CN102882812A - Arbitration device and method and installation method of FP (field processor) application functions - Google Patents
Arbitration device and method and installation method of FP (field processor) application functions Download PDFInfo
- Publication number
- CN102882812A CN102882812A CN2012103509705A CN201210350970A CN102882812A CN 102882812 A CN102882812 A CN 102882812A CN 2012103509705 A CN2012103509705 A CN 2012103509705A CN 201210350970 A CN201210350970 A CN 201210350970A CN 102882812 A CN102882812 A CN 102882812A
- Authority
- CN
- China
- Prior art keywords
- application function
- module
- application
- function
- module region
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Stored Programmes (AREA)
Abstract
The invention relates to an arbitration device and method and an installation method of FP (field processor) application functions, belonging to the field of embedded chip FP management, and aiming to manage all the FP application functions comprehensively and saving the CPU (central processing unit) occupancy rate and the FP hardware resource occupancy rate. By dividing the FP hardware resources into blocks, each FP application function is easier to manage, the CPU occupancy rate and the FP hardware resource occupancy rate can be reduced effectively, the coupling of the operation of the FP application functions can be reduced, and all the FP application functions can not be affected by the deletion and the installation thereof. Due to the application of the mark value, the hardware resource sequence number can be acquired in each FP modular area, and the priority order and the effectiveness of the installation rules of all the application functions are realized.
Description
Technical field
The present invention relates to processor management field, embedded chip territory, be specifically related to erecting device and the method for a kind of territory processor application function and utilize the installation method of the territory processor application function of described arbitration device or referee method.
Background technology
(Field Processor: the territory processor) module realizes is packet and based on tactful forwarding capability to the FP of embedded chip, and (abbreviation: the FP application function) operand is that message flow or port enter outgoing packet to the application function that the useful FP module of institute realizes.
Embedded chip has certain FP module hardware resource, for example the BCM53284 of Broadcom (BCM) company have 1536 resources (the realization object of application function the rule, one rule takies a resource), BCM56338 has MV88e6097 of 2048 resources and Marvell (MV) company etc., all FP application functions all use this piece resource to install.
The FP module resource of prior art comprises a plurality of application functions, owing to there is not good unified management FP module resource, just often can produce the infirm result of FP function.
Summary of the invention
Technical problem to be solved by this invention is that all FP application functions are carried out unified management, realize that different FP application functions is mounted to different FP module region, minimizing is installed and deletion action because of repeating of bringing of bad management, guarantee that the FP application function of installing comes into force, and saves CPU usage and FP hardware resource.
In order to solve the problems of the technologies described above, the invention provides the arbitration device of a kind of territory processor application function, comprising: analysis module, divide module, mark module and search module;
Described analysis module is for the matching condition of analyzing all territory processor FP application functions to be installed;
Described division module is used for the matching condition according to each FP application function, determines the FP module region that each FP application function is installed;
Described mark module is used to each FP application function to put a value of statistical indicant corresponding with described FP module region;
The described module of searching is used for identifying described value of statistical indicant, and finds FP module region corresponding to each FP application function.
Preferably, the matching condition of described analysis module analysis is the operand, the correlation between all FP application functions to be installed of all FP application functions to be installed, FP application function to be installed and at least one in the correlation between the mounted FP application function.
Preferably, the division principle of described division module is:
The FP application function that operand is not identical is installed in the same FP module region;
Incoherent FP application function is installed in the same FP module region.
Preferably, described mark module is arranged on the high two of FP application function interface parameters with value of statistical indicant.
Preferably, described FP module region is a plurality of zones of in advance the FP hardware resource being divided.
In order to solve the problems of the technologies described above, the present invention also provides the referee method of a kind of territory processor application function, comprising:
Analyze the matching condition of all territory processor FP application functions to be installed;
According to the matching condition of each FP application function, determine the FP module region that each FP application function is installed;
For each FP application function is put a value of statistical indicant corresponding with described FP module region;
Identify described value of statistical indicant, and find FP module region corresponding to each FP application function.
Further, described matching condition is the operand, the correlation between all FP application functions to be installed of all FP application functions to be installed, FP application function to be installed and at least one in the correlation between the mounted FP application function.
Further, described matching condition according to each FP application function, determine that the principle of the FP module region of each FP application function is:
The FP application function that operand is not identical is installed in the same FP module region;
Incoherent FP application function is installed in the same FP module region.
Further, described value of statistical indicant is arranged on the high two of FP application function interface parameters.
Further, described FP module region is a plurality of zones of in advance the FP hardware resource being divided.
In order to solve the problems of the technologies described above, the present invention also provides the installation method of a kind of territory processor application function, in FP module region corresponding to FP application function, priority order from low to high according to unappropriated FP hardware resource is installed described FP application function, until all FP application functions to be installed install.
Compared with prior art, arbitration device of the present invention and method to FP module region piecemeal after each FP application function of manageability more, can effectively reduce taking of CPU usage and FP hardware resource, guaranteeing that each FP application function is not subjected to delete each other with fitting operation ground affects, and realized the priority orders of each application function installation rule and coming into force property, be applicable to the design of various embedded chips.
Description of drawings
Fig. 1 is the structural representation of the arbitration device of the embodiment of the invention; Fig. 2 is the flow chart of the installation method of the embodiment of the invention; Fig. 3 is the FP module region distribution schematic diagram of the embodiment of the invention.
Embodiment
For making the purpose, technical solutions and advantages of the present invention clearer, hereinafter in connection with accompanying drawing embodiments of the invention are elaborated.Need to prove that in the situation of not conflicting, the embodiment among the application and the feature among the embodiment be combination in any mutually.
The arbitration device of the embodiment of the invention and method to FP hardware resource piecemeal after each FP application function of manageability more, can effectively reduce taking of CPU usage and FP hardware resource, reduce the coupling that operates between the FP application function, guaranteeing that each FP application function is not subjected to delete each other with fitting operation ground affects, utilize value of statistical indicant to be implemented in each FP module region and obtain the hardware resource serial number, and realized the priority orders of each FP application function installation rule and coming into force property.
As shown in Figure 1, the arbitration device of the territory processor application function of the embodiment of the invention comprises: analysis module, divide module, mark module and search module;
Wherein, analysis module 1 is for the matching condition of analyzing all territory processor FP application functions to be installed;
Described matching condition can be the correlation between the operand of all FP application functions to be installed and/or all FP application functions to be installed and/or FP application function to be installed and the correlation between the mounted FP application function.
Described matching condition can also be the physical connection applied environment of all FP application functions to be installed.
Wherein, divide module 2, be used for the matching condition according to each FP application function, determine the FP module region that each FP application function is installed;
The division principle of described division module can for:
1) the FP application function that operand is not identical is installed in the same FP module region;
Analyze the operand of all FP application functions, the FP application function that operand is not identical can be considered to place in the resource.For example (access control list: Access Control List (ACL)) function is the operation of convection current to ACL, and the VLAN speed limit is the operation to flow velocity, and therefore, they can be placed together.
2) incoherent FP application function is installed in the same FP module region.
To the correlation analysis between the FP application function, incoherent FP application function can be considered to place in the resource.For example: whether correlation can for there being successively erection sequence between the FP application function, whether conflicting operation is arranged, (IP Source Guard: source IP protection) function is the IP message operation to inbound port to IPSG, and DHCP Snooping function is the DHCP protocol massages operation to inbound port; DHCP Snooping function just must place before the IPSG function, otherwise DHCP Snooping function just can not come into force, so their need separated.
Can also determine the FP module region of installation for it according to the physical connection applied environment of FP application function.
For example DHCP Snooping function is that to all panel terminal ports of switch two kinds enter the operation of DHCP protocol massages, therefore only needs to distribute the resource of twice panel terminal port number just to satisfy and uses.The benefit of doing like this is to distribute suitable resource according to the FP application function, is conducive to taking full advantage of of resource.
Wherein, mark module 3 is used to each FP application function to put a value of statistical indicant corresponding with described FP module region;
Described mark module is arranged on the high two of FP application function interface parameters with value of statistical indicant.
Described FP module region is a plurality of zones of in advance the FP hardware resource being divided.Embodiments of the invention are by after analyzing the FP application function, a value of statistical indicant is set to be distinguished, be used for follow-up identification, and the FP application function is installed in corresponding FP module region, consider that revising the function parameter that SDK (Software DevelopmentKit, i.e. SDK) is used for obtaining available FP rule ordering number has very large risk, embodiments of the invention use the function interface parameter, it is indicated, it is transmitted into.
Select the reason of high two positions that serve as a mark of FP application function interface parameters to be:
The scope of described interface parameters is exactly the entry number of FP hardware resource, for example the BCM53284 chip is 0～1535, this parameter-definition is 32 integer, so the high position of interface parameters is 0, so embodiments of the invention use interface parameters high two as a token of value will indicate that transmission enters.
Wherein, search module 4, be used for identifying described value of statistical indicant, and find FP module region corresponding to each FP application function.
The principle that comes into force Ordered Dependency and reduce coupling between function according to function is divided into four zones with the FP hardware resource: DHCP security monitoring DHCP Snooping zone, access control list ACL are regional, Dynamic ARP detects DAI zone, source IP protection IPSG zone.
As shown in Figure 2, the referee method of the territory processor application function of the embodiment of the invention comprises:
Step S1, analyze the matching condition of all territory processor FP application functions to be installed;
Step S2, according to the matching condition of each FP application function, determine the FP module region that each FP application function is installed;
Step S3, put a value of statistical indicant corresponding with described FP module region for each FP application function;
Step S4, identify described value of statistical indicant, and find FP module region corresponding to each FP application function.
Matching condition in the step 1 is: the correlation between the operand of all FP application functions to be installed and/or all FP application functions to be installed and/or FP application function to be installed and the correlation between the mounted FP application function.
The principle of determining the FP module region of each FP application function in the step 2 is:
The FP application function that operand is not identical is installed in the same FP module region;
Incoherent FP application function is installed in the same FP module region.
Value of statistical indicant is arranged on the high two of FP application function interface parameters in the step 3.
FP module region in step 3 and the step 4 is a plurality of zones of in advance the FP hardware resource being divided.Wherein being divided into what FP module region can be according to division principle; specifically divide according to functional requirement; concrete restriction is not done in number and name to the FP module region; for example can be divided into: DHCP security monitoring DHCP Snooping zone; the access control list ACL zone; Dynamic ARP detects the DAI zone, source IP protection IPSG zone.
During installation, by value of statistical indicant FP application function to be installed is identified, in FP module region corresponding to the definite FP application function of value of statistical indicant, priority order from low to high according to unappropriated FP hardware resource is installed described FP application function, until all FP application functions to be installed install.
Said process is by the distinguishing mark value, by being mounted to the correct FP module region toward the high priority FP application function that each is to be installed from low.
Wherein the priority of FP hardware resource is corresponding with the entry number of FP hardware resource, and in each FP module region, the larger priority of entry number is lower.
Embodiment
As shown in Figure 3, present embodiment illustrates the process of realization take Chip A chip as example.The FP hardware resource is divided four pieces in advance, is respectively piece 1 corresponding DHCP Snooping function, piece 2 corresponding A CL functions, piece 3 corresponding DAI functions, piece 4 corresponding IPSG functions.
Also shown corresponding serial number among Fig. 3, this is that the IPSG function installs a rule for each port, 28 altogether because on the switch device panel of use Chip A chip 28 ports are arranged; The DAI function installs a rule also for each port, DHCP Snooping function then is that 56 rules are installed, be used for controlling uplink message and the downlink message of different destination interfaces, detect or special purpose because chip has when realizing the FP application function, therefore reserve all the other 4 rules.
Analyze all territory processor FP application functions to be installed operand, correlation, take the matching conditions such as resource;
Because the IPSG function has the operand such as EthernetType identical with DHCP Snooping function, the IPSG function has the operands such as IP address identical with acl feature, DHCP Snooping function has four layers of operands such as IP port numbers identical with acl feature, there are the operands such as EthernetType identical with the DAI function with acl feature, the IPSG function is relevant with DHCP Snooping function, the DAI function is relevant with DHCP Snooping function, the IPSG function is relevant with acl feature, the DAI function is relevant with acl feature, therefore place in the FP module region according to the not identical FP application function of operand, incoherent FP application function is placed the rule in the FP module region, determines the FP module region that each FP application function is installed;
Utilize high two positions that serve as a mark of each FP application function interface parameters to be installed, transmit corresponding value of statistical indicant.
Wherein can set 0b00 and represent ACL, 0b01 and represent that DHCP, 0b10 represent DAI, 0b11 represents IPSG, sign is assigned to the high two of FP application function interface parameters.
After FP application function interface parameters transmitted into, advanced line parameter detected, and high two place values of described FP application function interface parameters are obtained out, finds FP module region corresponding to each FP application function;
The minimum FP hardware resource of FP module region priority that utilizes prior art to find in correspondence is that it distributes suitable resource according to the physical connection applied environment of each FP application function.According to priority order from low to high each FP application function is installed.
In the IPSG functional block, 1508 to be expressed as the priority of this piece the highest, and the 1535th, priority is minimum.The deletion of each FP application function and installation rule operation, other FP application functions can not be affected, the priority when having guaranteed installation rule.
Can utilize following two orders
ip?verify?source?dhcp-snooping
ip-access-list?2?permit?ip?192.168.1.1255.255.255.0
The FP application function that will belong to the first piecemeal is mounted in the first piecemeal of FP module, the FP application function that belongs to the second piecemeal is filled in second piecemeal of FP module, can be because of other application function redundant rule eliminations of FP, and the incorrect problem of priority when causing installing.
Can also utilize FP module region (value of statistical indicant) corresponding to each FP application function of software records and the minimizing of FP hardware resource.
Although the disclosed execution mode of the present invention as above, the execution mode that described content just adopts for the ease of understanding the present invention is not to limit the present invention.Technical staff in any the technical field of the invention; under the prerequisite that does not break away from the disclosed spirit and scope of the present invention; can do any modification and variation in the details that reaches of implementing in form; but scope of patent protection of the present invention still must be as the criterion with the scope that appending claims was defined.
Claims (11)
1. the arbitration device of a territory processor application function is characterized in that, comprising: analysis module, divide module, mark module and search module;
Described analysis module is for the matching condition of analyzing all territory processor FP application functions to be installed;
Described division module is used for the matching condition according to each FP application function, determines the FP module region that each FP application function is installed;
Described mark module is used to each FP application function to put a value of statistical indicant corresponding with described FP module region;
The described module of searching is used for identifying described value of statistical indicant, and finds FP module region corresponding to each FP application function.
2. arbitration device as claimed in claim 1 is characterized in that:
The matching condition of described analysis module analysis is the operand, the correlation between all FP application functions to be installed of all FP application functions to be installed, FP application function to be installed and at least one in the correlation between the mounted FP application function.
3. arbitration device as claimed in claim 2 is characterized in that:
The division principle of described division module is:
The FP application function that operand is not identical is installed in the same FP module region;
Incoherent FP application function is installed in the same FP module region.
4. arbitration device as claimed in claim 1 is characterized in that:
Described mark module is arranged on the high two of FP application function interface parameters with value of statistical indicant.
5. arbitration device as claimed in claim 1 is characterized in that:
Described FP module region is a plurality of zones of in advance the FP hardware resource being divided.
6. the referee method of a territory processor application function is characterized in that, comprising:
Analyze the matching condition of all territory processor FP application functions to be installed;
According to the matching condition of each FP application function, determine the FP module region that each FP application function is installed;
For each FP application function is put a value of statistical indicant corresponding with described FP module region;
Identify described value of statistical indicant, and find FP module region corresponding to each FP application function.
7. referee method as claimed in claim 6 is characterized in that:
Described matching condition is the operand, the correlation between all FP application functions to be installed of all FP application functions to be installed, FP application function to be installed and at least one in the correlation between the mounted FP application function.
8. referee method as claimed in claim 7 is characterized in that:
Described matching condition according to each FP application function, determine that the principle of the FP module region of each FP application function is:
The FP application function that operand is not identical is installed in the same FP module region;
Incoherent FP application function is installed in the same FP module region.
9. referee method as claimed in claim 6 is characterized in that:
Described value of statistical indicant is arranged on the high two of FP application function interface parameters.
10. referee method as claimed in claim 6 is characterized in that:
Described FP module region is a plurality of zones of in advance the FP hardware resource being divided.
11. the installation method of a territory processor application function, according to claim 6 or in the FP module region that the determined FP application function of each claim is corresponding in 10, priority order from low to high according to unappropriated FP hardware resource is installed described FP application function, until all FP application functions to be installed install.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210350970.5A CN102882812B (en) | 2012-09-19 | 2012-09-19 | The arbitration device of a kind of territory processor application function, method and installation method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210350970.5A CN102882812B (en) | 2012-09-19 | 2012-09-19 | The arbitration device of a kind of territory processor application function, method and installation method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102882812A true CN102882812A (en) | 2013-01-16 |
| CN102882812B CN102882812B (en) | 2016-01-27 |
Family
ID=47483962
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210350970.5A Active CN102882812B (en) | 2012-09-19 | 2012-09-19 | The arbitration device of a kind of territory processor application function, method and installation method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102882812B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050240795A1 (en) * | 2004-04-27 | 2005-10-27 | Nokia Corporation | Resource management system and method |
| CN101257458A (en) * | 2008-04-01 | 2008-09-03 | 北京星网锐捷网络技术有限公司 | Method, apparatus and system for distributing and mounting filtering meter item |
| CN101534301A (en) * | 2009-04-13 | 2009-09-16 | 北京星网锐捷网络技术有限公司 | List item installation method and device as well as network equipment |
| CN102035668A (en) * | 2009-09-29 | 2011-04-27 | 中兴通讯股份有限公司 | Method and system for managing switch chips |
| US8218539B2 (en) * | 2006-10-18 | 2012-07-10 | Broadcom Corporation | Flexible packet field processor |
| CN102647329A (en) * | 2012-05-09 | 2012-08-22 | 上海市共进通信技术有限公司 | Method for achieving operating control of terminal services based on frequent pattern (FP) rule by optical network unit (ONU) in gigabit passive optical network (GPON) |
-
2012
- 2012-09-19 CN CN201210350970.5A patent/CN102882812B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050240795A1 (en) * | 2004-04-27 | 2005-10-27 | Nokia Corporation | Resource management system and method |
| US8218539B2 (en) * | 2006-10-18 | 2012-07-10 | Broadcom Corporation | Flexible packet field processor |
| CN101257458A (en) * | 2008-04-01 | 2008-09-03 | 北京星网锐捷网络技术有限公司 | Method, apparatus and system for distributing and mounting filtering meter item |
| CN101534301A (en) * | 2009-04-13 | 2009-09-16 | 北京星网锐捷网络技术有限公司 | List item installation method and device as well as network equipment |
| CN102035668A (en) * | 2009-09-29 | 2011-04-27 | 中兴通讯股份有限公司 | Method and system for managing switch chips |
| CN102647329A (en) * | 2012-05-09 | 2012-08-22 | 上海市共进通信技术有限公司 | Method for achieving operating control of terminal services based on frequent pattern (FP) rule by optical network unit (ONU) in gigabit passive optical network (GPON) |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102882812B (en) | 2016-01-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10097572B1 (en) | Security for network computing environment based on power consumption of network devices | |
| US10693749B2 (en) | Synthetic data for determining health of a network security system | |
| KR101679578B1 (en) | Apparatus and method for providing controlling service for iot security | |
| US10581914B2 (en) | Method and system of mitigating network attacks | |
| US9130983B2 (en) | Apparatus and method for detecting abnormality sign in control system | |
| CN103561011A (en) | Method and system for preventing blind DDoS attacks on SDN controllers | |
| US8797876B2 (en) | Identification of underutilized network devices | |
| WO2015154455A1 (en) | Method, device, nms, oss, and ems for alarm processing | |
| CN103763121A (en) | Method and device for quickly issuing network configuration information | |
| CN103875214A (en) | Intelligent phy with security detection for ethernet networks | |
| CN109347705B (en) | Loop detection method and device | |
| CN105162703B (en) | Multi-level network topology intelligent discovery and generation method and system based on hybrid protocol | |
| CN104601394A (en) | Business chain connectivity detection method, device and system | |
| CN104852840A (en) | Method and device for controlling mutual access between virtual machines | |
| KR20160002269A (en) | SDN-based ARP Spoofing Detection apparatus and method therefor | |
| CN103701822A (en) | Access control method | |
| CN115843429A (en) | Method and apparatus for isolation support in network slicing | |
| CN104660554A (en) | Method for implementing communication data security of virtual machines | |
| CN103634166B (en) | Equipment survival detection method and equipment survival detection device | |
| CN103220298A (en) | Windows Virtual machine remote detecting method | |
| KR20180085305A (en) | IoT Gateway | |
| CN106487611A (en) | A kind of method and device of detection SDN cluster division | |
| CN106453367B (en) | SDN-based method and system for preventing address scanning attack | |
| CN106878202B (en) | Message processing method and device | |
| CN106533882B (en) | Message processing method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |