CN111224882A - Message processing method and device and storage medium - Google Patents
Message processing method and device and storage medium Download PDFInfo
- Publication number
- CN111224882A CN111224882A CN201811410211.7A CN201811410211A CN111224882A CN 111224882 A CN111224882 A CN 111224882A CN 201811410211 A CN201811410211 A CN 201811410211A CN 111224882 A CN111224882 A CN 111224882A
- Authority
- CN
- China
- Prior art keywords
- multicast
- destination address
- forwarding
- data message
- discarding
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/40—Network security protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/16—Multipoint routing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/302—Route determination based on requested QoS
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/101—Access control lists [ACL]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/50—Queue scheduling
- H04L47/62—Queue scheduling characterised by scheduling criteria
- H04L47/6215—Individual queue per QOS, rate or priority
Abstract
The invention provides a message processing method and device and a storage medium. The message processing method comprises the following steps: receiving a multicast data message of a multicast group, and acquiring a destination address of the multicast data message; determining a discarding mechanism according to a specified rule according to the destination address; and discarding the received data message of the multicast group according to the discarding mechanism. The invention solves the technical problem that a large number of multicast groups simultaneously cause abnormal impact on the CPU in the related technology.
Description
Technical Field
The present invention relates to the field of communications, and in particular, to a method and an apparatus for processing a packet, and a storage medium.
Background
In the related art, an (S, G) entry is formed when the multicast source sends data, but before the multicast source data forms the (S, G) entry, the multicast data is processed by the device as an unknown multicast uplink CPU, and the purpose is to analyze the location of the multicast source through the data packet and form the (S, G) entry on the device.
However, once a large number of multicast groups are in the process of (S, G), a large number of unknown multicast messages may be formed to impact the CPU, and this may cause an excessive load on the CPU, and such an excessive load may cause the CPU to issue (S, G) for processing, resulting in a slow processing of issuing (S, G), and a slow processing of issuing (S, G) further results in a long time for the CPU to be impacted, so that a severe vicious circle may be formed on the device, and the device performance in the application of this scenario may be affected.
Fig. 1 is a schematic diagram of a multicast group forming process in the related art, and steps of a (S, G) processing process of multicast by devices in the related art are as follows:
1. and receiving a certain multicast data message, and not finding a multicast item in the hardware list of the equipment.
2. The multicast data message is sent to the CPU as an unknown multicast.
3. And the CPU performs reverse path check according to the entry information of the data message, and issues an item of (S, G) if the check is passed.
4. And subsequent multicast data messages of the same multicast group are searched for the item (S, G) in hardware and are forwarded according to the item (S, G).
Therefore, in the related technology, the time for an unknown multicast message to impact the CPU is completely determined by the processing time between the time when the CPU receives the multicast data message and the time when the multicast data message is issued to the (S, G) entry. If a large number of multicast groups need to form (S, G) entries at the same time, a large number of unknown multicast messages impact the CPU in a short time, and such impact further affects the speed of the CPU issuing the (S, G) entries, and also causes the impact time of the unknown multicast impacting the CPU to be prolonged, thereby forming a vicious circle affecting the performance of the device.
In view of the above problems in the related art, no effective solution has been found at present.
Disclosure of Invention
The embodiment of the invention provides a message processing method and device and a storage medium.
According to an embodiment of the present invention, a message processing method is provided, including: receiving a multicast data message of a multicast group, and acquiring a destination address of the multicast data message; determining a discarding mechanism according to a specified rule according to the destination address; and discarding the received data message of the multicast group according to the discarding mechanism.
According to another embodiment of the present invention, there is also provided a message processing apparatus including: the receiving module is used for receiving the multicast data message of the multicast group and acquiring the destination address of the multicast data message; the determining module is used for determining a discarding mechanism according to the destination address and a specified rule; and the discarding module is used for discarding the received data message of the multicast group according to the discarding mechanism.
According to a further embodiment of the present invention, there is also provided a storage medium having a computer program stored therein, wherein the computer program is arranged to perform the steps of any of the above method embodiments when executed.
According to the invention, the destination address of the multicast data message is obtained; determining a discarding mechanism according to an appointed rule according to the acquired destination address; the method and the device have the advantages that the received data messages of the multicast groups are discarded according to a discarding mechanism, abnormal impact of unknown multicast messages on a CPU (central processing unit) before a multicast forwarding table is generated is avoided, the technical problem that the CPU is abnormally impacted by a large number of multicast groups in the related technology is solved, the CPU resource can complete calculation of the multicast groups as soon as possible, the processing efficiency of the device in the scene is improved, and the reliability and the stability of the network device are greatly improved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:
fig. 1 is a schematic diagram illustrating a multicast group formation process in the related art of the present invention;
FIG. 2 is a network architecture diagram of an embodiment of the present invention;
FIG. 3 is a flow chart of a message processing method according to an embodiment of the invention;
fig. 4 is a block diagram of a structure of a message processing apparatus according to an embodiment of the present invention;
FIG. 5 is a diagram illustrating protection effects of unknown multicast on CPU impact according to an embodiment of the present invention;
FIG. 6 is a schematic diagram of the configuration and implementation steps according to an embodiment of the invention.
Detailed Description
The invention will be described in detail hereinafter with reference to the accompanying drawings in conjunction with embodiments. It should be noted that the embodiments and features of the embodiments in the present application may be combined with each other without conflict.
It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order.
Example 1
The embodiment of the present application can operate on the network architecture shown in fig. 2, where fig. 2 is a network architecture diagram of the embodiment of the present invention, and as shown in fig. 2, the network architecture includes: the network device receives the multicast data message sent by the multicast source, and then processes the multicast data message, wherein the multicast source can be a multicast group.
In this embodiment, a message processing method operating in the network architecture is provided, and fig. 3 is a flowchart of the message processing method according to the embodiment of the present invention, as shown in fig. 3, the flowchart includes the following steps:
step S302, receiving a multicast data message of a multicast group, and acquiring a destination address of the multicast data message;
step S304, determining a discarding mechanism according to the destination address and a specified rule;
step S306, according to the discarding mechanism, discarding the received data message of the multicast group.
Through the steps, the destination address of the multicast data message is obtained; determining a discarding mechanism according to an appointed rule according to the acquired destination address; the method and the device have the advantages that the received data messages of the multicast groups are discarded according to a discarding mechanism, abnormal impact of unknown multicast messages on a CPU (central processing unit) before a multicast forwarding table is generated is avoided, the technical problem that the CPU is abnormally impacted by a large number of multicast groups in the related technology is solved, the CPU resource can complete calculation of the multicast groups as soon as possible, the processing efficiency of the device in the scene is improved, and the reliability and the stability of the network device are greatly improved.
Alternatively, the main network device for performing the above steps may be a routing device, such as a switch, a router, etc., but is not limited thereto.
Optionally, there may be a plurality of implementations of the step S304, and in an optional example, there may be the following implementations.
First implementation
Generating a temporary multicast table according to the destination address; and setting the information of the forwarding outlet of the temporary multicast table to be null, wherein when the information of the forwarding outlet of the temporary multicast table is null, discarding the data message of the multicast group.
Second implementation
Generating a first Access Control List (ACL) entry according to the destination address; and setting the forwarding operation corresponding to the destination address in the first ACL entry to be discarded.
Third implementation
Generating a second ACL entry according to the destination address; and setting a forwarding queue corresponding to the destination address in the second ACL entry as a queue with the speed limit of 0.
In the embodiment of the invention, after discarding the multicast data message, once the normal process is recovered, the device protocol stack completes the processing of the protocol layer of the multicast group, issues the real multicast forwarding table, and recovers the normal process, and the steps include:
determining a multicast forwarding table, wherein the multicast forwarding table comprises: multicast group forwarding entries; deleting the temporary multicast table generated according to a destination address, or the first ACL entry, or the second ACL entry; and forwarding another multicast data message by using the multicast forwarding table, wherein the another multicast data message is the same as the multicast source of the multicast data message.
Through the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but the former is a better implementation mode in many cases. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (e.g., ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal device (e.g., a mobile phone, a computer, a server, or a network device) to execute the method according to the embodiments of the present invention.
Example 2
In this embodiment, a message processing apparatus is further provided, and the apparatus is used to implement the foregoing embodiments and preferred embodiments, and details of which have been already described are omitted. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware, or a combination of software and hardware is also possible and contemplated.
Fig. 4 is a block diagram of a message processing apparatus according to an embodiment of the present invention, and as shown in fig. 4, the apparatus includes:
a receiving module 40, configured to receive a multicast data packet of a multicast group, and obtain a destination address of the multicast data packet;
a determining module 42, configured to determine a discarding mechanism according to a specified rule according to the destination address;
a discarding module 44, configured to discard the received data packet of the multicast group according to the discarding mechanism.
According to the invention, the destination address of the multicast data message is obtained; determining a discarding mechanism according to an appointed rule according to the acquired destination address; the method and the device have the advantages that the received data messages of the multicast groups are discarded according to a discarding mechanism, abnormal impact of unknown multicast messages on a CPU (central processing unit) before a multicast forwarding table is generated is avoided, the technical problem that the CPU is abnormally impacted by a large number of multicast groups in the related technology is solved, the CPU resource can complete calculation of the multicast groups as soon as possible, the processing efficiency of the device in the scene is improved, and the reliability and the stability of the network device are greatly improved.
Optionally, the determining module 42 is further configured to generate a temporary multicast table according to the destination address; and setting the information of the forwarding outlet of the temporary multicast table to be null, wherein when the information of the forwarding outlet of the temporary multicast table is null, discarding the data message of the multicast group.
Optionally, the determining module 42 is further configured to generate a first access control list ACL entry according to the destination address; and setting the forwarding operation corresponding to the destination address in the first ACL entry to be discarded.
Optionally, the determining module 42 is further configured to generate a second ACL entry according to the destination address; and setting a forwarding queue corresponding to the destination address in the second ACL entry as a queue with the speed limit of 0.
It should be noted that, the above modules may be implemented by software or hardware, and for the latter, the following may be implemented, but not limited to: the modules are all positioned in the same processor; alternatively, the modules are respectively located in different processors in any combination.
Example 3
The embodiment describes a method for preventing the unknown multicast from impacting the CPU when the routing device issues the multicast table entry for the multicast, which can prevent too many unknown multicast messages from impacting the CPU when a large number of multicast groups join the device, and can improve the stability and robustness of the product.
In the embodiment, in the process of forming multicast (S, G) entries, an unknown multicast is stopped from impacting a CPU, and impact protection on an unknown multicast packet of the CPU is completed as soon as possible, so that the issue of multicast (S, G) entries by the CPU is completed, and the performance of the device in the process of forming multicast (S, G) entries is optimized.
In the scheme of this embodiment, when the data packet of the multicast group is sent to the CPU, the protection is quickly formed at the driver layer immediately after passing through the driver layer, and then the packet is sent to the platform protocol stack for processing.
The temporary protection at the driving layer can be realized by the following methods:
1. protection using temporary multicast table entries
The method for protecting by using the temporary multicast list item is mainly characterized in that when an unknown multicast message is received, a multicast temporary list of the multicast list item is immediately issued to equipment, the outlets of the multicast temporary list are all empty, namely all messages hitting the multicast list are all discarded, and the impact of the subsequent messages on a CPU can be cut off.
2. Protection using methods of ACL
The idea of protecting by using the ACL method is mainly that when an unknown multicast message is received, an ACL entry is immediately issued to equipment, the content of the ACL entry is matched with the destination address of the multicast group, and then the message is directly discarded. The method can be used for stopping the impact of the subsequent message on the CPU.
3. Safeguarding with QOS methods
The thought of protection by using the QOS method is to preset a queue with the QOS speed limit of 0, when an unknown multicast message is received, match the destination address of the multicast group, place the message in the QOS queue with the speed limit of 0, and then directly discard the message by using the speed limit of the queue. The method can be used for stopping the impact of the subsequent message on the CPU.
To illustrate the effective process and steps of the mechanism, the temporary protection scheme is described in three cases:
in the first case, the temporary multicast entry is used for protection:
1. the device receives an unknown multicast message.
2. The device analyzes the unknown multicast message information and finds out the multicast destination address.
3. The multicast destination address is used to form a temporary multicast table, and the forwarding exit information of the temporary multicast table is all null.
4. And sending the temporary multicast table to the hardware of the device.
5. All subsequent multicast messages hit the temporary multicast table, and because the exit information is empty, the subsequent messages of the multicast group are directly discarded.
6. When the protocol stack of the device finishes the processing of the protocol layer of the multicast group, the real multicast forwarding table is issued.
7. After the real multicast forwarding table is issued, the multicast temporary table is covered, and the subsequent multicast message can be forwarded normally.
In the second case, protection is performed using an ACL method:
1. the device receives an unknown multicast message.
2. The device analyzes the unknown multicast message information and finds out the multicast destination address.
3. An ACL entry is formed using the multicast destination address, with the rule that messages that hit the entry are discarded directly.
4. And sending the ACL entry to the hardware of the equipment.
5. All subsequent multicast messages hit the ACL entry, and because the message hitting the entry is directly discarded, the subsequent messages of the multicast group are directly discarded.
6. When the protocol stack of the device finishes the processing of the protocol layer of the multicast group, the real multicast forwarding table is issued.
7. After the real multicast forwarding table is issued, the ACL entry is deleted, and the subsequent multicast message can be normally forwarded.
In the third case, the protection is carried out by using a QOS method:
1. a QOS queue with the speed limit of 0 is preset on the equipment
2. The device receives an unknown multicast message, and the device analyzes the information of the unknown multicast message to find out the multicast destination address.
3. And matching the multicast purpose by using the ACL to modify the queue to the QOS with the speed limit of 0.
4. And sending the ACL entry to the hardware of the equipment.
5. All subsequent multicast messages hit the ACL entry and modify the queue to a QOS discard queue, and because the rate of the messages hitting the QOS entry is limited to 0, the subsequent messages of the multicast group are directly discarded.
6. When the protocol stack of the device finishes the processing of the protocol layer of the multicast group, the real multicast forwarding table is issued.
7. After the real multicast forwarding table is issued, the ACL entry is deleted, the multicast is deleted from the speed limit queue, and the subsequent multicast message can be normally forwarded.
To sum up, the technical solution of the embodiment of the present invention utilizes a temporary multicast table or an ACL/QOS technique, and the general idea is to immediately perform CPU impact interception on the device once an unknown multicast data message is received at the driving layer, and then send the message to the platform protocol stack for subsequent processing.
Therefore, in the process of subsequent calculation processing of the platform protocol stack, the unknown multicast cannot impact the CPU because of being intercepted by the method, so that extra load cannot be caused to the CPU, the CPU can complete the subsequent check and calculation of the unknown multicast message as soon as possible, and the multicast group (S, G) entries are issued as soon as possible. When the real multicast group forwarding items (S, G) are issued, the previous protection measures can be deleted, and the normal forwarding of the subsequent messages can be completed.
The embodiment further includes the following examples for carrying out an exemplary complete description of the solution of the embodiment: the example device is a switch and the destination address of the unknown multicast data packet is 224.0.0.1.
Example 1: protection using multicast temporary tables
1. The device receives an unknown multicast message with a destination address of 224.0.0.1.
2. A temporary multicast table is formed with a destination address of 224.0.0.1, and the forwarding egress port bitmap and multicast copy table are all 0.
3. And sending the temporary multicast table to the hardware of the device.
4. All subsequent multicast messages with the destination address of 224.0.0.1 hit the temporary multicast table, and because the forwarding exit port bitmap and the multicast copy table are all 0, the subsequent messages of the 224.0.0.1 multicast group are directly discarded.
6. When the protocol stack of the device finishes processing the protocol layer of the 224.0.0.1 multicast group, the real multicast forwarding table is issued and written into the real forwarding outlet.
7. After the real 224.0.0.1 multicast forwarding table is issued, the 224.0.0.1 multicast temporary table is covered, and the subsequent multicast message can be forwarded normally.
Example 2: protection with ACL
1. The device receives an unknown multicast message with a destination address of 224.0.0.1.
2. An ACL entry is formed that hits the multicast destination address of 224.0.0.1, whose action is drop.
3. And sending the ACL entry to the hardware of the equipment.
4. All subsequent multicast messages with the destination address of 224.0.0.1 hit the ACL entry, and since the action is drop, the subsequent messages of the 224.0.0.1 multicast group are directly discarded.
6. When the protocol stack of the device finishes processing the protocol layer of the 224.0.0.1 multicast group, the real multicast forwarding table is issued and written into the real forwarding outlet.
7. After the real 224.0.0.1 multicast forwarding table is issued, the ACL entry which hits 224.0.0.1 is deleted, and the subsequent multicast message can be normally forwarded.
Example 3: protection with QOS
1. The device sets the QOS queue 48 on the CPU port to the speed limit of 0
2. The device receives an unknown multicast message with a destination address of 224.0.0.1, forms an ACL entry that hits the multicast destination address of 224.0.0.1, and acts to modify its up-send CPU queue to 48 queues.
3. And sending the ACL entry to the hardware of the equipment.
4. All subsequent multicast messages with the destination address of 224.0.0.1 hit the ACL entry, and since the action is to modify the forwarding of the ACL entry to the 48 queue, the subsequent messages of the 224.0.0.1 multicast group are forwarded to the 48 queue, and the rate limit of the QOS48 queue is 0, so the messages cannot be forwarded to the CPU and are directly discarded.
6. When the protocol stack of the device finishes processing the protocol layer of the 224.0.0.1 multicast group, the real multicast forwarding table is issued and written into the real forwarding outlet.
7. After the real 224.0.0.1 multicast forwarding table is issued, the ACL entry which hits 224.0.0.1 is deleted, and the subsequent multicast message can be normally forwarded.
Compared with the multicast group (S, G) item forming mechanism of the common equipment, the method for directly protecting the unknown multicast message by using the multicast temporary table or the ACL/QOS technology can correctly complete the formation of the multicast group item and avoid the abnormal impact of the unknown multicast message to the CPU in the period. By the method, the impact of unknown multicast messages on the CPU in the scene can be effectively avoided, the CPU resource can be ensured to complete the calculation of the multicast group as soon as possible, the processing efficiency of the equipment in the scene is improved, and the reliability and the stability of the network equipment are greatly improved.
Fig. 5 is a schematic diagram of the protection effect of the unknown multicast on the CPU impact, and as can be seen from fig. 5, in the general multicast table forming process, all the unknown multicast messages may continuously cause the impact on the CPU before the multicast table is issued. After the invention is applied, before the multicast table is issued, the driving layer carries out corresponding unknown multicast impact protection on the device, so that the subsequent unknown multicast can not continuously impact the CPU, and the impact protection measure is deleted until the protocol stack finishes the operation, so that the multicast message can be normally forwarded and processed by the device.
FIG. 6 is a schematic diagram of the configuration and implementation steps of the present invention, including:
By the processing scheme of the embodiment, the processing of forming (S, G) entries for normal multicast groups can be finished, and the impact of unknown multicast messages on the CPU can be effectively protected in the process. Therefore, the performance of the equipment in the network is optimized very effectively, and the method can greatly improve the equipment performance of the network equipment in the process of forming the multicast group and improve the reliability and stability of the network equipment.
Example 4
Embodiments of the present invention also provide a storage medium having a computer program stored therein, wherein the computer program is arranged to perform the steps of any of the above method embodiments when executed.
Alternatively, in the present embodiment, the storage medium may be configured to store a computer program for executing the steps of:
s1, receiving the multicast data message of the multicast group and obtaining the destination address of the multicast data message;
s2, determining a discarding mechanism according to the destination address and a specified rule;
and S3, discarding the received data message of the multicast group according to the discarding mechanism.
Optionally, in this embodiment, the storage medium may include, but is not limited to: various media capable of storing computer programs, such as a usb disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic disk, or an optical disk.
Embodiments of the present invention also provide an electronic device comprising a memory having a computer program stored therein and a processor arranged to run the computer program to perform the steps of any of the above method embodiments.
Optionally, the electronic apparatus may further include a transmission device and an input/output device, wherein the transmission device is connected to the processor, and the input/output device is connected to the processor.
Optionally, in this embodiment, the processor may be configured to execute the following steps by a computer program:
s1, receiving the multicast data message of the multicast group and obtaining the destination address of the multicast data message;
s2, determining a discarding mechanism according to the destination address and a specified rule;
and S3, discarding the received data message of the multicast group according to the discarding mechanism.
Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiments and optional implementation manners, and this embodiment is not described herein again.
It will be apparent to those skilled in the art that the modules or steps of the present invention described above may be implemented by a general purpose computing device, they may be centralized on a single computing device or distributed across a network of multiple computing devices, and alternatively, they may be implemented by program code executable by a computing device, such that they may be stored in a storage device and executed by a computing device, and in some cases, the steps shown or described may be performed in an order different than that described herein, or they may be separately fabricated into individual integrated circuit modules, or multiple ones of them may be fabricated into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.
The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the principle of the present invention should be included in the protection scope of the present invention.
Claims (10)
1. A message processing method is characterized by comprising the following steps:
receiving a multicast data message of a multicast group, and acquiring a destination address of the multicast data message;
determining a discarding mechanism according to a specified rule according to the destination address;
and discarding the received data message of the multicast group according to the discarding mechanism.
2. The method of claim 1, wherein determining a discard mechanism according to a specified rule based on the destination address comprises:
generating a temporary multicast table according to the destination address;
and setting the information of the forwarding outlet of the temporary multicast table to be null, wherein when the information of the forwarding outlet of the temporary multicast table is null, discarding the data message of the multicast group.
3. The method of claim 1, wherein determining a discard mechanism according to a specified rule based on the destination address comprises:
generating a first Access Control List (ACL) entry according to the destination address;
and setting the forwarding operation corresponding to the destination address in the first ACL entry to be discarded.
4. The method of claim 1, wherein determining a discard mechanism according to a specified rule based on the destination address comprises:
generating a second ACL entry according to the destination address;
and setting a forwarding queue corresponding to the destination address in the second ACL entry as a queue with the speed limit of 0.
5. The method according to any of claims 2-4, wherein after discarding the received data packets of the multicast group according to the discard mechanism, the method further comprises:
determining a multicast forwarding table, wherein the multicast forwarding table comprises: multicast group forwarding entries;
deleting the temporary multicast table generated according to a destination address, or the first ACL entry, or the second ACL entry;
and forwarding another multicast data message by using the multicast forwarding table, wherein the another multicast data message is the same as the multicast source of the multicast data message.
6. A message processing apparatus, comprising:
the receiving module is used for receiving the multicast data message of the multicast group and acquiring the destination address of the multicast data message;
the determining module is used for determining a discarding mechanism according to the destination address and a specified rule;
and the discarding module is used for discarding the received data message of the multicast group according to the discarding mechanism.
7. The apparatus of claim 6, wherein the determining module is further configured to generate a temporary multicast table according to the destination address; and setting the information of the forwarding outlet of the temporary multicast table to be null, wherein when the information of the forwarding outlet of the temporary multicast table is null, discarding the data message of the multicast group.
8. The apparatus of claim 6, wherein the determining module is further configured to generate a first Access Control List (ACL) entry according to the destination address; and setting the forwarding operation corresponding to the destination address in the first ACL entry to be discarded.
9. The apparatus of claim 6, wherein the determining module is further configured to generate a second ACL entry according to the destination address; and setting a forwarding queue corresponding to the destination address in the second ACL entry as a queue with the speed limit of 0.
10. A storage medium, in which a computer program is stored, wherein the computer program is arranged to perform the method of any of claims 1 to 5 when executed.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811410211.7A CN111224882A (en) | 2018-11-23 | 2018-11-23 | Message processing method and device and storage medium |
| PCT/CN2019/108874 WO2020103574A1 (en) | 2018-11-23 | 2019-09-29 | Message processing method and device, and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811410211.7A CN111224882A (en) | 2018-11-23 | 2018-11-23 | Message processing method and device and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111224882A true CN111224882A (en) | 2020-06-02 |
Family
ID=70773510
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811410211.7A Pending CN111224882A (en) | 2018-11-23 | 2018-11-23 | Message processing method and device and storage medium |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN111224882A (en) |
| WO (1) | WO2020103574A1 (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112866114A (en) * | 2020-12-31 | 2021-05-28 | 锐捷网络股份有限公司 | Multicast message processing method and device |
| CN113572698A (en) * | 2021-06-29 | 2021-10-29 | 青岛海尔科技有限公司 | Method and device for testing multicast group capacity, storage medium and electronic device |
| CN117118762A (en) * | 2023-10-24 | 2023-11-24 | 苏州元脑智能科技有限公司 | Method and device for processing package receiving of central processing unit, electronic equipment and storage medium |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115225734A (en) * | 2022-09-20 | 2022-10-21 | 常州楠菲微电子有限公司 | Message processing method and network equipment |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101159665A (en) * | 2007-08-28 | 2008-04-09 | 杭州华三通信技术有限公司 | Method and device to implement forwarding of unknown multicast packet to router port |
| CN103179043A (en) * | 2013-03-06 | 2013-06-26 | 杭州华三通信技术有限公司 | Method and equipment for forwarding multicast messages |
| WO2018014710A1 (en) * | 2016-07-20 | 2018-01-25 | 中兴通讯股份有限公司 | Method and device for processing unknown multicast packet |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7444422B1 (en) * | 2000-10-10 | 2008-10-28 | Nortel Networks Limited | Multicast when forwarding information is unknown |
| CN100466606C (en) * | 2005-08-24 | 2009-03-04 | 杭州华三通信技术有限公司 | Unknown multicasting message processing method |
| CN100499587C (en) * | 2006-01-10 | 2009-06-10 | 杭州华三通信技术有限公司 | Exchange equipment and its message processing method for preventing flow attack |
| CN101789905A (en) * | 2010-02-05 | 2010-07-28 | 杭州华三通信技术有限公司 | Method and equipment for preventing unknown multicast from attacking CPU (Central Processing Unit) |
| CN101867518A (en) * | 2010-05-24 | 2010-10-20 | 北京星网锐捷网络技术有限公司 | Message forwarding processing method, processing device and equipment for two-layer switching equipment |
| CN106059935B (en) * | 2016-07-29 | 2019-12-06 | 新华三技术有限公司 | unknown multicast message processing method and device |
-
2018
- 2018-11-23 CN CN201811410211.7A patent/CN111224882A/en active Pending
-
2019
- 2019-09-29 WO PCT/CN2019/108874 patent/WO2020103574A1/en active Application Filing
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101159665A (en) * | 2007-08-28 | 2008-04-09 | 杭州华三通信技术有限公司 | Method and device to implement forwarding of unknown multicast packet to router port |
| CN103179043A (en) * | 2013-03-06 | 2013-06-26 | 杭州华三通信技术有限公司 | Method and equipment for forwarding multicast messages |
| WO2018014710A1 (en) * | 2016-07-20 | 2018-01-25 | 中兴通讯股份有限公司 | Method and device for processing unknown multicast packet |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112866114A (en) * | 2020-12-31 | 2021-05-28 | 锐捷网络股份有限公司 | Multicast message processing method and device |
| CN113572698A (en) * | 2021-06-29 | 2021-10-29 | 青岛海尔科技有限公司 | Method and device for testing multicast group capacity, storage medium and electronic device |
| CN113572698B (en) * | 2021-06-29 | 2023-12-01 | 青岛海尔科技有限公司 | Multicast group capacity testing method and device, storage medium and electronic device |
| CN117118762A (en) * | 2023-10-24 | 2023-11-24 | 苏州元脑智能科技有限公司 | Method and device for processing package receiving of central processing unit, electronic equipment and storage medium |
| CN117118762B (en) * | 2023-10-24 | 2024-02-09 | 苏州元脑智能科技有限公司 | Method and device for processing package receiving of central processing unit, electronic equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2020103574A1 (en) | 2020-05-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11855967B2 (en) | Method for identifying application information in network traffic, and apparatus | |
| CN111224882A (en) | Message processing method and device and storage medium | |
| US10305783B2 (en) | Packet control method, switch, and controller | |
| US9100423B2 (en) | Systems and methods for detecting and preventing flooding attacks in a network environment | |
| CN108243111B (en) | Method and device for determining transmission path | |
| CN106878194B (en) | Message processing method and device | |
| CN101789905A (en) | Method and equipment for preventing unknown multicast from attacking CPU (Central Processing Unit) | |
| CN109067585B (en) | Method and device for issuing query ACL (access control list) table items | |
| US11502967B2 (en) | Methods and apparatuses for packet scheduling for software-defined networking in edge computing environment | |
| CN106603736B (en) | MAC address processing method and device | |
| CN111901317B (en) | Access control policy processing method, system and equipment | |
| CN105939339A (en) | Protection method and device of attack protocol message flow | |
| CN111031073B (en) | Network intrusion detection system and method | |
| CN106789954A (en) | A kind of method and apparatus of the DDOS attack identification based on multi -CPU | |
| US9122546B1 (en) | Rapid processing of event notifications | |
| CN111064750A (en) | Network message control method and device of data center | |
| Chakraborty et al. | A low-latency multipath routing without elephant flow detection for data centers | |
| US20230283624A1 (en) | Method, apparatus, and system for determining data flow information | |
| US11695639B2 (en) | Method and apparatus for searching for maintenance end point (MEP), and storage medium | |
| US20230336457A1 (en) | Method and apparatus for processing forwarding entry | |
| KR100733830B1 (en) | DDoS Detection and Packet Filtering Scheme | |
| CN109347810B (en) | Method and device for processing message | |
| CN111404839A (en) | Message processing method and device | |
| CN105704057B (en) | The method and apparatus for determining the type of service of burst port congestion packet loss | |
| EP4236254A1 (en) | Message processing method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |