CN103684886B

CN103684886B - A kind of message processing method and equipment

Info

Publication number: CN103684886B
Application number: CN201310753775.1A
Authority: CN
Inventors: 潘方敏; 刘赫伟
Original assignee: Hangzhou Huawei Digital Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2013-12-30
Filing date: 2013-12-30
Publication date: 2017-11-21
Anticipated expiration: 2033-12-30
Also published as: CN103684886A

Abstract

The invention discloses a kind of message processing method and equipment, by the way that caused event message in message traffic processing procedure is assembled into the pseudo- message for possessing same format with the message, and according to the type of the event message, mode where the pseudo- message is inserted into the message among the relevant position of message queue, to realize the unified management of message and event message, so as to simplify the processing logic of message and event message, reach and improved the treatment effeciency of message and event message and processing flexibility and and then improve the purpose of systematic function.

Description

Message processing method and device

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method and an apparatus for processing a packet.

Background

At present, services such as protocol identification, content parsing, load balancing, network acceleration, and security are generally run on network devices (such as service gateways, routers, and network security devices) to support effective management of network traffic.

Specifically, when processing a message in a received network data stream, the network device generally needs to strictly perform the processing according to the sequence of each message, and various services running on the network device also need to strictly maintain the order when processing the same message. For example, for any packet, the network device needs to perform protocol identification on the packet first, then perform content parsing on the packet, and finally perform operations such as security check and/or load balancing on the packet. In addition, event messages such as link establishment and link disconnection generated in the service processing process of the message also need to be sequentially transmitted to each service application.

Based on the above situation, the network device may generally process the received message and the event message generated in the service processing process by using the following methods:

the first method is as follows: according to the sequence of messages received by the network equipment and the information such as timestamps, fragments and the like carried by the messages, all the messages form a corresponding message queue, and according to the sequence of event message generation, all the event messages generated by the messages also form a corresponding event message queue. On the message queue and the event message queue, each service processing module to be executed, such as a protocol identification module, an IPS intrusion prevention System, an ADC (Application Delivery Controller) module, and an ADC module or an IPS module corresponding to the message queue in fig. 1, is managed and maintained, respectively, so as to ensure the orderliness of message and event message processing, and at this time, the processing procedure of the message and event message may be as shown in fig. 1.

However, when the above method is used to perform service processing on each message and each event message, there are various queues such as a message queue, an event message queue, and a service processing module queue, so that management and scheduling among the queues are complicated; moreover, the execution time of the event message generated by the message may need to be synchronized with the message, which is difficult to realize if a plurality of queues are adopted; furthermore, when the network device processes the messages and the event messages in a multi-core and multi-thread manner, lock resources are frequently used, the possibility of parallel processing conflicts is increased while the system overhead is increased, and great waste is caused to system resources and performance.

The second method comprises the following steps: the processing of the event message is triggered during the message queue processing and implemented in an interrupt manner, and at this time, the processing of the message and the event message may be as shown in fig. 2.

Compared with the first mode, the event message generated in the message processing process can be processed in an interrupt mode, so that the aim of hiding the event message queue and reducing the complexity of queue scheduling can be fulfilled. However, for some event messages that need to be executed after the complete processing of the message is completed, the second method may not be fully supported, and furthermore, because a plurality of service processing modules, such as the IPS module and the ADC module corresponding to the message in fig. 2, or the IPS link-breaking processing module, the ADC link-breaking processing module, and the WOC (WAN Optimization Controller) link-breaking processing module corresponding to the link-breaking event message are registered in advance when the method is used to perform service processing on each message and each event message, even if only a part of the service processing modules that actually need to be executed are needed, all the service processing modules need to be executed in sequence, which may cause a certain waste of system performance.

That is, the existing method for processing each message and each event message generated in the message processing process is not good, and therefore, it is necessary to provide a new processing method to solve the above problem.

Disclosure of Invention

The embodiment of the invention provides a message processing method and device, which are used for solving the problem that the existing mode for processing each message and each event message generated in the message processing process is not good.

In a first aspect, a method for processing a packet is provided, including:

the network equipment acquires a current message to be processed from a message queue comprising at least one message, and determines at least one service processing module required for performing service processing on the current message to be processed and a service execution sequence among the at least one service processing module;

and performing service processing on the current message to be processed according to the service execution sequence of the at least one service processing module and the at least one service processing module, assembling event messages generated in the service processing process into pseudo messages with the same message format as the current message to be processed, and inserting the pseudo messages into corresponding positions of the message queue according to the type of the event messages.

With reference to the first aspect, in a first possible implementation manner of the first aspect, determining at least one service processing module required for performing service processing on the current packet to be processed and a service execution sequence between the at least one service processing module includes:

determining at least one service processing module corresponding to the running condition or running scene of the current message to be processed according to the corresponding relation between a pre-configured service processing module and the message running condition or the corresponding relation between the pre-configured service processing module and the message running scene, and determining the service execution sequence of the at least one service processing module according to the execution sequence of the at least one service processing module under the running condition or running scene of the current message to be processed.

With reference to the first aspect, in a second possible implementation manner of the first aspect, after determining that the service processing operation performed on the current packet to be processed is completed, the method further includes:

if the current message to be processed is determined to be a pseudo message, discarding the current message to be processed;

and if the current message to be processed is determined to be a non-pseudo message, sending the current message to be processed to a message receiving device.

With reference to the first aspect, or the first or second possible implementation manner of the first aspect, in a third possible implementation manner of the first aspect, performing service processing on the current packet to be processed according to the at least one service processing module and a service execution order between the at least one service processing module, includes:

and scheduling the service processing modules in sequence according to the service execution sequence of the at least one service processing module, and performing corresponding service processing on the current message to be processed according to the scheduled service processing module.

With reference to the first aspect, or the first or second possible implementation manner of the first aspect, in a fourth possible implementation manner of the first aspect, the event message includes one or more of a link establishment event message, a link establishment completion event message, a link disconnection event message, a request end event message, and a transaction end event message;

the assembling the event message into a pseudo message having the same message format as the current message to be processed, and inserting the pseudo message into a corresponding position of the message queue according to the type of the event message includes:

when the event message is a link establishment completion event message, assembling the event message into a pseudo message which has the same message format as the current message to be processed and contains a link establishment completion event message mark, and inserting the pseudo message into the position of the header of the message queue; or,

when the event message is a link establishment event message, a request ending event message or an affair ending event message, respectively performing link establishment event message marking, a request ending event message marking or an affair ending event message marking on the current message to be processed to obtain a pseudo message which has the same message format as the current message to be processed and respectively comprises the corresponding link establishment event message marking, the request ending event message marking or the affair ending event message marking, and inserting the pseudo message into the position of the current message to be processed in the message queue; or,

and when the event message is a broken link event message, assembling the event message into a pseudo message which has the same message format as the current message to be processed and contains a broken link event message mark, and inserting the pseudo message into the tail position of the message queue.

In a second aspect, a message processing device is provided, which includes:

the message acquisition unit is used for acquiring a current message to be processed from a message queue comprising at least one message;

a module determining unit, configured to determine at least one service processing module required for performing service processing on the current packet to be processed acquired by the packet acquiring unit, and a service execution sequence between the at least one service processing module;

a message processing unit, configured to perform service processing on the current packet to be processed according to the service execution order between the at least one service processing module and the at least one service processing module determined by the module determining unit, assemble an event message generated in the service processing process into a pseudo packet having the same packet format as the current packet to be processed, and insert the pseudo packet into a corresponding position of the packet queue according to the type of the event message.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the module determining unit is specifically configured to determine, according to a correspondence between a preconfigured service processing module and a message operating condition, or a correspondence between a preconfigured service processing module and a message operating scene, at least one service processing module corresponding to an operating condition or an operating scene of the current message to be processed, and determine, according to an execution sequence of the at least one service processing module under the operating condition or the operating scene of the current message to be processed, a service execution sequence between the at least one service processing module.

With reference to the second aspect, in a second possible implementation manner of the second aspect, the packet processing unit is further configured to, after it is determined that the service processing operation performed on the current packet to be processed is completed, discard the current packet to be processed if it is determined that the current packet to be processed is a dummy packet, and send the current packet to be processed to a corresponding packet receiving device if it is determined that the current packet to be processed is a non-dummy packet.

With reference to the second aspect, or the first or second possible implementation manner of the second aspect, in a third possible implementation manner of the second aspect, the packet processing unit is specifically configured to sequentially schedule each service processing module according to a service execution sequence between the at least one service processing module, and perform corresponding service processing on the current packet to be processed according to the scheduled service processing module.

With reference to the second aspect, or the first or second possible implementation manner of the second aspect, in a fourth possible implementation manner of the second aspect, the event message includes one or more of a link establishment event message, a link establishment completion event message, a link disconnection event message, a request end event message, and a transaction end event message;

the message processing unit is specifically configured to, when the event message is a link establishment completion event message, assemble the event message into a pseudo message that has the same message format as the current message to be processed and includes a link establishment completion event message flag, and insert the pseudo message into a header position of the message queue; or, specifically, when the event message is a link establishment event message, a request end event message, or an transaction end event message, performing a link establishment event message marker, a request end event message marker, or a transaction end event message marker on the current packet to be processed, respectively, to obtain a pseudo packet having the same packet format as the current packet to be processed and including the corresponding link establishment event message marker, request end event message marker, or transaction end event message marker, respectively, and inserting the pseudo packet into the packet queue at the position of the current packet to be processed; or, when the event message is a broken link event message, the method is specifically configured to assemble the event message into a pseudo message which has the same message format as the current message to be processed and contains a broken link event message mark, and insert the pseudo message into a tail position of the message queue.

In the technical solution of the embodiment of the present invention, event messages generated in a message service processing process are assembled into a pseudo message having the same format as the message, and the pseudo message is inserted into a corresponding position of a message queue where the message is located according to the type of the event message, so as to implement unified management of the message and the event message, thereby simplifying processing logic of the message and the event message, and achieving the purpose of improving processing efficiency and processing flexibility of the message and the event message, and further improving system performance.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 is a first schematic diagram illustrating a process of processing a message and an event message in the prior art;

fig. 2 is a schematic diagram ii illustrating a process of processing a message and an event message in the prior art;

fig. 3 is a schematic flow chart illustrating a message processing method according to a first embodiment of the present invention;

fig. 4 is a schematic diagram illustrating a unified message format according to a first embodiment of the present invention;

fig. 5 is a schematic structural diagram of the message processing apparatus according to the second embodiment of the present invention;

fig. 6 is a schematic structural diagram of the message processing apparatus according to the third embodiment of the present invention.

Detailed Description

The embodiment of the invention provides a message processing method and device, which are used for realizing the unified management of messages and event messages by assembling event messages generated in the message service processing process into pseudo messages with the same format as the messages and inserting the pseudo messages into corresponding positions of a message queue where the messages are located according to the types of the event messages, thereby simplifying the processing logic of the messages and the event messages, and achieving the purposes of improving the processing efficiency and the processing flexibility of the messages and the event messages and further improving the system performance.

In order to make the objects, technical solutions and advantages of the present invention clearer, the present invention will be described in further detail with reference to the accompanying drawings, and it is apparent that the described embodiments are only a part of the embodiments of the present invention, not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

The first embodiment is as follows:

as shown in fig. 3, which is a schematic flow chart of the message processing method according to the first embodiment of the present invention, the message processing method may be applied to various network devices that need to execute multiple functional services, such as service gateways, routers, and network security devices, and the embodiment of the present invention is not limited in this respect. Specifically, the message processing method may include the following steps:

step 101: aiming at a message queue comprising at least one message, the network equipment acquires the current message to be processed from the message queue.

Specifically, in the embodiment of the present invention, after receiving a message from a message sending device, a network device first determines a message flow to which each message belongs according to parameter information such as a source IP (Internet Protocol) address, a destination IP address, a source port, a destination port, and a transmission Protocol of the message, and sequentially buffers each message belonging to the same message flow in the same message queue according to a sequence of the received messages and information such as a timestamp and a fragment carried in each message.

Correspondingly, for a message queue comprising at least one message, when the current message to be processed is obtained from the message queue, the messages can be sequentially obtained from the message queue as the current message to be processed according to the sequence of the messages in the message queue.

Step 102: and determining at least one service processing module required for performing service processing on the current message to be processed and a service execution sequence among the at least one service processing module.

Specifically, in the embodiment of the present invention, the network device may configure, in advance, the service processing module that needs to be executed under the corresponding condition (and/or scene) according to different message running conditions (and/or message running scenes), that is, pre-configure the corresponding relationship between the service processing module and the message running condition (and/or running scene).

In this case, a message operation scenario is taken as an example, and the scenario may be subdivided into a message entry, a message exit, an L7 layer (application layer) process, and the like, which is not limited in this embodiment of the present invention. It should be noted that, the network device may also adjust and set the corresponding relationship between the preconfigured service processing module and the message operation condition (and/or operation scenario) in real time according to the actual situation, so as to adapt to the service processing process of the message more flexibly, which is not limited in this embodiment of the present invention.

Correspondingly, in the embodiment of the present invention, determining at least one service processing module required for performing service processing on the current packet to be processed and a service execution sequence between the at least one service processing module may include:

determining at least one service processing module corresponding to the running condition of the current message to be processed according to the corresponding relation between a pre-configured service processing module and the message running condition, and determining the service execution sequence of the at least one service processing module according to the execution sequence of the at least one service processing module under the running condition of the current message to be processed;

or, determining at least one service processing module corresponding to the running scene of the current message to be processed according to a pre-configured corresponding relationship between the service processing module and the message running scene, and determining a service execution sequence between the at least one service processing module according to an execution sequence of the at least one service processing module in the running scene of the current message to be processed.

The determined service processing module may generally include one or more of a protocol identification module, an IPS module, an ADC module, a WOC module, and a special service processing module customized by a user according to a need, which is not limited in this embodiment of the present invention.

Furthermore, the determined at least one service processing module may be added or deleted in real time according to the actual needs of the user, so as to further achieve the purpose of more flexibly adapting to the service processing process of the message, which is not limited in this embodiment of the present invention.

Further, in the embodiment of the present invention, each packet in any packet queue may generally have a uniform packet format as shown in fig. 4. The unified message format may include a message data field for indicating specific data content of a message, a message data length field for indicating a message data length, a message type field for indicating a specific type of a message, a public data field, and the like, which is not limited in this embodiment of the present invention. Further, the common data field may include flow table information used for representing a message operation condition and/or an operation scenario, an initial packet flag when the message is an initial packet, and event message flag information when the message is an event message generated in a message service processing process, which is not limited in this embodiment of the present invention.

Correspondingly, when the service processing module corresponding to the current message operation condition (and/or operation scene) to be processed is determined according to the corresponding relation between the service processing module and the message operation condition (and/or operation scene) configured in advance, the information such as the message running conditions (such as information of a source IP address, a destination IP address, a source port, a destination port and the like) (and/or the message running scene) corresponding to the current message to be processed can be determined according to the public data field information carried in the current message to be processed, and according to the determined message running condition (and/or running scene), from the corresponding relation between the service processing module and the message running condition (and/or running scene) configured in advance, and acquiring a service processing module corresponding to the determined message operation condition (and/or operation scene).

It should be noted that, in the embodiment of the present invention, for any packet, because a set order exists between at least one determined service processing module required for performing service processing on the packet, the at least one determined service processing module required for performing service processing on the packet may be referred to as a service processing module chain for short, and correspondingly, for any two packets in the same packet queue, the determined service processing module chains respectively matched with the any two packets may be the same or different, which is not limited in this embodiment of the present invention.

It should be noted that, for any two messages in the same message queue, when the determined service processing module chains respectively matched with the any two messages are the same service processing module chain, that is, the service processing module chain pre-configured for each message to be processed in the same message queue is the same service processing module chain, after the service processing module chain matched with the first message in the same message queue is determined, the service processing module chain can be directly used as the service processing module chain matched with each other message in the same message queue, so as to achieve the purpose of simplifying the subsequent message service processing flow.

Step 103: and performing service processing on the current message to be processed according to the determined service execution sequence between the at least one service processing module and the at least one service processing module.

Specifically, in the embodiment of the present invention, performing service processing on the current packet to be processed according to the at least one service processing module and a service execution sequence between the at least one service processing module may include:

For example, when the determined at least one service processing module includes a protocol identification module, an IPS module, and an ADC module, which are sequentially arranged, the protocol identification module, the IPS module, and the ADC module may be sequentially scheduled according to the arrangement order of the service processing modules, and corresponding service processing may be performed on the current message to be processed according to the scheduled modules.

Step 104: and assembling the event message generated in the service processing process into a pseudo message with the same message format as the current message to be processed, and inserting the pseudo message into the corresponding position of the message queue according to the type of the event message.

The event message may at least include a link establishment event message, a link establishment completion event message, a link disconnection event message, a request end event message, a transaction end event message, and the like, which is not limited in this embodiment of the present invention.

Specifically, when performing service processing on the current packet to be processed, if it is detected that the current packet to be processed is a packet carrying a SYN (synchronization, a handshake signal used when establishing a connection) identifier, a corresponding link establishment event message is generated to establish a new connection; further, taking the TCP/IP protocol as an example, when it is determined that the three-way handshake is successful, a corresponding link establishment completion event message is generated to indicate that the connection establishment is completed; further, when an FIN (end) message or an RST (reset) message is detected, it indicates that the current connection has ended and the related resources can be released, and at this time, a corresponding chain scission event message may be generated.

Further, when a Request End message, such as a message carrying a Request End identifier, is detected, a corresponding Request End event message may be generated, so as to End the event message corresponding to the Request End message; or, when detecting the message carrying the Transaction End identifier, generating a corresponding Transaction End event message to notify the network device that the corresponding event message is processed.

Further, when the determined at least one service processing module required for performing service processing on the current packet to be processed further includes a special service processing module customized by the user, the event message may further include a special event message generated by the special service processing module, which is not limited in this embodiment of the present invention. It should be noted that, no event message may be generated during the service processing of the to-be-processed packet, which is not limited in this embodiment of the present invention, and at this time, the step 104 may not be executed.

Correspondingly, assembling the event message into a pseudo message having the same message format as the current message to be processed, and inserting the pseudo message into a corresponding position of the message queue according to the type of the event message, may include:

when the event message is a link establishment completion event message, the event message is assembled into a pseudo message which has the same message format as the current message to be processed and contains a link establishment completion event message mark, and the pseudo message is inserted into the header position of the message queue, wherein the link establishment completion event message mark can be usually arranged in a common data field of the pseudo message. That is, when the event message is a link establishment completion event message, the link establishment completion event message may be preferentially executed, and accordingly, for a packet that is waiting for the completion of link establishment to continue processing, the packet needs to be added to the tail of the packet queue again while waiting; or,

when the event message is a link establishment event message, a request ending event message or an affair ending event message, respectively performing link establishment event message marking, a request ending event message marking or an affair ending event message marking on the current message to be processed to obtain a pseudo message which has the same message format as the current message to be processed and respectively comprises the corresponding link establishment event message marking, the request ending event message marking or the affair ending event message marking, and inserting the pseudo message into the position of the current message to be processed in the message queue. That is to say, at this time, it is only necessary to record a link establishment event message flag, a request end event message flag, or an transaction end event message flag in the current to-be-processed message to implement pseudo message assembly and pseudo message insertion processing on the event message, so that each subsequent service processing module corresponding to the current to-be-processed message can read the flag and perform corresponding service processing according to the flag. The link establishment event message mark can be represented by an isSyn field, the request end event message mark can be represented by an isRequestEnd, and the transaction end event message mark can be represented by an isTransactionEnd field, which is not described in detail in the embodiment of the invention; or,

when the event message is a link breaking event message, assembling the event message into a pseudo message which has the same message format as the current message to be processed and contains a link breaking event message mark, and inserting the pseudo message into the tail position of the message queue, wherein the link breaking event message mark can be usually arranged in a public data field of the pseudo message and can be represented by an isTeardown field, which is not described in detail in the embodiment of the invention.

Furthermore, the event message may also include a special event message generated by each service processing module, for example, the IPS module may record a message stream as an attack message stream, at this time, a corresponding special event message mark may be performed on a common data field in a message format possessed by the current message to be processed, so that other messages to be processed of the subsequent message stream may perform corresponding service processing directly according to the event message mark, for example, directly discard the message.

Further, the event message may further include a special event message generated by a special service processing module customized by the user, and at this time, the special event message may be assembled into a pseudo message having the same message format as the current message to be processed and including a corresponding special event message mark, and the pseudo message is inserted into a specific position of the message queue.

Further, in the embodiment of the present invention, after the dummy packet is inserted into the corresponding position of the packet queue according to the type of the event message, the method may further include the following steps:

if the service processing operation performed on the current message to be processed is determined to be completed, acquiring a next message from the message queue, taking the next message as a new message to be processed, and performing the operation of determining the service processing module and performing corresponding service processing according to the determined service processing module on the new message to be processed.

Further, after determining that the service processing operation performed on the current packet to be processed is completed, the method may further include:

and if the current message to be processed is determined to be a non-pseudo message, sending the current message to be processed to corresponding message receiving equipment.

The embodiment of the invention provides a message processing method, which is characterized in that event messages generated in the message service processing process are assembled into pseudo messages with the same message format as the messages, and the pseudo messages are inserted into corresponding positions of a message queue where the messages are located according to the types of the event messages, so that the unified management of the messages and the event messages is realized, the processing logic of the messages and the event messages is simplified, and the purposes of improving the processing efficiency and the processing flexibility of the messages and the event messages and further improving the system performance are achieved; meanwhile, for any message in the message queue, corresponding service processing can be performed on the message according to a service processing module chain configured in advance, wherein each service module in the service processing module chain can be realized by simply adding and deleting, so that the processing logic of the message and the event message is further simplified, and the processing efficiency and the processing flexibility of the message and the event message are improved.

Example two:

as shown in fig. 5, which is a schematic structural diagram of the message processing device according to the second embodiment of the present invention, the message processing device may be various independent network devices that need to execute multiple functional services, such as a service gateway, a router, and a network security device, or an integrated device disposed in each of the independent network devices, which is not limited in this embodiment of the present invention.

Specifically, the message processing device may include a message obtaining unit 11, a module determining unit 12, and a message processing unit 13, where:

the message acquiring unit 11 may be configured to acquire a current message to be processed from a message queue including at least one message.

Specifically, the message obtaining unit 11 may be configured to, when receiving a message from a message sending device, determine a message flow to which each message belongs according to parameter information such as a source IP address, a destination IP address, a source port, a destination port, and a transmission protocol of the message, sequentially cache, in the same message queue, each message belonging to the same message flow according to a sequence of the received messages and information such as timestamps and fragments carried in each message, and, for any message queue including at least one message, sequentially obtain, as a current message to be processed, each message from the message queue according to the sequence of each message in the message queue.

The module determining unit 12 may be configured to determine at least one service processing module required for performing service processing on the current packet to be processed acquired by the packet acquiring unit 11, and a service execution sequence between the at least one service processing module.

Specifically, the module determining unit 12 is specifically configured to determine, according to a pre-configured correspondence between a service processing module and a message running condition, at least one service processing module corresponding to the running condition of the current message to be processed, and determine, according to an execution sequence of the at least one service processing module under the running condition of the current message to be processed, a service execution sequence between the at least one service processing module; or,

the method and the device can be specifically used for determining at least one service processing module corresponding to the running scene of the current message to be processed according to the corresponding relation between the service processing module and the message running scene configured in advance, and determining the service execution sequence among the at least one service processing module according to the execution sequence of the at least one service processing module in the running scene of the current message to be processed.

The message processing unit 13 may be configured to perform service processing on the current packet to be processed according to the service execution order between the at least one service processing module and the at least one service processing module determined by the module determining unit 12, assemble an event message generated in a service processing process into a pseudo packet having the same packet format as the current packet to be processed, and insert the pseudo packet into a corresponding position of the packet queue according to the type of the event message.

Specifically, the message processing unit 13 may be configured to sequentially schedule each service processing module according to a service execution sequence between the at least one service processing module, and perform corresponding service processing on the current message to be processed according to the scheduled service processing module.

Further, in the embodiment of the present invention, the event message generated in the process of performing service processing on the current packet to be processed may include one or more of a link establishment event message, a link establishment completion event message, a link disconnection event message, a request end event message, or a transaction end event message, which is not limited in this embodiment of the present invention.

Specifically, when the current packet to be processed is subjected to service processing, if it is detected that the current packet to be processed is a packet carrying a SYN identifier, a corresponding link establishment event message is generated to establish a new connection; further, taking the TCP/IP protocol as an example, when it is determined that the three-way handshake is successful, a corresponding link establishment completion event message is generated to indicate that the connection establishment is completed; furthermore, when the FIN message or the RST message is detected, it indicates that the current connection is finished and the related resources can be released, and at this time, a corresponding chain scission event message can be generated; further, when a Request End message, such as a message carrying a Request End identifier, is detected, a corresponding Request End event message may be generated, so as to End the event message corresponding to the Request End message; when the message carrying the Transaction End identifier is detected, a corresponding Transaction End event message can be generated to inform the network device that the corresponding event message is processed.

Further, when the determined at least one service processing module required for performing service processing on the current packet to be processed further includes a special service processing module customized by the user, the event message may further include a special event message generated by the special service processing module, which is not limited in this embodiment of the present invention. It should be noted that, in the process of performing service processing on the to-be-processed packet, no event message may be generated, and this is not limited in this embodiment of the present invention.

Further, when the event message generated during the service processing of the current packet to be processed includes a link establishment event message, a link establishment completion event message, a link disconnection event message, a request end event message, or an event end event message, the packet processing unit 13 may be specifically configured to assemble the event message into a pseudo packet having the same packet format as the current packet to be processed in the following manner, and insert the pseudo packet into a corresponding position of the packet queue according to the type of the event message:

when the event message is a link establishment completion event message, the message processing unit 13 is specifically configured to assemble the event message into a pseudo message that has the same message format as the current message to be processed and includes a link establishment completion event message flag, and insert the pseudo message into a header position of the message queue;

when the event message is a link establishment event message, a request end event message or a transaction end event message, the message processing unit 13 is specifically configured to perform a link establishment event message marking, a request end event message marking or an transaction end event message marking on the current message to be processed, to obtain a pseudo message which has the same message format as the current message to be processed and respectively comprises a corresponding link establishment event message mark, a request ending event message mark or an affair ending event message mark, and inserts the pseudo message into the position of the current message to be processed in the message queue, the pseudo message assembly and pseudo message insertion processing of the event message can be realized by respectively carrying out link establishment event message marking, request end event message marking or transaction end event message marking on the current message to be processed;

when the event message is a link-breaking event message, the message processing unit 13 may be specifically configured to assemble the event message into a pseudo message that has the same message format as the current message to be processed and includes a link-breaking event message flag, and insert the pseudo message into a tail position of the message queue.

Further, in the embodiment of the present invention, the packet obtaining unit 11 may be further configured to, after inserting the dummy packet into the corresponding position of the packet queue according to the type of the event message, if it is determined that the service processing operation performed on the current packet to be processed is completed, obtain a next packet from the packet queue, use the next packet as a new current packet to be processed, and sequentially trigger the module determining unit 12 and the packet processing unit 13 to perform the operation of determining the service processing module on the new current packet to be processed and perform the corresponding service processing operation according to the determined service processing module.

Further, the message processing unit 13 may be further configured to, after it is determined that the service processing operation performed on the current to-be-processed message is completed, discard the current to-be-processed message if it is determined that the current to-be-processed message is a dummy message, and send the current to-be-processed message to a corresponding message receiving device if it is determined that the current to-be-processed message is a non-dummy message.

It should be noted that, in the embodiment of the present invention, the message processing apparatus may further include a module configuration unit 14, where:

the module configuration unit 14 may be configured to configure service processing modules that need to be executed under corresponding conditions (and/or scenes) in advance according to different message running conditions (and/or message running scenes), that is, to configure a corresponding relationship between a service processing module and a message running condition (and/or running scene) in advance, so that the module determination unit 12 executes a determination operation of a corresponding service processing module according to the corresponding relationship between the service processing module and a message running condition (and/or running scene) that are configured in advance.

In this case, a message operation scenario is taken as an example, and the scenario may be subdivided into a message entry, a message exit, L7 layer processing, and the like. It should be noted that, the module configuration unit 14 may also adjust and set a corresponding relationship between the service processing module configured in advance and the message operation condition (and/or operation scenario) in real time according to an actual situation, so as to adapt to the service processing process of the message more flexibly, which is not limited in this embodiment of the present invention.

It should be noted that, in the embodiment of the present invention, each message in any message queue may generally have a uniform message format as shown in fig. 4. The unified message format may include a message data field for indicating specific data content of a message, a message data length field for indicating a message data length, a message type field for indicating a specific type of a message, a public data field, and the like, which is not limited in this embodiment of the present invention. Further, the common data field may include flow table information used for representing a message operation condition and/or an operation scenario, an initial packet flag when the message is an initial packet, and event message flag information when the message is an event message generated in a message service processing process, which is not limited in this embodiment of the present invention.

The second embodiment of the invention provides message processing equipment, which is used for realizing the unified management of messages and event messages by assembling event messages generated in the message service processing process into pseudo messages with the same message format as the messages and inserting the pseudo messages into corresponding positions of a message queue where the messages are located according to the types of the event messages, thereby simplifying the processing logic of the messages and the event messages, and achieving the purposes of improving the processing efficiency and the processing flexibility of the messages and the event messages and further improving the system performance; meanwhile, for any message in the message queue, corresponding service processing can be performed on the message according to a service processing module chain configured in advance, wherein each service module in the service processing module chain can be realized by simply adding and deleting, so that the processing logic of the message and the event message is further simplified, and the processing efficiency and the processing flexibility of the message and the event message are improved.

Example three:

a third embodiment of the present invention provides a message processing apparatus for implementing the method according to the first embodiment of the present invention, as shown in fig. 6, which is a schematic structural diagram of the message processing apparatus according to the third embodiment of the present invention, and for convenience of description, only parts related to the third embodiment of the present invention are shown, and details of the specific technology are not disclosed, please refer to each embodiment of the present invention shown in fig. 1 or fig. 3.

Specifically, the message processing device may generally be various independent network devices that need to execute multiple functional services, such as a service gateway, a router, and a network security device, or an integrated device disposed in each of the independent network devices, which is not limited in this embodiment of the present invention. Specifically, in the third embodiment of the present invention, the message processing device is taken as an example for explanation, and fig. 6 is a block diagram illustrating a partial structure of a router 20 related to the third embodiment of the present invention.

As shown in fig. 6, the router 20 may include: memory 21, and processor 22. Those skilled in the art will appreciate that the structure of the router 20 shown in fig. 6 does not constitute a limitation of a router, and may include more or less components than those shown, or some components may be combined, or a different arrangement of components, and embodiments of the present invention are not limited in this respect.

The following describes each component of the router 20 in detail with reference to fig. 6:

the memory 21 may be used to store each message received. Specifically, the memory 21 may be configured to determine, when receiving a message from a message sending device, a message flow to which each message belongs according to parameter information such as a source IP address, a destination IP address, a source port, a destination port, and a transmission protocol of the message, and sequentially buffer, in the same message queue, each message belonging to the same message flow according to a sequence of the received messages and information such as a timestamp and a fragment carried in each message, that is, the memory 21 may be specifically configured to store each received message in a message queue.

It should be noted that the memory 21 may be a storage device in the form of a cache (cache) or a ROM (read only memory), and the embodiment of the present invention is not limited in this respect.

The processor 22 is configured to obtain a current packet to be processed from a packet queue including at least one packet stored in the memory 21, and determine at least one service processing module required for performing service processing on the current packet to be processed and a service execution sequence between the at least one service processing module; and performing service processing on the current message to be processed according to the service execution sequence of the at least one service processing module and the at least one service processing module, assembling event messages generated in the service processing process into pseudo messages with the same message format as the current message to be processed, and inserting the pseudo messages into corresponding positions of the message queue according to the type of the event messages.

Specifically, the processor 22 may be specifically configured to determine, according to a pre-configured correspondence between service processing modules and message operating conditions, at least one service processing module corresponding to the operating conditions of the current message to be processed, and determine, according to an execution sequence of the at least one service processing module under the operating conditions of the current message to be processed, a service execution sequence between the at least one service processing module; or,

the method and the device can be specifically used for determining at least one service processing module corresponding to the running scene of the current message to be processed according to the corresponding relation between the service processing module and the message running scene configured in advance, and determining the service execution sequence of the at least one service processing module according to the execution sequence of the at least one service processing module in the running scene of the current message to be processed.

In addition, in the embodiment of the present invention, for any packet, because a set order exists between at least one determined service processing module required for performing service processing on the packet, the at least one determined service processing module required for performing service processing on the packet may be referred to as a service processing module chain, and correspondingly, for any two packets in the same packet queue, the service processing module chains respectively matched with the any two packets determined by the processor 22 may be the same as or different from each other.

Further, after determining at least one service processing module required for performing service processing on the current packet to be processed and a service execution sequence between the at least one service processing module, the processor 22 may be specifically configured to sequentially schedule the service processing modules according to the service execution sequence between the at least one service processing module, and perform corresponding service processing on the current packet to be processed according to the scheduled service processing module.

Further, when the service processing is performed on the current packet to be processed according to the service execution sequence between the at least one service processing module and the at least one service processing module, and an event message is generated in the service processing process, such as a link establishment event message, a link establishment completion event message, a link disconnection event message, a request completion event message, or an event completion event message, the processor 22 is specifically configured to, when the event message is the link establishment completion event message, assemble the event message into a pseudo packet having the same packet format as the current packet to be processed and including a link establishment completion event message mark, and insert the pseudo packet into the header position of the packet queue; or, in particular, when the event message is a link establishment event message, a request end event message or a transaction end event message, respectively making a link establishment event message mark, a request end event message mark or an affair end event message mark on the current message to be processed, to obtain a pseudo message which has the same message format as the current message to be processed and respectively comprises a corresponding link establishment event message mark, a request ending event message mark or an affair ending event message mark, and inserts the pseudo message into the position of the current message to be processed in the message queue, the pseudo message assembly and pseudo message insertion processing of the event message can be realized by respectively carrying out link establishment event message marking, request end event message marking or transaction end event message marking on the current message to be processed; or, the method and the device are specifically configured to, when the event message is a broken link event message, assemble the event message into a pseudo message which has the same message format as the current message to be processed and includes a broken link event message flag, and insert the pseudo message into a tail position of the message queue.

Further, in the embodiment of the present invention, the processor 22 may be further configured to, after inserting the pseudo packet into the corresponding position of the packet queue according to the type of the event message, if it is determined that the service processing operation performed on the current packet to be processed is completed, obtain a next packet from the packet queue corresponding to the current packet to be processed, use the next packet as a new current packet to be processed, and trigger the processor 22 to perform the operation of determining the service processing module on the new current packet to be processed and performing corresponding service processing according to the determined service processing module.

Further, in the embodiment of the present invention, the processor 22 may be further configured to, after it is determined that the service processing operation performed on the current packet to be processed is completed, discard the current packet to be processed if it is determined that the current packet to be processed is a dummy packet, and send the current packet to be processed to a corresponding packet receiving device if it is determined that the current packet to be processed is a non-dummy packet.

It should be noted that, in the embodiment of the present invention, the processor 22 may be further configured to configure, in advance, the service processing module that needs to be executed under the corresponding condition (and/or scene) according to different message running conditions (and/or message running scenes), that is, to configure, in advance, the corresponding relationship between the service processing module and the message running condition (and/or running scene), so as to execute, in the following, the determination operation of the corresponding service processing module according to the corresponding relationship between the service processing module and the message running condition (and/or running scene) that are configured in advance.

In this case, a message operation scenario is taken as an example, and the scenario may be subdivided into a message entry, a message exit, L7 layer processing, and the like. It should be noted that, the processor 22 may also adjust and set the corresponding relationship between the preconfigured service processing module and the message operation condition (and/or operation scenario) in real time according to the actual situation, so as to adapt to the service processing process of the message more flexibly, which is not limited in this embodiment of the present invention.

It should be noted that, in the embodiment of the present invention, each message to be processed in any message queue may generally have a uniform message format as shown in fig. 4. The unified message format may include a message data field for indicating specific data content of a message, a message data length field for indicating a message data length, a message type field for indicating a specific type of a message, a public data field, and the like, which is not limited in this embodiment of the present invention. Further, the common data field may include flow table information used for representing a message operation condition and/or an operation scenario, an initial packet flag when the message is an initial packet, and event message flag information when the message is an event message generated in a message service processing process, which is not limited in this embodiment of the present invention.

The third embodiment of the present invention provides a message processing device, which implements unified management of a message and an event message by assembling an event message generated in a message service processing process into a pseudo message having the same message format as the message, and inserting the pseudo message into a corresponding position of a message queue where the message is located according to the type of the event message, thereby simplifying processing logic of the message and the event message, and achieving the purpose of improving processing efficiency and processing flexibility of the message and the event message and further improving system performance; meanwhile, for any message in the message queue, corresponding service processing can be performed on the message according to a service processing module chain configured in advance, wherein each service module in the service processing module chain can be realized by simply adding and deleting, so that the processing logic of the message and the event message is further simplified, and the processing efficiency and the processing flexibility of the message and the event message are improved.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus (device), or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (devices) and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

While preferred embodiments of the present invention have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all such alterations and modifications as fall within the scope of the invention.

It will be apparent to those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims

1. A message processing method is characterized by comprising the following steps:

2. The message processing method according to claim 1, wherein determining at least one service processing module required for performing service processing on the current message to be processed and a service execution sequence between the at least one service processing module comprises:

3. The message processing method according to claim 1, wherein after determining that the service processing operation performed on the current message to be processed has been performed, the method further comprises:

4. The message processing method according to any one of claims 1 to 3, wherein performing service processing on the current message to be processed according to the at least one service processing module and a service execution order between the at least one service processing module, comprises:

5. The message processing method according to any of claims 1 to 3, wherein the event message comprises one or more of a link establishment event message, a link establishment completion event message, a link disconnection event message, a request end event message, and a transaction end event message;

6. A message processing apparatus, comprising:

7. The message processing device of claim 6,

the module determining unit is specifically configured to determine at least one service processing module corresponding to the running condition or running scene of the current message to be processed according to a pre-configured corresponding relationship between the service processing module and the message running condition or a pre-configured corresponding relationship between the service processing module and the message running scene, and determine a service execution order between the at least one service processing module according to an execution order of the at least one service processing module under the running condition or running scene of the current message to be processed.

8. The message processing device of claim 6,

the message processing unit is further configured to, after it is determined that the service processing operation performed on the current message to be processed is completed, discard the current message to be processed if it is determined that the current message to be processed is a pseudo message, and send the current message to be processed to a corresponding message receiving device if it is determined that the current message to be processed is a non-pseudo message.

9. The message processing apparatus according to any of claims 6 to 8,

the message processing unit is specifically configured to sequentially schedule each service processing module according to a service execution sequence among the at least one service processing module, and perform corresponding service processing on the current message to be processed according to the scheduled service processing module.

10. The message processing device according to any of claims 6 to 8, wherein the event message comprises one or more of a link establishment event message, a link establishment completion event message, a link down event message, a request end event message, and a transaction end event message;