foreground Analysis Based on Tracking Information | |
| CN102790752A (en) | Fraud information filtering system and method on basis of feature identification | |
| CN105868075A (en) | System and method for monitoring and analyzing great deal of logs in real time | |
| CN104462509A (en) | Review spam detection method and device | |
| CN101621511A (en) | Multilayer detecting method without local virus library and multilayer detecting system | |
| CN103875214A (en) | Intelligent phy with security detection for ethernet networks | |
| CN113283344A (en) | Mining conveying belt deviation detection method based on semantic segmentation network | |
| CN103401845B (en) | A kind of detection method of website safety, device | |
| CN103248606A (en) | Network virus detection method and system for IPv4 (Internet Protocol Version 4) and IPv6 (Internet Protocol Version 6) | |
| CN106961428A (en) | A kind of centralized intruding detection system based on privately owned cloud platform | |
| CN103530918B (en) | A kind of safe access management system of bank's money case based on Internet of Things | |
| CN104753957B (en) | A kind of magnanimity terminal communication connection management method of power information acquisition system | |
| CN101436146A (en) | Method and system for dynamically regulating priority of remote device management progress | |
| CN109033203A (en) | A kind of feature extraction method for parallel processing towards big data | |
| CN110020161B (en) | Data processing method, log processing method and terminal | |
| CN110929110B (en) | Electronic document detection method, device, equipment and storage medium | |
| CN102457525A (en) | Load-based anomaly intrusion detection method and system | |
| CN107277180A (en) | The processing system and method for internet resource popularization data | |
| CN108650215A (en) | A kind of net based on label installs standby network data flow preprocess method | |
| US9332031B1 (en) | Categorizing accounts based on associated images | |
| CN116415045A (en) | Data acquisition method and device, electronic equipment and storage medium | |
| CN108762914A (en) | A kind of Intelligent telescopic method, apparatus, electronic equipment and the storage medium of system architecture | |
| CN102769607A (en) | Malicious code detecting method and system based on network packet | |
| CN106557527A (en) | A kind of pornographic image detection and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20181012 |