CN103475586A - Method, device and system for forwarding network data messages - Google Patents
Method, device and system for forwarding network data messages Download PDFInfo
- Publication number
- CN103475586A CN103475586A CN2013103742831A CN201310374283A CN103475586A CN 103475586 A CN103475586 A CN 103475586A CN 2013103742831 A CN2013103742831 A CN 2013103742831A CN 201310374283 A CN201310374283 A CN 201310374283A CN 103475586 A CN103475586 A CN 103475586A
- Authority
- CN
- China
- Prior art keywords
- data message
- nat
- cpu
- tuple information
- relation table
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a method, a device and a system for forwarding network data messages. The method comprises the following steps: acquiring data messages in a data stream according to the received data stream; performing network address translation (NAT) strategy matching according to the first data message in the data stream, and establishing an NAT relation table; and determining a central processing unit (CPU) for correspondingly forwarding other data messages except the first data message according to quintuple information before and after the other data messages except the first data message in the data stream are translated and the NAT relation table. By adopting the method, the device and the system, the data messages in the same data stream can be distributed to the same CPU for processing in the presence or absence of a network address port translation (NAPT)/NAT scene, and use of a lock and jitter of a CPU cache are reduced, so that the network forwarding performance is promoted.
Description
Technical field
The present invention relates to the computer communication technology field, more specifically, relate to a kind of retransmission method, Apparatus and system of network data message.
Background technology
RPS(Receive Packet Steering) be the technology of the many queues of a kind of software simulation hardware network interface card, by the Hash to IP traffic, sort out, the data message of same IP stream is distributed to identical CPU to be processed, realize the load balancing of soft interruption on many CPU of network protocol stack, greatly promoted the performance of single many CPU of queue network interface card network forwarding equipment.
But, after the operation principle and realization flow of really having understood the RPS module, be not difficult to find that there is a critical defect in its current realization: the topology that can't support to exist network address translation.
Network address translation (Network Address Translation, be called for short NAT) be a kind of switch technology that is legitimate ip address by privately owned (reservation) address spaces, it is widely used in all kinds Internet access way and various types of network.It has ideally solved the problem of shortage of ip address, and has effectively avoided the attack of network-external, hides the also computer of protecting network inside.NAT can simply be divided into two kinds of conversion (basic NAT) between the basic network address, basic network address and port translation (NAPT).
We have a look the problem of the application records of RPS module under the NAT scene, below with NAPT, give an example.
Fig. 1 shows the network topology structure of RPS module application under the NAPT scene.As shown in Figure 1, client is carried out the rear access services device of NAPT conversion by network forwarding equipment.Transformation rule is as follows:
1）1.1.1.1（1025）->103.1.1.69（4000）
2）1.1.1.1（1026）->103.1.1.69（4001）
3）1.1.1.1（1027）->103.1.1.69（4002）
4）1.1.1.1（1028）->103.1.1.69（4003）
The rule 1 of take is example, NIC-0 carries out the RPS module while receiving the data flow that client sends out, extract the quaternary group information of data message in data flow, and carry out Hash(202.107.111.17 after arranging by size, 1.1.1.1,8080,1025), result of calculation should be transferred to CPU1 for this data message and processed.And NIC-1 also carries out RPS after receiving the data flow that service end replys, due to the record of NAPT, after the four-tuple sequence after extraction, Hash (202.107.111.17,103.1.1.69,8080,4000) and the result that obtains is that this data message should be given CPU3 and processed.Obviously, the result that NIC-0 and NIC-1 obtain after calculating is not identical.Therefore, record in the situation of NAPT/NAT, the RPS module also can't guarantee that the data message of same data flow is distributed to same CPU to be processed.
Because RPS module under the NAPT/NAT scene can't guarantee that giving same CPU by the data message of same data flow is processed, and can bring two problems:
1, the data flow related resource needs locking protection, the complexity of having brought software to realize.Simultaneously due to the lock mutual exclusion, can not complete parallel between multinuclear, cause performance loss.
2, data message is frequently processed on different CPU, causes CPU cache shake, further affects performance.
Summary of the invention
In view of the above problems, the retransmission method, the Apparatus and system that the purpose of this invention is to provide a kind of network data message, with realization, having or not under the NAPT/NAT scene, the RPS module guarantees that data message in the same data flow can be distributed to same CPU to be processed.
The invention provides a kind of retransmission method of network data message, comprising:
Obtain the data message in data flow;
Carry out the NAT strategy matching according to the first data message in data flow, set up comprise data flow the NAT transformational relation table of corresponding CPU;
According to five-tuple information and the NAT transformational relation table before and after other data message conversion except first data message in data flow, determine CPU corresponding to other data message except first data message.
The present invention also provides a kind of retransmission unit of network data message, comprising:
The data message acquiring unit, for obtaining the data message of data flow;
NAT transformational relation table construction unit, carry out the NAT strategy matching for the first data message according to data flow, set up comprise data flow the NAT transformational relation table of corresponding CPU;
Retransmission unit, for five-tuple information and the NAT transformational relation table before and after other data message conversion except first data message according to data flow, determine CPU corresponding to other data message except first data message.
The present invention provides again a kind of repeater system of network data message, comprises network interface card, CPU and above-mentioned forwarded device, and wherein, network interface card is for receiving the data flow of client and service end; CPU is for the treatment of the data message in data flow; The forwarded device is processed for the data message of same data flow being distributed to same CPU.
Utilize the above-mentioned retransmission method according to network data message of the present invention, Apparatus and system, having or not under the NAPT/NAT scene, assurance is assigned to identical CPU by data message in same data flow and is processed, and reduces use and the CPU cache shake of lock, promotes the performance of forwarded.
In order to realize above-mentioned and relevant purpose, one or more aspects of the present invention comprise the feature that back will describe in detail and refer in particular in the claims.Following explanation and accompanying drawing describe some illustrative aspects of the present invention in detail.Yet, the indication of these aspects be only some modes that can use in the variety of way of principle of the present invention.In addition, the present invention is intended to comprise all these aspects and their equivalent.
The accompanying drawing explanation
By reference to the content below in conjunction with the description of the drawings and claims, and, along with understanding more comprehensively of the present invention, other purpose of the present invention and result will be understood and easy to understand more.In the accompanying drawings:
Fig. 1 is the network topology structure figure of RPS module application under the NAPT scene;
Fig. 2 is the flow chart according to the retransmission method of network data message of the present invention;
Fig. 3 is for to enter the flow chart of RPS module according to the data message of the embodiment of the present invention;
Fig. 4 is for to enter the forwarding process schematic diagram according to the data message of the embodiment of the present invention;
Fig. 5 is the structure chart according to the nat translation table of the embodiment of the present invention;
Fig. 6 is the block diagram according to the retransmission unit of network data message of the present invention.
In institute's drawings attached, identical label is indicated similar or corresponding feature or function.
Embodiment
Below with reference to accompanying drawing, specific embodiments of the invention are described in detail.
Data message in same data flow can not be distributed to the problem that same CPU is processed in order to solve in prior art RPS module under the NAPT/NAT scene, the present invention is by building keyword and setting up NAT transformational relation table, by inquiry NAT transformational relation table, the data message of same data flow is distributed to same CPU to be processed, thereby guarantee that data message in same data flow is assigned to identical CPU to be processed, reduce use and the CPU cache shake of lock.
Fig. 2 shows the flow process according to the retransmission method of network data message of the present invention.
As shown in Figure 2, after the RPS module receives data flow, obtain the five-tuple information (step S210) of described data message according to the data message in received data stream; Then, according to the first data message in described data flow, carry out the NAT strategy matching, set up NAT transformational relation table (step S220); After setting up NAT transformational relation table, in step S230, just can, according to five-tuple information and the NAT transformational relation table before and after other data message conversion except first data message in data flow, determine CPU corresponding to other data message except first data message.
After the CPU that has determined corresponding forwarding, just can take this CPU as forwarding target forwarding other data message except first data message.Because this CPU is that the NAT transformational relation table of setting up according to first data message is determined, therefore, just can give same CPU by the data message of same data flow by the inquiry to this NAT transformational relation table and be processed, thereby avoid data message frequent CPU cache caused that processes on different CPU to shake.
Forwarded method provided by the invention, be divided into two flow processs, and data message is introduced into the handling process of RPS module and data message from the RPS module finishes, the forwarding process that enters data message.
Fig. 3 shows the flow process that enters the RPS module according to the data message of the embodiment of the present invention.
As shown in Figure 3, the data flow that the data flow that the network interface card of client is received and the network interface card of service end are received is delivered to RPS module entrance, the RPS module receives the data flow that network interface card is sent here, and determine whether the IP datagram literary composition, if not IP datagram literary composition, RPS module records current C PU information return to CPU; If IP datagram literary composition, obtain source IP address, purpose IP address and the protocol number of data message, and detect whether the protocol number that data message obtains is Transmission Control Protocol or udp protocol, if, obtain source port and the destination interface of data message, by building Key inquiry NAT transformational relation table; If not, source port and destination interface are made zero, by building Key inquiry NAT transformational relation table (Key and NAT transformational relation table are described in detail later), if the Key built hits NAT transformational relation table, the CPU that data message is corresponding is Key and hits the CPU in NAT transformational relation table, extract CPU information corresponding to data message and return to network interface card, if the miss NAT transformational relation of the Key table built, according to CPU corresponding to five-tuple acquisition of information before the data message conversion.
Wherein, five-tuple information comprises source IP address, purpose IP address, source port, destination interface and protocol number, and obtaining five-tuple information is in order to calculate the hash value of five-tuple information.
Wherein, judgement TCP or udp protocol are in order to obtain transport layer port, because other transport layer protocol does not have port, so give tacit consent to port if not TCP or udp protocol, are set to 0.
Processed and build again NAT transformational relation table and forwarded because data message is introduced into the RPS module, so first data message can hit NAT transformational relation table scarcely, the CPU that inquiry is corresponding less than first data message, can determine corresponding CPU according to the five-tuple information before first data message conversion, detailed process is:
(1) obtain the front five-tuple information of first data message conversion, comprise source IP address, purpose IP address, source port, destination interface, protocol number, wherein message source port and the destination interface for non-UDP, non-Transmission Control Protocol is set to 0;
(2) be keyword by the five-tuple information architecture, as the input of Hash function, obtain hash value; Wherein, the realization of Hash function has various ways, by keyword being mapped to a position Visitor Logs in the Hash table, accelerates seek rate, common are direct addressing, digital analysis method, jackknife method, random number method, leaving remainder method etc.; The Hash of this place has been used jackknife method, according to the input of five-tuple, gets the hash value of 32;
(3) obtain the work CPU quantity of current device, by hash value, to cpu quantity delivery, obtain the CPU at first data message place.
Data message is from the RPS module finishes, enter the forwarding process of data message, can be for the first data message in same data flow in this flow process, build NAT transformational relation table, for searching of same data flow follow-up data message, all can build according to the first data message in data flow NAT transformational relation table for different data flow, that in data flow, other data message except first data message can be determined its correspondence according to this NAT transformational relation table is the CPU identical with first data message.
Fig. 4 shows the flow process that enters forwarding according to the data message of the embodiment of the present invention.
As shown in Figure 4, whether at first detect the data flow that enters forwarding process is the IP datagram literary composition, if not the IP datagram literary composition, continue to detect the data flow that enters forwarding process, if the IP datagram literary composition, detect data message whether headed by a data message, if not first data message, continue to detect the data message that enters forwarding process, if first data message records the front five-tuple information of first data message NAT conversion with Lkey; Then first data message starts to carry out the NAT conversion, with Rkey, records the five-tuple information after NAT changes; Obtain the corresponding CPU forwarded of first data message according to the hash value that calculates RPS, record the corresponding CPU information forwarded of first data message, the hash value of the five-tuple information after hash value, the first data message NAT of the five-tuple information before first data message NAT conversion are changed becomes the NAT single linked list with the corresponding CPU information architecture forwarded of first data message; Build a Hash array with the hash value of the five-tuple information before first data message NAT conversion and the hash value of the five-tuple information after described first data message NAT conversion; By Hash array and single linked list combination, set up described NAT transformational relation table.
Wherein, the key built in same data flow, first for calculating the hash value of NAT transformational relation table, when not hitting NAT transformational relation table, then be used as the hash value that calculates RPS, it should be noted that this two hash algorithm differences.
It should be noted that, follow-up data message in same data flow enters in the process of RPS resume module, the hash value of Lkey or the hash value of Rkey will be designated as under the Key of structure, hash value is for addressing, can in NAT transformational relation table, get same CPU by the hash value of structure Lkey or the hash value of Rkey, be the CPU calculated according to the first data message in same data flow.
That is to say, when the first data message in same data flow enters the RPS module, obtain source IP address, purpose IP address and the protocol number of first data message, and detect whether the protocol number that first data message obtains is Transmission Control Protocol or udp protocol, if, obtain source port and the destination interface of data message, by building Key inquiry NAT transformational relation table; If not, source port and destination interface are made zero, by building Key inquiry NAT transformational relation table, because first data message does not also finish to build NAT transformational relation table from the RPS module, so first data message inquiry is less than NAT transformational relation table, by the five-tuple information before first data message conversion, calculate the hash value of RPS, obtain corresponding CPU information.
And the follow-up data message in same data flow need not build NAT transformational relation table again, the NAT transformational relation table that directly inquiry builds according to first data message.
First data message for different data streams can hit the NAT transformational relation table that data flow builds before scarcely, need to rebuild according to the first data message in data flow NAT transformational relation table.
In order to describe the structure of NAT transformational relation table in detail, Fig. 5 shows the structure according to the nat translation table of the embodiment of the present invention.
As shown in Figure 5, NAT transformational relation table comprises:
Hash array and single linked list, the CPU information (Cpu_info) at the hash value that the list item of single linked list comprises Lkey, the hash value of Rkey, first data message place and out of Memory (Other_info) are wherein, five-tuple information (Lkey_info) before Lkey record data message NAT, the five-tuple information (Rkey_info) after Rkey record data message NAT; The hash value that the Hash array index is Lkey and the hash value of Rkey.
Addr1 in Fig. 5, addr2, addr3, addr10 have represented different data flow, data corresponding node item that fails to be convened for lack of a quorum, this node item records Cpu+Lkey+Rkey information, but because Hash itself may have conflict, so a plurality of nodes of may connecting below each array item.
Because the five-tuple information before and after the conversion for calculating hash value is not identical, therefore, the hash value difference calculated, for example, the hash value calculated according to the first five tuple information of conversion is 1024, according to the hash value that after conversion, five-tuple information calculates, be 10027, so just hit array Hash_table[1024] and Hash_table[10027] two list items, each list item of Hash array single linked list of having connected, the Cpu+Lkey+Rkey information that each chained list node records before being exactly, as shown in NAT_entry, inquire thus CPU information.
Embodiment and accompanying drawing have been described the retransmission method according to network data message of the present invention above with reference to.Forwarded method of the present invention, can adopt software to realize, also can adopt hardware to realize, or adopt the mode of software and hardware combination to realize.
Corresponding with said method, the present invention also provides a kind of retransmission unit of network data message.Fig. 6 shows the retransmission unit according to network data message of the present invention, and as shown in Figure 6, the retransmission unit 600 of network data message provided by the invention comprises: data message acquiring unit 610, NAT transformational relation table construction unit 620, retransmission unit 630.
Wherein, data message acquiring unit 610, for obtaining the data message of data flow; NAT transformational relation table construction unit 620, carry out the NAT strategy matching for the first data message according to data flow, set up comprise data flow the NAT transformational relation table of corresponding CPU; Retransmission unit 630, for five-tuple information and the NAT transformational relation table before and after other data message conversion except first data message according to data flow, determine CPU corresponding to other data message except first data message.
Wherein, data message acquiring unit 610 further comprises that first data message judging unit 611(figure is not shown), for by the described NAT transformational relation table of inquiry, judge whether the data message in described data flow is described first data message.
Wherein, NAT transformational relation table construction unit 620 further comprises that the first five tuple information record cell 621(figure of conversion is not shown), for recording the front five-tuple information of described first data message NAT conversion; After conversion, five-tuple information recording unit 622(figure is not shown), for recording the five-tuple information after described first data message NAT changes; CPU acquiring unit 623(figure is not shown), input according to the five-tuple information architecture keyword before first data message NAT conversion as the Hash function, obtain hash value, the CPU quantity delivery by hash value to work, obtain the CPU that first data message is corresponding; CPU information recording unit 624(figure is not shown), for recording the CPU information that described first data message is corresponding; Single linked list construction unit 625(figure is not shown), the hash value of the five-tuple information after the hash value of the five-tuple information before described first data message NAT conversion, described first data message NAT conversion is become to single linked list with the corresponding CPU information architecture forwarded of first data message; Hash array determining unit 626(figure is not shown), determine a Hash array for the hash value of the five-tuple information with before described first data message NAT conversion and the hash value of the five-tuple information after described first data message NAT conversion; It is not shown that NAT transformational relation table is set up unit 627(figure), for according to described Hash array and described single linked list, set up described NAT transformational relation table.
In addition, the present invention provides again a kind of repeater system of network data message, comprises the retransmission unit of network interface card, CPU and aforementioned network data message, and wherein, network interface card is for receiving the data flow of client and service end; CPU is for the treatment of the data message in data flow; The retransmission unit of network data message is processed for the data message of same data flow being distributed to same CPU.
In the repeater system of above-mentioned network data message, the quantity of network interface card is at least two, and CPU is at least double-core CPU.
Accompanying drawing is described retransmission method, the Apparatus and system according to network data message of the present invention in the mode of example above with reference to.But, it will be appreciated by those skilled in the art that retransmission method, the Apparatus and system of the network data message of carrying for the invention described above, can also on the basis that does not break away from content of the present invention, do various improvement.Therefore, protection scope of the present invention should be determined by the content of appending claims.
Claims (10)
1. the retransmission method of a network data message comprises:
Obtain the data message in data flow;
Carry out the NAT strategy matching according to the first data message in described data flow, set up comprise described data flow the NAT transformational relation table of corresponding CPU;
According to five-tuple information and the described NAT transformational relation table before and after other data message conversion except first data message in described data flow, determine described CPU corresponding to other data message except first data message.
2. the retransmission method of network data message as claimed in claim 1, wherein,
By inquiring about described NAT transformational relation table, judge whether the data message in described data flow is described first data message.
3. the retransmission method of network data message as claimed in claim 1, wherein, in the described process of setting up NAT transformational relation table,
Obtain the front five-tuple information of described first data message NAT conversion;
Obtain the five-tuple information after described first data message NAT changes;
Input according to the five-tuple information architecture keyword before described first data message NAT conversion as the Hash function, obtain hash value, and the CPU quantity delivery by hash value to work, obtain CPU corresponding to described first data message;
The hash value of the five-tuple information after the hash value of the five-tuple information before described first data message NAT conversion, described first data message NAT conversion is become to single linked list with CPU information architecture corresponding to described first data message;
Determine a Hash array with the hash value of the five-tuple information before described first data message NAT conversion and the hash value of the five-tuple information after described first data message NAT conversion;
According to described Hash array and described single linked list, set up described NAT transformational relation table.
4. the retransmission method of network data message as claimed in claim 3, wherein, at the five-tuple information according to other data message except first data message in described data flow and described NAT transformational relation table, determine in the process of the described corresponding described CPU of other data message except first data message
By building, described data message NAT changes the hash value of front five-tuple information or the hash value of the five-tuple information after described data message NAT conversion is inquired about described NAT transformational relation table, determines the CPU that described data message is corresponding.
5. the retransmission method of network data message as described as any one in claim 1～4, wherein,
Described five-tuple information comprises source IP address, purpose IP address, source port, destination interface and protocol number;
If the protocol number that described data message obtains is Transmission Control Protocol or udp protocol, obtain source port and destination interface;
If the protocol number that described data message obtains is not Transmission Control Protocol or udp protocol, source port and destination interface are made zero, the hash value of the hash value of the five-tuple information of the described data message of direct construction before the NAT conversion or the five-tuple information of described data message after the NAT conversion.
6. the retransmission unit of a network data message comprises:
The data message acquiring unit, for obtaining the data message of data flow;
NAT transformational relation table construction unit, carry out the NAT strategy matching for the first data message according to described data flow, set up comprise described data flow the NAT transformational relation table of corresponding CPU;
Retransmission unit, for five-tuple information and the described NAT transformational relation table before and after other data message conversion except first data message according to described data flow, determine described CPU corresponding to other data message except first data message.
7. the retransmission unit of network data message as claimed in claim 6, wherein, described data message acquiring unit further comprises:
First data message judging unit, for by the described NAT transformational relation table of inquiry, judge whether the data message in described data flow is described first data message.
8. the retransmission unit of network data message as claimed in claim 6, wherein, described NAT transformational relation table construction unit further comprises:
Change the first five tuple information record cell, for recording the front five-tuple information of described first data message NAT conversion;
Five-tuple information recording unit after conversion, for recording the five-tuple information after described first data message NAT changes;
The CPU acquiring unit, the input according to the five-tuple information architecture keyword before described first data message NAT conversion as the Hash function, obtain hash value, and the CPU quantity delivery by hash value to work, obtain CPU corresponding to described first data message;
The CPU information recording unit, for recording the CPU information that described first data message is corresponding;
The single linked list construction unit, become single linked list by the hash value of the five-tuple information after the hash value of the five-tuple information before described first data message NAT conversion, described first data message NAT conversion with the corresponding CPU information architecture forwarded of described first data message;
Hash array determining unit, determine a Hash array for the hash value of the five-tuple information with before described first data message NAT conversion and the hash value of the five-tuple information after described first data message NAT conversion;
NAT transformational relation table is set up unit, for according to described Hash array and described single linked list, sets up described NAT transformational relation table.
9. the repeater system of a network data message, comprise network interface card, CPU and as the retransmission unit of network data message as described in any one in claim 6～8, wherein,
Described network interface card is for receiving the data flow of client and service end;
Described CPU is for the treatment of the data message in data flow;
The retransmission unit of described network data message is processed for the data message of same data flow being distributed to same CPU.
10. the repeater system of network data message as claimed in claim 9, wherein,
The quantity of described network interface card is at least two;
Described CPU is at least double-core CPU.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310374283.1A CN103475586B (en) | 2013-08-22 | 2013-08-22 | The retransmission method of network data message, Apparatus and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310374283.1A CN103475586B (en) | 2013-08-22 | 2013-08-22 | The retransmission method of network data message, Apparatus and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103475586A true CN103475586A (en) | 2013-12-25 |
| CN103475586B CN103475586B (en) | 2016-05-04 |
Family
ID=49800291
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310374283.1A Active CN103475586B (en) | 2013-08-22 | 2013-08-22 | The retransmission method of network data message, Apparatus and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103475586B (en) |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104038415A (en) * | 2014-05-23 | 2014-09-10 | 汉柏科技有限公司 | Method for batch processing of messages |
| CN104468412A (en) * | 2014-12-04 | 2015-03-25 | 东软集团股份有限公司 | RSS-based network session data packet distribution method and system |
| CN104580017A (en) * | 2014-12-30 | 2015-04-29 | 东软集团股份有限公司 | Network conversation issuing method and system based on RSS |
| CN105871741A (en) * | 2015-01-23 | 2016-08-17 | 阿里巴巴集团控股有限公司 | Packet dispersion method and device |
| CN106878179A (en) * | 2016-12-14 | 2017-06-20 | 新华三技术有限公司 | A kind of message forwarding method and device |
| CN109067935A (en) * | 2018-08-16 | 2018-12-21 | 深圳市风云实业有限公司 | Packet message processing method and multi-core processor system |
| CN110022330A (en) * | 2018-01-09 | 2019-07-16 | 阿里巴巴集团控股有限公司 | For the processing method of network packet, device and electronic equipment |
| CN113132262A (en) * | 2020-01-15 | 2021-07-16 | 阿里巴巴集团控股有限公司 | Data stream processing and classifying method, device and system |
| CN113783973A (en) * | 2021-08-31 | 2021-12-10 | 上海弘积信息科技有限公司 | Method for realizing lock-free of data flow under multi-core condition by NAT port allocation |
| CN114268518A (en) * | 2021-12-21 | 2022-04-01 | 深圳市吉祥腾达科技有限公司 | Method and system for realizing forwarding acceleration of sdwan data tunnel |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1848795A (en) * | 2005-04-15 | 2006-10-18 | 上海艾泰科技有限公司 | Method for realizing large data packet quick retransmission in real-time communication system |
| CN1905531A (en) * | 2006-08-11 | 2007-01-31 | 白杰 | Method for processing data being transmitted and method and apparatus for transmitting data |
| CN101345689A (en) * | 2008-09-10 | 2009-01-14 | 华为技术有限公司 | Method, apparatus and communication equipment for implementing IP safety service |
| CN101878663A (en) * | 2007-11-29 | 2010-11-03 | 瑞科网信科技有限公司 | System and method for distributed multi-processing security gateway |
-
2013
- 2013-08-22 CN CN201310374283.1A patent/CN103475586B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1848795A (en) * | 2005-04-15 | 2006-10-18 | 上海艾泰科技有限公司 | Method for realizing large data packet quick retransmission in real-time communication system |
| CN1905531A (en) * | 2006-08-11 | 2007-01-31 | 白杰 | Method for processing data being transmitted and method and apparatus for transmitting data |
| CN101878663A (en) * | 2007-11-29 | 2010-11-03 | 瑞科网信科技有限公司 | System and method for distributed multi-processing security gateway |
| CN101345689A (en) * | 2008-09-10 | 2009-01-14 | 华为技术有限公司 | Method, apparatus and communication equipment for implementing IP safety service |
Cited By (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104038415A (en) * | 2014-05-23 | 2014-09-10 | 汉柏科技有限公司 | Method for batch processing of messages |
| CN104468412A (en) * | 2014-12-04 | 2015-03-25 | 东软集团股份有限公司 | RSS-based network session data packet distribution method and system |
| CN104468412B (en) * | 2014-12-04 | 2017-10-31 | 东软集团股份有限公司 | BlueDrama packet delivery method and system based on RSS |
| CN104580017A (en) * | 2014-12-30 | 2015-04-29 | 东软集团股份有限公司 | Network conversation issuing method and system based on RSS |
| CN104580017B (en) * | 2014-12-30 | 2018-04-06 | 东软集团股份有限公司 | BlueDrama distribution method and system based on RSS |
| CN105871741B (en) * | 2015-01-23 | 2018-12-25 | 阿里巴巴集团控股有限公司 | A kind of message diversion method and device |
| CN105871741A (en) * | 2015-01-23 | 2016-08-17 | 阿里巴巴集团控股有限公司 | Packet dispersion method and device |
| CN106878179A (en) * | 2016-12-14 | 2017-06-20 | 新华三技术有限公司 | A kind of message forwarding method and device |
| CN110022330A (en) * | 2018-01-09 | 2019-07-16 | 阿里巴巴集团控股有限公司 | For the processing method of network packet, device and electronic equipment |
| CN110022330B (en) * | 2018-01-09 | 2022-01-21 | 阿里巴巴集团控股有限公司 | Processing method and device for network data packet and electronic equipment |
| CN109067935A (en) * | 2018-08-16 | 2018-12-21 | 深圳市风云实业有限公司 | Packet message processing method and multi-core processor system |
| CN113132262A (en) * | 2020-01-15 | 2021-07-16 | 阿里巴巴集团控股有限公司 | Data stream processing and classifying method, device and system |
| CN113132262B (en) * | 2020-01-15 | 2024-05-03 | 阿里巴巴集团控股有限公司 | Data stream processing and classifying method, device and system |
| CN113783973A (en) * | 2021-08-31 | 2021-12-10 | 上海弘积信息科技有限公司 | Method for realizing lock-free of data flow under multi-core condition by NAT port allocation |
| CN113783973B (en) * | 2021-08-31 | 2023-09-15 | 上海弘积信息科技有限公司 | Implementation method for NAT port allocation lock-free data flow under multi-core |
| CN114268518A (en) * | 2021-12-21 | 2022-04-01 | 深圳市吉祥腾达科技有限公司 | Method and system for realizing forwarding acceleration of sdwan data tunnel |
| CN114268518B (en) * | 2021-12-21 | 2023-04-07 | 深圳市吉祥腾达科技有限公司 | Method and system for realizing forwarding acceleration of sdwan data tunnel |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103475586B (en) | 2016-05-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103475586A (en) | Method, device and system for forwarding network data messages | |
| US11057404B2 (en) | Method and apparatus for defending against DNS attack, and storage medium | |
| US7831822B2 (en) | Real-time stateful packet inspection method and apparatus | |
| US10097466B2 (en) | Data distribution method and splitter | |
| CN109617931B (en) | DDoS attack defense method and system of SDN controller | |
| US20110317700A1 (en) | Method for real-time synchronization of arp record in rsmlt cluster | |
| US10666672B2 (en) | Collecting domain name system traffic | |
| US20160014027A1 (en) | Caching data in an information centric networking architecture | |
| US20080077792A1 (en) | Bidirectional receive side scaling | |
| US7724746B2 (en) | Method and system for providing load balanced traffic in redundant infiniband ethernet gateways network | |
| US20110255408A1 (en) | Traffic analysis of data flows | |
| US7962564B2 (en) | Discovery of a virtual topology in a multi-tasking multi-processor environment | |
| US20170171147A1 (en) | Method and electronic device for implementing domain name system | |
| KR101679573B1 (en) | Method and apparatus for service traffic security using dimm channel distribution multicore processing system | |
| US9218356B2 (en) | Systems and methods for accelerating networking functionality | |
| CN104778193A (en) | Data deduplication method and device | |
| WO2020187295A1 (en) | Monitoring of abnormal host | |
| US20210243248A1 (en) | Cloud service load balancing | |
| US20160191368A1 (en) | Information processing device, method, and medium | |
| US9137158B2 (en) | Communication apparatus and communication method | |
| CN109617817B (en) | Method and device for generating forwarding table entry of MLAG networking | |
| CN115996203A (en) | Network traffic domain division method, device, equipment and storage medium | |
| US20110282926A1 (en) | Relay apparatus, recording medium storing a relay program, and a relay method | |
| CN113098925B (en) | Method and system for realizing dynamic proxy based on F-Stack and Nginx | |
| CN101247328B (en) | Multi-connection processing method and device for network application |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |