CN112015575A - Message processing method, device and related equipment - Google Patents
Message processing method, device and related equipment Download PDFInfo
- Publication number
- CN112015575A CN112015575A CN202010888415.2A CN202010888415A CN112015575A CN 112015575 A CN112015575 A CN 112015575A CN 202010888415 A CN202010888415 A CN 202010888415A CN 112015575 A CN112015575 A CN 112015575A
- Authority
- CN
- China
- Prior art keywords
- message
- message processing
- rule
- processed
- xdp
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/54—Interprogram communication
- G06F9/542—Event management; Broadcasting; Multicasting; Notifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/54—Interprogram communication
- G06F9/546—Message passing systems or structures, e.g. queues
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Multimedia (AREA)
- Computer And Data Communications (AREA)
Abstract
The application discloses a message processing method, which comprises the steps of obtaining a message to be processed; extracting information of the message to be processed to obtain message transmission information; carrying out rule matching on the message transmission information through an Xdp thread to obtain a message processing rule; processing the message to be processed by utilizing the message processing rule; the message processing method can effectively improve the message processing efficiency and further ensure the high performance and the high reliability of the system. The application also discloses a message processing device, a message processing system and a computer readable storage medium, which have the beneficial effects.
Description
Technical Field
The present application relates to the field of data transmission technologies, and in particular, to a method for processing a packet, and further, to a packet processing apparatus, a system, and a computer-readable storage medium.
Background
In a message processing flow under linux, an iptable/nfables frame (a packet filtering frame) is generally used to complete filtering of network data packets, and in the iptable/nfables frame, each filtering condition generally corresponds to one iptables rule, if all filtering conditions are to be completed, all rules need to be traversed in sequence for matching, so that the existing message processing flow has a problem of low efficiency, and further, when the number of the rules is large to a certain degree, the problem is particularly obvious, and the system performance is more seriously influenced, and in addition, when the CPU occupancy rate for filtering the data packets is too high, the efficiency of the CPU for other computing tasks is also seriously influenced.
Therefore, how to more effectively improve the message processing efficiency and further ensure the high performance and the high reliability of the system is a problem to be solved urgently by those skilled in the art.
Disclosure of Invention
The message processing method can effectively improve the message processing efficiency and further ensure the high performance and the high reliability of a system; another object of the present application is to provide a message processing apparatus, a message processing system, and a computer-readable storage medium, which also have the above beneficial effects.
In a first aspect, the present application provides a method for processing a packet, including:
acquiring a message to be processed;
extracting information of the message to be processed to obtain message transmission information;
carrying out rule matching on the message transmission information through an Xdp thread to obtain a message processing rule;
and processing the message to be processed by utilizing the message processing rule.
Preferably, the extracting information of the message to be processed to obtain message transmission information includes:
extracting information of the message to be processed to obtain quintuple data of the message to be processed; the quintuple data comprises a source address, a source port, a destination address and a transmission protocol.
Preferably, the rule matching is performed on the packet transmission information through an Xdp thread to obtain a packet processing rule, and the rule matching includes:
and the Xdp thread performs rule matching on the message transmission information through a hash table to obtain the message processing rule.
Preferably, the rule matching the message transmission information through the hash table to obtain the message processing rule includes:
matching each quintuple data through a hash table corresponding to each quintuple data to obtain each value;
performing AND calculation on each value to obtain a bitmap mask;
and inquiring to obtain the message processing rule according to the bitmap mask.
Preferably, the hash table is stored in a hash map.
Preferably, the message processing method further includes:
and adjusting and updating the message processing rule according to the received rule updating instruction.
Preferably, the message processing method further includes:
and unloading the Xdp thread according to the received user instruction.
In a second aspect, the present application further discloses a packet processing apparatus, including:
the message acquisition module is used for acquiring a message to be processed;
the information extraction module is used for extracting the information of the message to be processed to obtain message transmission information;
the rule matching module is used for carrying out rule matching on the message transmission information through an Xdp thread to obtain a message processing rule;
and the message processing module is used for processing the message to be processed by utilizing the message processing rule.
In a third aspect, the present application further discloses a message processing system, including:
a memory for storing a computer program;
a processor for executing the computer program to implement the steps of any of the message processing methods described above.
In a fourth aspect, the present application also discloses a computer-readable storage medium, in which a computer program is stored, and the computer program is used to implement the steps of any one of the message processing methods described above when being executed by a processor.
The message processing method comprises the steps of obtaining a message to be processed; extracting information of the message to be processed to obtain message transmission information; carrying out rule matching on the message transmission information through an Xdp thread to obtain a message processing rule; and processing the message to be processed by utilizing the message processing rule.
Therefore, the message processing method provided by the application realizes the message processing flow by pre-realizing the Xdp (eXpress Data Path) thread and adding the Xdp thread to the message inlet, and can directly call the Xdp thread to process the related transmission information when receiving the message to be processed so as to match the corresponding message processing rule to complete the message processing.
The message processing apparatus, the message processing system, and the computer readable storage medium provided by the present application all have the above beneficial effects, and are not described herein again.
Drawings
In order to more clearly illustrate the technical solutions in the prior art and the embodiments of the present application, the drawings that are needed to be used in the description of the prior art and the embodiments of the present application will be briefly described below. Of course, the following description of the drawings related to the embodiments of the present application is only a part of the embodiments of the present application, and it will be obvious to those skilled in the art that other drawings can be obtained from the provided drawings without any creative effort, and the obtained other drawings also belong to the protection scope of the present application.
Fig. 1 is a schematic flow chart of a message processing method provided in the present application;
fig. 2 is a schematic flow chart of another message processing method provided in the present application;
fig. 3 is a schematic structural diagram of a message processing apparatus provided in the present application;
fig. 4 is a schematic structural diagram of a message processing system according to the present application.
Detailed Description
The core of the application is to provide a message processing method, which can effectively improve the message processing efficiency and further ensure the high performance and the high reliability of the system; another core of the present application is to provide a message processing apparatus, a message processing system, and a computer-readable storage medium, which also have the above beneficial effects.
In order to more clearly and completely describe the technical solutions in the embodiments of the present application, the technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application. It is to be understood that the embodiments described are only a few embodiments of the present application and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
In a message processing flow under linux, an iptable/nfables frame is generally used to complete filtering of network data packets, and in the iptable/nfables frame, each filtering condition generally corresponds to one iptables rule, if all filtering conditions are to be completed, all rules need to be traversed in sequence for matching, so that the existing message processing flow has a problem of low efficiency, and further, when the number of the rules is large to a certain extent, the problem is particularly obvious, and system performance is more seriously influenced, and in addition, when the CPU occupancy rate for filtering the data packets is too high, the efficiency of the CPU for other computing tasks is also seriously influenced.
Therefore, in order to solve the above technical problems, the present application provides a packet processing method, which implements a packet processing flow by implementing an Xdp thread in advance and attaching the Xdp thread to a packet inlet, and when a packet to be processed is received, the Xdp thread can be directly called to process the related transmission information thereof, so as to match with a corresponding packet processing rule to complete packet processing.
Referring to fig. 1, fig. 1 is a schematic flow chart of a message processing method provided in the present application, where the message processing method may include:
s101: acquiring a message to be processed;
the step aims to realize the acquisition of the message to be processed, namely the message which needs to be processed and consists of the data packets. Generally, the message processing content includes, but is not limited to, discarding, submitting to an upper layer protocol stack, returning to resend, redirecting to a different network card for sending, or redirecting to a user space for further processing, and the like.
S102: extracting information of the message to be processed to obtain message transmission information;
the step aims to realize the acquisition of message transmission information, and the information is extracted from the message to be processed. The message transmission information refers to relevant information of a message to be processed in a transmission process, such as information of a source address, a destination address and the like, and is used for realizing rule matching so as to obtain a corresponding message processing rule through matching and further realize message processing. It can be understood that the specific content of the message transmission information does not affect the implementation of the technical scheme, and can be set by a technician according to actual requirements, which is not limited in the present application.
As a preferred embodiment, the extracting information of the message to be processed to obtain message transmission information may include: extracting information of the message to be processed to obtain five-tuple data of the message to be processed; the quintuple data comprises a source address, a source port, a destination address and a transmission protocol.
The preferred embodiment provides a specific type of message transmission information, that is, the quintuple data of the to-be-processed message, which may specifically include a source address, a source port, a destination address, and a transmission protocol (transport layer protocol) of the to-be-processed message. Therefore, more accurate message processing rules can be obtained through the matching of the quintuple data of the message to be processed, and the message processing is further realized.
S103: carrying out rule matching on message transmission information through an Xdp thread to obtain a message processing rule;
the step aims to realize the acquisition of the message processing rule, and particularly can realize the matching of message transmission information through an Xdp thread. Specifically, the efficiency of using the iptables frame to filter the data packet is low, and besides the design of the iptables frame, the important point is that the network data packet path of the processing point reaches the higher layer of the network protocol stack, and the processing of too many unnecessary network data packets has been performed, so if the network data packet processing path is shortened, the purpose of improving the data packet processing efficiency can be achieved by accessing the data packet processing flow earlier, and further the message processing efficiency is improved. Furthermore, Xdp is a high-performance, programmable data plane technology implemented based on eBPF (extended Berkeley Packet Filter), and since the framework mechanism takes effect at a position below the bottom layer of a network protocol stack, it provides possibility for earlier identifying and processing network data packets, so that an Xdp program can be attached to a Packet inlet, such as a network interface, and when a Packet to be processed reaches the network interface, the Xdp program can be directly called back to process, and rule matching is completed.
As a preferred embodiment, the obtaining the packet processing rule by rule matching of the packet transmission information through the Xdp thread may include: and the Xdp thread performs rule matching on the message transmission information through a hash table to obtain a message processing rule.
The preferred embodiment provides a more specific rule matching method, namely, the rule matching method is realized based on a hash table. Specifically, a mapping relationship between the message transmission information and the message processing rule may be pre-established and stored in the hash table, so that when the message transmission information of the message to be processed is obtained and rule matching is performed, the hash table is directly called.
As a preferred embodiment, the performing rule matching on the packet transmission information through the hash table to obtain the packet processing rule may include: matching each quintuple data through a hash table corresponding to each quintuple data to obtain each value; performing AND calculation on each value to obtain a bitmap mask; and inquiring to obtain the message processing rule according to the bitmap mask.
The preferred embodiment provides a more specific rule matching method, and specifically, for five-tuple data, different ip addresses, ports, and protocols may be indexed by storing in different hash tables, that is, each quantity corresponds to one hash table, so that each quantity in the corresponding five-tuple data may be matched by using each hash table to obtain a value corresponding to each quantity, and further, a bitmap mask bitmap obtained by calculation based on five value values may be obtained, and finally, a corresponding message processing rule may be obtained by querying according to the bitmap mask.
As a preferred embodiment, the hash table may be stored in a hash map (a map interface based on the hash table).
In particular, maps are used so that the user space component can access a wide library to provide rich query and decision functions to determine what the eBPF program should perform and can configure the eBPF program in real time to perform this operation.
S104: and processing the message to be processed by utilizing the message processing rule.
The step aims to realize message processing, and the message to be processed is processed by directly utilizing the message processing rule obtained by matching, so that the message processing flow is completed. It is understood that the message processing rule corresponds to the above-mentioned various message processing types, i.e. message discarding, message delivery to an upper protocol stack, message return and retransmission, message redirection to a different network card for transmission, message redirection to a user space for further processing, and the like.
As a preferred embodiment, the message processing method may further include: and adjusting and updating the message processing rule according to the received rule updating instruction.
The preferred embodiment aims to update the message processing rule, specifically, a user can update the rule configuration of the eBPF program in the Xdp thread in real time according to actual needs, so as to further achieve the purpose of dynamically adjusting the data packet processing policy according to actual needs, and in a specific implementation process, the update is performed based on a rule update instruction initiated by the user.
As a preferred embodiment, the message processing method may further include: and unloading the Xdp thread according to the received user instruction.
The preferred embodiment is directed to implementing Xdp thread offload to eliminate message processing flows. Specifically, the user can directly initiate an unloading instruction according to actual requirements, that is, the user instruction, and for the system, the Xdp thread can be directly unloaded from the message inlet according to the user instruction.
Therefore, the message processing method provided by the application realizes the message processing flow by realizing the Xdp thread in advance and attaching the Xdp thread to the message inlet, and can directly call the Xdp thread to process the related transmission information when receiving the message to be processed so as to match the corresponding message processing rule to complete the message processing.
On the basis of the foregoing embodiments, please refer to fig. 2, where fig. 2 is a schematic flow chart of another message processing method provided in the present application, and this preferred embodiment provides a more specific message processing method, which is implemented in the following specific flow:
1. installing an Xdp flow:
(1) define mount points for the Xdp program: the mounting point is a place (a message entrance) where the Xdp processing flow data path is attached to take effect, when a network data packet flows through the attachment mounting point, an eBPF program registered to the Xdp processing flow data path is called at the mounting point to start processing the data packet, and the processing logic of the data packet is determined by the eBPF; the mount point is generally a node of a network data processing path, such as a network card, a network interface, and the like.
(2) Creating and writing an eBPF program and checking the eBPF program to be effective and safe through an eBPF compiler and a checker: the eBPF program is an implementation subject of an Xdp processing flow data path, the Xdp is implemented based on an eBPF language, data packet information transmitted to the eBPF program is contained in an Xdp _ md structure, the structure is transmitted to an eBPF processing function, and the eBPF program processes quintuple such as a source/destination address, a source/destination port, a protocol and the like according to service logic, such as discarding, PASS and the like.
(3) And a callback processing function for processing the data packet by the Xdp processing flow data path is specified from the eBPF program, is a main implementation body for processing the network data packet in the eBPF program, and is specified as an XDP type.
(4) The user mode application program registers the XDP type eBPF function in the XDP data processing flow, and at the same time, attaches an XDP flow frame to a specific physical network card mount point defined in (1), where the mount point may select different types such as native or offload, and may also perform general or acceleration mode processing according to the actual support situation, where in the acceleration mode, the actual processing XDP may be offloaded to hardware for execution to further release cpu, and at this time, once the XDP function is attached to the mount point, it starts to process a network packet.
(5) The processing rules are stored in the user mode program through the hash map, different IP, ports and protocols are stored and indexed through different hash tables, the processing actions are also stored and indexed through the hash, the hash map mode is used for storing and indexing through the user mode application program, the rule configuration of the eBPF program in the Xdp can be updated in real time, and therefore the purpose of dynamically adjusting the message processing strategy according to actual needs is achieved. In addition, the eBPF/XDP program and the user mode application program use the outward maps mapping of the eBPF to realize mutual communication before, and share data between the eBPF/XDP program and the user mode application program. Wherein maps mapping is used so that the userspace component can access a wide library to provide rich query and decision functions to determine what the eBPF program should perform, and can configure the eBPF program in real time to perform this operation. More specifically, all processing rules may be numbered according to priority, and all processing rules may be classified according to quintuple and actions such as a source address, a destination port, a protocol, and the like, to create different eBPF hash maps, and further, a rule matching item is used as a hash key, numbered as a hash value, and stored in the Map of the eBPF.
(6) The user mode application program receives a user instruction, and the message processing action can be cancelled by uninstalling the Xdp processing flow data path from the mounting point or clearing the processing rule.
2. Message processing flow:
after a message is stored in a buffer from network card hardware through DMA, before a network protocol stack allocates a skb, starting an eBPF program in an Xdp data path, respectively sequentially setting quintuple of the message as keys in the program running process, matching and finding the corresponding quintuple eBPF hash Map to obtain a plurality of values, carrying out AND calculation on all the values to obtain a bitmap mask bitmap, when the bitmap is 1, indicating that the matching of the corresponding rule is successful, further, taking the bitmap as the key, finding the action eBPF hash Map to obtain a message processing rule, wherein the message processing rule corresponds to the actual message processing action such as discarding, PASS and the like, and further completing the message processing by executing the message processing action.
Therefore, the message processing method provided by the embodiment of the application realizes the message processing flow by realizing the Xdp thread in advance and attaching the Xdp thread to the message inlet, and when the message to be processed is received, the Xdp thread can be directly called to process the related transmission information so as to match the corresponding message processing rule to complete the message processing.
To solve the above technical problem, the present application further provides a message processing apparatus, please refer to fig. 3, where fig. 3 is a schematic structural diagram of the message processing apparatus provided in the present application, and the message processing apparatus may include:
the message acquisition module 1 is used for acquiring a message to be processed;
the information extraction module 2 is used for extracting information of the message to be processed to obtain message transmission information;
the rule matching module 3 is used for carrying out rule matching on the message transmission information through the Xdp thread to obtain a message processing rule;
and the message processing module 4 is used for processing the message to be processed by using the message processing rule.
Therefore, the message processing device provided by the embodiment of the application realizes the message processing flow by realizing the Xdp thread in advance and attaching the Xdp thread to the message inlet, and can directly call the Xdp thread to process the related transmission information when receiving the message to be processed so as to match the corresponding message processing rule to complete the message processing.
As a preferred embodiment, the information extraction module 2 may be specifically configured to extract information of a to-be-processed packet, so as to obtain five-tuple data of the to-be-processed packet; the quintuple data comprises a source address, a source port, a destination address and a transmission protocol.
As a preferred embodiment, the rule matching module 3 may be specifically configured to perform rule matching on the packet transmission information by the Xdp thread through a hash table, so as to obtain a packet processing rule.
As a preferred embodiment, the coefficient calculation module 3 may be specifically configured to match, by the Xdp thread, each quintuple data through a hash table corresponding to each quintuple data, so as to obtain each value; performing AND calculation on each value to obtain a bitmap mask; and inquiring to obtain the message processing rule according to the bitmap mask.
In a preferred embodiment, the hash table is stored in a hash map.
As a preferred embodiment, the message processing apparatus may further include a rule updating module, configured to adjust and update the message processing rule according to the received rule updating instruction.
As a preferred embodiment, the message processing apparatus may further include a thread unloading module, configured to unload an Xdp thread according to a received user instruction.
For the introduction of the apparatus provided in the present application, please refer to the above method embodiments, which are not described herein again.
To solve the above technical problem, the present application further provides a message processing system, please refer to fig. 4, where fig. 4 is a schematic structural diagram of the message processing system provided in the present application, and the message processing system may include:
a memory 10 for storing a computer program;
the processor 20, when executing the computer program, may implement the steps of any of the message processing methods described above.
For the introduction of the system provided by the present application, please refer to the above method embodiment, which is not described herein again.
To solve the above problem, the present application further provides a computer-readable storage medium, on which a computer program is stored, and the computer program, when executed by a processor, can implement the steps of any one of the message processing methods described above.
The computer-readable storage medium may include: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
For the introduction of the computer-readable storage medium provided in the present application, please refer to the above method embodiments, which are not described herein again.
The embodiments are described in a progressive manner in the specification, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description.
Those of skill would further appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both, and that the various illustrative components and steps have been described above generally in terms of their functionality in order to clearly illustrate this interchangeability of hardware and software. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in Random Access Memory (RAM), memory, Read Only Memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
The technical solutions provided by the present application are described in detail above. The principles and embodiments of the present application are explained herein using specific examples, which are provided only to help understand the method and the core idea of the present application. It should be noted that, for those skilled in the art, without departing from the principle of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall into the protection scope of the present application.
Claims (10)
1. A message processing method is characterized by comprising the following steps:
acquiring a message to be processed;
extracting information of the message to be processed to obtain message transmission information;
carrying out rule matching on the message transmission information through an Xdp thread to obtain a message processing rule;
and processing the message to be processed by utilizing the message processing rule.
2. The message processing method according to claim 1, wherein the extracting information of the message to be processed to obtain message transmission information comprises:
extracting information of the message to be processed to obtain quintuple data of the message to be processed; the quintuple data comprises a source address, a source port, a destination address and a transmission protocol.
3. The message processing method according to claim 2, wherein the obtaining of the message processing rule by rule matching of the message transmission information through an Xdp thread comprises:
and the Xdp thread performs rule matching on the message transmission information through a hash table to obtain the message processing rule.
4. The message processing method according to claim 3, wherein the obtaining the message processing rule by rule matching of the message transmission information through a hash table comprises:
matching each quintuple data through a hash table corresponding to each quintuple data to obtain each value;
performing AND calculation on each value to obtain a bitmap mask;
and inquiring to obtain the message processing rule according to the bitmap mask.
5. The message processing method according to claim 3, wherein the hash table is stored in a hash map.
6. The message processing method according to any of claims 1 to 5, further comprising:
and adjusting and updating the message processing rule according to the received rule updating instruction.
7. The message processing method according to claim 1, further comprising:
and unloading the Xdp thread according to the received user instruction.
8. A message processing apparatus, comprising:
the message acquisition module is used for acquiring a message to be processed;
the information extraction module is used for extracting the information of the message to be processed to obtain message transmission information;
the rule matching module is used for carrying out rule matching on the message transmission information through an Xdp thread to obtain a message processing rule;
and the message processing module is used for processing the message to be processed by utilizing the message processing rule.
9. A message processing system, comprising:
a memory for storing a computer program;
a processor for executing the computer program to implement the steps of the message processing method according to any of claims 1 to 7.
10. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, is adapted to carry out the steps of the message processing method according to one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010888415.2A CN112015575A (en) | 2020-08-28 | 2020-08-28 | Message processing method, device and related equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010888415.2A CN112015575A (en) | 2020-08-28 | 2020-08-28 | Message processing method, device and related equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112015575A true CN112015575A (en) | 2020-12-01 |
Family
ID=73502994
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010888415.2A Withdrawn CN112015575A (en) | 2020-08-28 | 2020-08-28 | Message processing method, device and related equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112015575A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113381993A (en) * | 2021-06-08 | 2021-09-10 | 清华大学 | Deep packet inspection system and inspection method thereof, computer device and storage medium |
| CN114039789A (en) * | 2021-11-17 | 2022-02-11 | 北京天融信网络安全技术有限公司 | Flow protection method, electronic device and storage medium |
| CN114039875A (en) * | 2021-10-30 | 2022-02-11 | 北京网聚云联科技有限公司 | Data acquisition method, device and system based on eBPF technology |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101309216A (en) * | 2008-07-03 | 2008-11-19 | 中国科学院计算技术研究所 | IP packet classification method and apparatus |
| CN103457824A (en) * | 2012-05-31 | 2013-12-18 | 中兴通讯股份有限公司 | Message processing method and device |
-
2020
- 2020-08-28 CN CN202010888415.2A patent/CN112015575A/en not_active Withdrawn
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101309216A (en) * | 2008-07-03 | 2008-11-19 | 中国科学院计算技术研究所 | IP packet classification method and apparatus |
| CN103457824A (en) * | 2012-05-31 | 2013-12-18 | 中兴通讯股份有限公司 | Message processing method and device |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113381993A (en) * | 2021-06-08 | 2021-09-10 | 清华大学 | Deep packet inspection system and inspection method thereof, computer device and storage medium |
| CN114039875A (en) * | 2021-10-30 | 2022-02-11 | 北京网聚云联科技有限公司 | Data acquisition method, device and system based on eBPF technology |
| CN114039875B (en) * | 2021-10-30 | 2023-09-01 | 北京网聚云联科技有限公司 | Data acquisition method, device and system based on eBPF technology |
| CN114039789A (en) * | 2021-11-17 | 2022-02-11 | 北京天融信网络安全技术有限公司 | Flow protection method, electronic device and storage medium |
| CN114039789B (en) * | 2021-11-17 | 2023-11-14 | 北京天融信网络安全技术有限公司 | Traffic protection method, electronic device and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112015575A (en) | Message processing method, device and related equipment | |
| US10044616B2 (en) | Co-existence of routable and non-routable RDMA solutions on the same network interface | |
| US9965441B2 (en) | Adaptive coalescing of remote direct memory access acknowledgements based on I/O characteristics | |
| CN113934660B (en) | Accelerating network packet processing | |
| US8681819B2 (en) | Programmable multifield parser packet | |
| CN108809749B (en) | Performing upper layer inspection of a stream based on a sampling rate | |
| WO2015096513A1 (en) | Packet processing method, node and system | |
| US11005760B2 (en) | Ensuring data locality for secure transmission of data | |
| US8555374B2 (en) | High performance packet processing using a general purpose processor | |
| CN112532538A (en) | Flow control method and device, electronic equipment and computer readable storage medium | |
| CN102111331B (en) | Matching method based on hash table and adopting mask five-element rule | |
| CN109995828A (en) | IPOIB performance optimization method, device, equipment and medium | |
| US10817177B1 (en) | Multi-stage counters | |
| CN113992364B (en) | Network data packet blocking optimization method and system | |
| CN113965367B (en) | Policy object upper limit control method, system, computer and storage medium | |
| CN116015796A (en) | Flow table updating method and device, firewall equipment and storage medium | |
| CN112532610B (en) | Intrusion prevention detection method and device based on TCP segmentation | |
| US9736080B2 (en) | Determination method, device and storage medium | |
| EP3136251A1 (en) | Flit transmission method and device of network on chip | |
| CN115037516B (en) | Statistical method, computing device and storage medium for application use flow | |
| US11962494B2 (en) | Methods and systems for data consistent search and storage using trees | |
| CN115632825A (en) | Processing system and method based on NTP amplification reflection attack defense | |
| KR101775324B1 (en) | Method for handling removal of specific node in heap which includes at least one node and computing apparatus using the same | |
| CN115941298A (en) | VPP & DPDK-based firewall security domain isolation method | |
| CN116318992A (en) | Blacklist control method and device of cloud native kubernetes network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20201201 |