CN104618329B - Data processing method and device - Google Patents
Data processing method and device Download PDFInfo
- Publication number
- CN104618329B CN104618329B CN201410835046.5A CN201410835046A CN104618329B CN 104618329 B CN104618329 B CN 104618329B CN 201410835046 A CN201410835046 A CN 201410835046A CN 104618329 B CN104618329 B CN 104618329B
- Authority
- CN
- China
- Prior art keywords
- acl
- master control
- control borad
- information
- local
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention discloses a kind of data processing method, which includes:Master control borad receives the solicited message that client is sent；Master control borad obtains processing information according to solicited message, and processing information includes at least one of：User information, five-tuple information, hash values；Master control borad is sent to business board or client by information is handled.The present invention receives the solicited message of client transmission by master control borad, then master control borad obtains processing information according to solicited message, processing information will at least include user information, five-tuple information, one in hash values, subsequent master control borad is sent to business board or client by information is handled, so as to by it is unrelated with data processing in business board or association it is smaller and expend computing resource work split, master control borad is allowed to do a few thing, so as to effectively save the resource of business board, make full use of master control borad resource, so that business board processing data capability improves a lot.
Description
Technical field
The present invention relates to data processing field, it particularly relates to a kind of data processing method and device.
Background technology
Existing network environment is increasingly complicated, and the network equipment with a small amount of ACL gradually can not meet network practical application
In demand.So the demand of the network equipment of magnanimity ACL is supported to start gradually to highlight, and at this point for the pipe of magnanimity rule list
Reason becomes challenge, because needing to store the important letters such as the other information of five-tuple information, the ID of rule, rule in rule list
Breath.
At present, the system that industry usually uses mostly is made of the part such as master control, exchange and business processing.Wherein business
It is treated as the key modules of data processing module in actual progress, and ACL matchings are that Data processing is mostly important and most
Based on work.However ACL table is all stored on business board substantially, business board need again it is open interacted with client connect
Mouthful, and then need to safeguard the information such as the connection of client, but for the high-speed requests of client, the response speed of business board may
Being received data traffic size be subject to it is influenced.Increase, deletion and the inquiry operation of ACL table are also what business board carried out simultaneously,
The operations such as hash values are wherein calculated, table look-up to be required for transferring resource from business board to carry out, and then the data of influence business board
Processing capacity.
In data channel level, Service Processing Module needs to extract the five-tuple information in input flow rate, then
The information of extraction is judged whether to hit by searching for local ACL table, the behaviour of next step is finally carried out according to hit results
Make.And from management passage level, business board also needs to safeguard the ACL of magnanimity.Although it may desire to by making
Work efficiency is improved with Hash, but for operations such as the increase, deletion and search operation of a large amount of ACL, the maintenances of hash tables, all
It needs to expend the substantial amounts of resource of business board.
The problem of in correlation technique, currently no effective solution has been proposed.
The content of the invention
The problem of in correlation technique, the present invention propose a kind of data processing method and device, can will be in business board
It is unrelated with data processing or association it is smaller and expend computing resource work split, allow master control to do a few thing, subtract
The processing pressure of small business board makes its data-handling capacity improve a lot.
The technical proposal of the invention is realized in this way：
A kind of data processing method is provided according to an aspect of the present invention, and this method includes：
Master control borad receives the solicited message that client is sent；
Master control borad obtains processing information according to solicited message, and processing information includes at least one of：User information, five yuan
Group information, hash values；
Master control borad is sent to business board or client by information is handled.
In addition, in the case that solicited message is increases the increase of access control list ACL request, master control borad is believed according to request
Breath, which obtains processing information, to be included：
Master control borad parsing increases request, and five-tuple information, the user information of obtained ACL are stored in the local of master control borad
In memory space；
Master control borad calculates the hash values of ACL according to the five-tuple information of ACL.
Meanwhile this method further comprises：
In the case of in hash tables of the ACL in master control borad local there is no conflict, ACL is stored in master control borad local
In hash tables；
When being deposited in hash tables of the ACL in master control borad local in the case of a conflict, conflict chain is traveled through, and records ACL and is rushing
Location information in prominent chain, will be in the rule list of ACL insertion master control borads local.
Wherein, this method further comprises：
In the case of in hash tables of the ACL in master control borad local there is no conflict, by the hash values of ACL, five yuan of ACL
Group information is sent to business board；
When being deposited in hash tables of the ACL in master control borad local in the case of a conflict, by the hash values of ACL, the five-tuple of ACL
The location information of information, ACL in the conflict chain is sent to business board.
In addition, in the case that solicited message is the inquiry request of queried access control table ACL, obtained according to solicited message
Processing information can include：
Master control borad is according to the five-tuple information of inquiry request traversal rule table search ACL；
Location informations of the ACL in the hash tables of master control borad local is obtained according to the five-tuple information of ACL, and calculates ACL
Hash values；
Hit situation of the hash values of ACL in business board with the hash value rules of correspondence of ACL is inquired about, obtains hit letter
Breath.
Meanwhile in the case that solicited message is the inquiry request of queried access control table ACL, master control borad, which will be hit, to be believed
Breath, user information, five-tuple information, the ageing time of ACL are sent to client.
According to another aspect of the present invention, a kind of data processing equipment is provided, which includes：
Receiving module receives the solicited message of client transmission for master control borad；
Acquisition module obtains processing information for master control borad according to solicited message, and processing information includes at least one of：
User information, five-tuple information, hash values；
Sending module is sent to business board or client for master control borad by information is handled.
In addition, acquisition module can further include：
Storage unit, in the case of working as solicited message to increase the increase of access control list ACL request, master control borad solution
Analysis increases request, and five-tuple information, the user information of obtained ACL are stored in the local storage space of master control borad；
Computing unit, in the case of working as solicited message to increase the increase of access control list ACL request, master control borad root
The hash values of ACL are calculated according to the five-tuple information of ACL.
Meanwhile deposited in the case of a conflict when in hash tables of the ACL in master control borad local, which can also include：
Logging modle for traveling through the chain that conflicts, and records location informations of the ACL in the chain that conflicts, ACL is inserted into master control borad
In local rule list；
Storage unit can be further used for, and ACL is stored in the hash tables of master control borad local.
Wherein, in the case that solicited message is the inquiry request of queried access control table ACL, which can also wrap
It includes：
Searching module, for master control borad according to the five-tuple information of inquiry request traversal rule table search ACL；
Enquiry module, for inquiring about hit feelings of the hash values of ACL with the hash value rules of correspondence of ACL in business board
Condition obtains hit information；
Acquisition module can also be further used for, and hashs of the ACL in master control borad local is obtained according to the five-tuple information of ACL
Location information in table, and calculate the hash values of ACL.
The present invention receives the solicited message of client transmission by master control borad, and then master control borad obtains everywhere according to solicited message
Information is managed, processing information will at least include one in user information, five-tuple information, hash values, and subsequent master control borad will be handled
Information is sent to business board or client, so as to by it is unrelated with data processing in business board or association it is smaller and expend calculate money
The work in source is split, and is allowed master control borad to do a few thing, so as to effectively save the resource of business board, is made full use of master
Control plate resource so that business board processing data capability improves a lot.
Description of the drawings
It in order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to institute in embodiment
Attached drawing to be used is needed to be briefly described, it should be apparent that, the accompanying drawings in the following description is only some implementations of the present invention
Example, for those of ordinary skill in the art, without creative efforts, can also obtain according to these attached drawings
Obtain other attached drawings.
Fig. 1 is the flow chart of data processing method according to embodiments of the present invention；
Fig. 2 is the schematic flow chart for increasing ACL in data processing method according to embodiments of the present invention；
Fig. 3 is the schematic flow chart that ACL is inquired about in data processing method according to embodiments of the present invention；
Fig. 4 is the block diagram of data processing equipment according to embodiments of the present invention.
Specific embodiment
Below in conjunction with the attached drawing in the embodiment of the present invention, the technical solution in the embodiment of the present invention is carried out clear, complete
Site preparation describes, it is clear that described embodiment is only part of the embodiment of the present invention, instead of all the embodiments.It is based on
Embodiment in the present invention, those of ordinary skill in the art's all other embodiments obtained belong to what the present invention protected
Scope.
According to an embodiment of the invention, a kind of data processing method is provided.
As shown in Figure 1, data processing method according to embodiments of the present invention, including：
Step S101, master control borad receive the solicited message that client is sent；
Step S103, master control borad obtain processing information according to solicited message, and processing information includes at least one of：User
Information, five-tuple information, hash values；
Step S105, master control borad are sent to business board or client by information is handled.
A process is created first on master control borad, which is mainly responsible for monitoring local port, and receives from client
The command request at end；Order for each client creates corresponding processing thread on master control borad.
With reference to Fig. 2, wherein Fig. 2 is the flow diagram for increasing ACL in data processing method, as can be seen from Figure 2 this
Outside, in the case that solicited message is increases the increase of access control list ACL request, master control borad is handled according to solicited message
Information includes：Master control borad parsing increases request, and five-tuple information, the user information of obtained ACL are stored in the sheet of master control borad
In ground memory space, while master control borad calculates the hash values of ACL according to the five-tuple information of ACL.Wherein, when ACL is in master control borad
In the case of conflict is not present in local hash tables, ACL is stored in the hash tables of master control borad local；When ACL is in master control
It is deposited in the case of a conflict in the hash tables of plate local, then travels through conflict chain, and record location informations of the ACL in the chain that conflicts,
It will be in the rule list of ACL insertion master control borads local.Wherein, when the feelings that conflict is not present in hash tables of the ACL in master control borad local
Under condition, the hash values of ACL, the five-tuple information of ACL are sent to business board；It is deposited when in hash tables of the ACL in master control borad local
In the case of a conflict, the location information of the hash values of ACL, the five-tuple information of ACL, ACL in the conflict chain is sent
To business board.After business board receives these information, directly ACL is stored in business board hash tables according to the information received.
With continued reference to Fig. 3, Fig. 3 is the flow chart that ACL is inquired about in data processing method, from figure 3, it can be seen that when request
In the case that information is the inquiry request of queried access control table ACL, obtaining processing information according to solicited message includes：Master control borad
According to the five-tuple information of inquiry request traversal rule table search ACL；ACL is obtained in master control borad according to the five-tuple information of ACL
Location information in local hash tables, and calculate the hash values of ACL；The hash values of inquiry ACL are in business board with ACL's
The hit situation of the hash value rules of correspondence obtains hit information.Master control borad believes the five-tuple of hit information, user information, ACL
Breath, ageing time are sent to client, complete this time to apply.
In addition, according to an embodiment of the invention, additionally provide a kind of data processing equipment.
As shown in figure 4, the data processing equipment includes：
Receiving module 41 receives the solicited message of client transmission for master control borad；
Acquisition module 42 obtains processing information for master control borad according to solicited message, and processing information should at least include following
One of information：User information, five-tuple information, hash values；
Sending module 43 is sent to business board or client for master control borad by information is handled.
In addition, acquisition module 42 may further include：
Storage unit (not shown), in the case of working as solicited message to increase the increase of access control list ACL request,
Master control borad parsing increases request, and five-tuple information, the user information of obtained ACL are stored in the local storage space of master control borad
In；
Computing unit (not shown), in the case of working as solicited message to increase the increase of access control list ACL request,
Master control borad calculates the hash values of ACL according to the five-tuple information of ACL.
Meanwhile deposited in the case of a conflict when in hash tables of the ACL in master control borad local, which can also include：
Logging modle (not shown) for traveling through the chain that conflicts, and records location informations of the ACL in the chain that conflicts, ACL is inserted
In the rule list for entering master control borad local；
Storage unit can be further used for, and ACL is stored in the hash tables of master control borad local.
Wherein, in the case that solicited message is the inquiry request of queried access control table ACL, which should also include：
Searching module (not shown), for master control borad according to the five-tuple information of inquiry request traversal rule table search ACL；
Enquiry module (not shown), for inquire about the hash values of ACL in business board with the hash value rules of correspondence of ACL
Hit situation obtains hit information；
Acquisition module 42 can also be further used for, and ACL is obtained in master control borad local according to the five-tuple information of ACL
Location information in hash tables, and calculate the hash values of ACL.
In conclusion by means of the above-mentioned technical proposal of the present invention, the request that client transmission is received by master control borad is believed
Breath, then master control borad according to solicited message obtain processing information, processing information at least will include user information, five-tuple information,
One in hash values, subsequent master control borad by handle information be sent to business board or client, so as to by business board with data
Handle it is unrelated or association it is smaller and expend computing resource work split, allow master control borad to do a few thing, so as to
Effectively to save the resource of business board, master control borad resource is made full use of so that business board processing data capability improves a lot.
The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the invention, all essences in the present invention
With within principle, any modifications, equivalent replacements and improvements are made should all be included in the protection scope of the present invention god.
Claims (6)
1. a kind of data processing method, which is characterized in that including：
Master control borad receives the solicited message that client is sent；
The master control borad obtains processing information according to the solicited message, and the processing information includes at least one of：
User information, five-tuple information, hash values；
The processing information is sent to business board or the client by the master control borad；
Wherein, in the case that the solicited message is increases the increase of access control list ACL request, the master control borad is according to institute
State solicited message obtain processing information include：
The master control borad parsing is described to increase request, and the five-tuple information of the obtained ACL, the user information are stored in
In the local storage space of the master control borad；
The master control borad calculates the hash values of the ACL according to the five-tuple information of the ACL；
In the case that the solicited message is the inquiry request of queried access control table ACL, the master control borad is asked according to described
Information is asked, which to obtain processing information, to be included：
The five-tuple information of master control borad ACL according to the inquiry request traversal rule table search；
Location informations of the ACL in the hash tables of master control borad local is obtained according to the five-tuple information of the ACL, and
Calculate the hash values of the ACL；
Hit situation of the hash values of the ACL in the business board with the hash value rules of correspondence of the ACL is inquired about, is obtained
Hit information.
2. according to the method described in claim 1, it is characterized in that, further comprise：
In the case of in hash tables of the ACL in master control borad local there is no conflict, the ACL is stored in described
In the hash tables of master control borad local；
When being deposited in hash tables of the ACL in master control borad local in the case of a conflict, conflict chain is traveled through, and described in record
Location informations of the ACL in the conflict chain, the ACL is inserted into the rule list of the master control borad local.
3. according to the method described in claim 2, it is characterized in that, further comprise：
When in hash tables of the ACL in master control borad local there is no conflict in the case of, by the hash values of the ACL,
The five-tuple information of the ACL is sent to the business board；
When being deposited in hash tables of the ACL in master control borad local in the case of a conflict, by the hash values of the ACL, institute
It states the location information of the five-tuple information, the ACL of ACL in the conflict chain and is sent to the business board.
4. according to the method described in claim 1, it is characterized in that, when the solicited message is queried access control table ACL's
In the case of inquiry request, when the master control borad is by the hit information, user information, the five-tuple information of the ACL, aging
Between be sent to the client.
5. a kind of data processing equipment, which is characterized in that including：
Receiving module receives the solicited message of client transmission for master control borad；
Acquisition module obtains processing information for the master control borad according to the solicited message, and the processing information includes following
At least one：
User information, five-tuple information, hash values；
The processing information is sent to business board or the client by sending module for the master control borad；
Wherein, storage unit, in the case of working as the solicited message to increase the increase of access control list ACL request, institute
It states described increase of master control borad parsing to ask, the five-tuple information of the obtained ACL, the user information is stored in the master
In the local storage space for controlling plate；
Computing unit, in the case of working as the solicited message to increase the increase of access control list ACL request, the master control
Plate calculates the hash values of the ACL according to the five-tuple information of the ACL；
Searching module, for the five-tuple information of master control borad ACL according to the inquiry request traversal rule table search；
Enquiry module, for inquire about the hash values of the ACL in the business board with the hash value rules of correspondence of the ACL
Hit situation obtains hit information；
The acquisition module is further used for, and it is local in the master control borad to obtain the ACL according to the five-tuple information of the ACL
Hash tables in location information, and calculate the hash values of the ACL.
6. device according to claim 5, which is characterized in that when in hash tables of the ACL in master control borad local
It deposits in the case of a conflict, described device includes：
Logging modle for traveling through the chain that conflicts, and records location informations of the ACL in the conflict chain, the ACL is inserted
In the rule list for entering the master control borad local；
The storage unit is further used for, and the ACL is stored in the hash tables of the master control borad local.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410835046.5A CN104618329B (en) | 2014-12-26 | 2014-12-26 | Data processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410835046.5A CN104618329B (en) | 2014-12-26 | 2014-12-26 | Data processing method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104618329A CN104618329A (en) | 2015-05-13 |
| CN104618329B true CN104618329B (en) | 2018-06-05 |
Family
ID=53152605
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410835046.5A Active CN104618329B (en) | 2014-12-26 | 2014-12-26 | Data processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104618329B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107172665A (en) * | 2016-03-08 | 2017-09-15 | 上海大唐移动通信设备有限公司 | A kind of data processing method, apparatus and system |
| JP7282892B2 (en) * | 2019-07-23 | 2023-05-29 | 株式会社ソニー・インタラクティブエンタテインメント | Digest value calculation device, access device, digest value calculation method, access method and program |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101345689A (en) * | 2008-09-10 | 2009-01-14 | 华为技术有限公司 | Method, apparatus and communication equipment for implementing IP safety service |
| CN101350759A (en) * | 2008-08-18 | 2009-01-21 | 华为技术有限公司 | Method for processing packet, service plate, interface plate and network communication equipment |
| CN102164084A (en) * | 2011-04-21 | 2011-08-24 | 杭州华三通信技术有限公司 | Multicast message forwarding method and equipment thereof |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101267399B (en) * | 2008-04-24 | 2010-10-27 | 杭州华三通信技术有限公司 | Packet forward method, device and its uplink interface board |
| CN102902654B (en) * | 2012-09-03 | 2015-08-26 | 东软集团股份有限公司 | Data linkage method and device between heterogeneous platform |
| KR101467942B1 (en) * | 2013-04-24 | 2014-12-02 | 주식회사 윈스 | Fast Application Recognition System and Processing Method Therof |
-
2014
- 2014-12-26 CN CN201410835046.5A patent/CN104618329B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101350759A (en) * | 2008-08-18 | 2009-01-21 | 华为技术有限公司 | Method for processing packet, service plate, interface plate and network communication equipment |
| CN101345689A (en) * | 2008-09-10 | 2009-01-14 | 华为技术有限公司 | Method, apparatus and communication equipment for implementing IP safety service |
| CN102164084A (en) * | 2011-04-21 | 2011-08-24 | 杭州华三通信技术有限公司 | Multicast message forwarding method and equipment thereof |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104618329A (en) | 2015-05-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103905508B (en) | Cloud platform application dispositions method and device | |
| CN103312836B (en) | A kind of large-scale local network ip address management method | |
| CN105191232A (en) | Network element with distributed flow tables | |
| CN104954468A (en) | Resource allocation method and resource allocation device | |
| CN105379206B (en) | Message processing method, forwarding device and message handling system in network | |
| CN101552734B (en) | Non-automatic multi-outlet routing method | |
| EP2544403A4 (en) | Method and system for terminal access and management in cloud computing | |
| CN103366022B (en) | Information handling system and disposal route thereof | |
| CN105491078B (en) | Data processing method and device, SOA system in SOA system | |
| CN103227826A (en) | Method and device for transferring file | |
| CN104424240B (en) | Multilist correlating method, main service node, calculate node and system | |
| CN102394944B (en) | Method and equipment for correcting IP (Internet Protocol) address in Web access | |
| CN106897458A (en) | A kind of storage and search method towards electromechanical equipment data | |
| CN108804242A (en) | A kind of data counts De-weight method, system, server and storage medium | |
| CN101800690A (en) | Method and device for realizing source address conversion by using address pool | |
| CN108027794A (en) | The technology of automatic processor core associate management and communication is carried out for using immediate data to place in private cache | |
| BRPI0900399A2 (en) | method for managing requests to obtain peer identifiers to access content stored in p2p mode, and network equipment and associated management device | |
| CN104618329B (en) | Data processing method and device | |
| EP1909433A4 (en) | A method and system for realizing the access management of the network devices | |
| CN103778120A (en) | Global file identification generation method, generation device and corresponding distributed file system | |
| CN110855424B (en) | Method and device for synthesizing asymmetric flow xDR in DPI field | |
| CN109714208A (en) | A kind of equipment is included in method, storage medium and the electronic equipment of network management | |
| CN104424316A (en) | Data storage method, data searching method, related device and system | |
| CN104679905A (en) | High-speed storage system based on cloud storage | |
| CN101207518B (en) | Asynchronization maintenance system facing to distributed resource node |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20220727 Address after: 100089 building 36, courtyard 8, Dongbeiwang West Road, Haidian District, Beijing Patentee after: Dawning Information Industry (Beijing) Co.,Ltd. Patentee after: DAWNING INFORMATION INDUSTRY Co.,Ltd. Address before: 100193 No. 36 Building, No. 8 Hospital, Wangxi Road, Haidian District, Beijing Patentee before: Dawning Information Industry (Beijing) Co.,Ltd. |