CN112968844B - Method and device for sending fragment message - Google Patents
Method and device for sending fragment message Download PDFInfo
- Publication number
- CN112968844B CN112968844B CN202110164217.6A CN202110164217A CN112968844B CN 112968844 B CN112968844 B CN 112968844B CN 202110164217 A CN202110164217 A CN 202110164217A CN 112968844 B CN112968844 B CN 112968844B
- Authority
- CN
- China
- Prior art keywords
- data
- user data
- encapsulation
- header data
- encapsulated
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L49/00—Packet switching elements
- H04L49/90—Buffering arrangements
- H04L49/9057—Arrangements for supporting packet reassembly or resequencing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/02—Capturing of monitoring data
- H04L43/028—Capturing of monitoring data by filtering
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D30/00—Reducing energy consumption in communication networks
- Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application provides a method and a device for sending a fragment message, which comprises the following steps: acquiring original message information to be forwarded in the virtual gateway, wherein the virtual gateway is used for processing service flows of a plurality of local area networks, and the original message information comprises header data and user data; acquiring encapsulated header data and encapsulated user data obtained by carrying out fragmentation processing and encapsulation on the original message information; sending the encapsulation header data and the encapsulation user data fragment to corresponding destination equipment; generating mirror image header data according to the encapsulation header data, and sending the mirror image header data to the DPI server so as to complete the lightweight message detection of the original message information through the mirror image header data. The method and the device improve the message transmission rate, greatly reduce the resources consumed by mirror image message detection, and provide good internet experience for users.
Description
Technical Field
The present application relates to the field of communications technologies, and in particular, to a method and an apparatus for sending a fragment packet, a computer device, and a storage medium.
Background
The general home internet access uses an optical modem, namely a home gateway, and can provide basic internet access service based on an operator network. The virtual gateway virtualizes the function of the domestic optical modem and puts the virtualized function on a centralized server, the server is deployed in a Data Center (DC) of a metropolitan area Network of an operator, except for the gateway standard functions of Routing, Dynamic Host Configuration Protocol (DHCP), Network Address Translation (NAT), firewall and the like, the virtual gateway can provide a novel gateway capability with more flexibility, manageability and easy maintenance, and can provide more value-added services including internet analysis, application control, content service and the like;
for a cloud gateway product, the device can support network traffic generated by internet access service with a larger number of users, the peak value of the traffic may reach tens of G/s, and can perform data analysis and application control on huge data traffic, the data analysis means that a message needs to be mirrored, and the time overhead of copying can seriously affect the efficiency of message processing and directly affect the internet access experience of a terminal user.
Disclosure of Invention
The application provides a method, a device, computer equipment and a storage medium for sending a fragment message, which improve the message transmission rate by sending header data and user data of original message information in a fragment manner, and simultaneously carry out lightweight message detection through the header data, thereby greatly reducing resources consumed by mirror image message detection, providing more resource space for transmission processing of the original message information, further accelerating the transmission processing of the original message information and the like, and providing good internet experience for users.
According to an aspect of the present application, a method for sending a fragment packet is provided, where the method includes:
acquiring original message information to be forwarded in the virtual gateway, wherein the virtual gateway is used for processing service flows of a plurality of local area networks, and the original message information comprises header data and user data;
acquiring encapsulated header data and encapsulated user data obtained by fragmenting and encapsulating the original message information, wherein the encapsulated header data and the encapsulated user data are dispersedly stored in discontinuous data blocks by adopting chain management;
sending the encapsulation head data and the encapsulation user data fragment to corresponding destination equipment;
generating mirror image header data according to the encapsulation header data, and sending the mirror image header data to the DPI server so as to complete lightweight packet detection of the original packet information through the mirror image header data, wherein the lightweight packet detection comprises analyzing a destination address, a destination port and a protocol type of the original packet information.
According to an aspect of the present application, there is provided an apparatus for sending a fragmented packet, where the virtual gateway establishes a communication connection with a DPI server, and the apparatus includes:
an obtaining module, configured to obtain original packet information to be forwarded in the virtual gateway, where the virtual gateway is configured to process service flows of multiple local area networks, and the original packet information includes header data and user data;
the fragmentation module is used for acquiring encapsulation head data and encapsulation user data obtained by fragmenting and encapsulating the original message information, wherein the encapsulation head data and the encapsulation user data are dispersedly stored in discontinuous data blocks by adopting chain management;
the sending module is used for sending the encapsulation header data and the encapsulation user data fragments to corresponding destination equipment;
and the detection module is used for generating mirror image header data according to the encapsulation header data and sending the mirror image header data to the DPI server so as to complete the lightweight message detection of the original message information through the mirror image header data, wherein the lightweight message detection comprises the analysis of a destination address, a destination port and a protocol type of the original message information.
According to an aspect of the present application, there is also provided an apparatus for sending a fragment packet, where the apparatus includes:
one or more processors;
a memory; and
one or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the processor to perform the operations of any of the methods described above.
According to an aspect of the application, there is also provided a computer-readable storage medium having stored thereon a computer program, which is loaded by a processor to perform the operations of any of the methods described above.
According to the method and the device, the header data and the user data of the original message information are sent in a slicing mode, the message transmission rate is improved, meanwhile, light-weight message detection is carried out through the header data, resources consumed by mirror image message detection are greatly reduced, more resource spaces are provided for transmission processing of the original message information, transmission processing of the original message information is further accelerated, and good internet experience is provided for users.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the description below are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings without creative efforts.
Fig. 1 shows a flowchart of a specific method for sending a fragment packet according to an embodiment of the present application;
fig. 2 is a diagram illustrating an example of a method for sending a fragment packet according to an embodiment of the present application;
fig. 3 shows functional modules of a fragmented packet transmission apparatus provided in an embodiment of the present application;
FIG. 4 illustrates an exemplary system that can be used to implement the various embodiments described in this application.
The same or similar reference numbers in the drawings identify the same or similar elements.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", etc. indicate orientations or positional relationships based on those shown in the drawings, and are only for convenience of description and simplicity of description, but do not indicate or imply that the device or element being referred to must have a particular orientation, be constructed and operated in a particular orientation, and thus, should not be considered as limiting the present invention. Furthermore, the terms "first", "second" and "first" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, features defined as "first" and "second" may explicitly or implicitly include one or more of the described features. In the description of the present invention, "a plurality" means two or more unless specifically defined otherwise.
In this application, the word "exemplary" is used to mean "serving as an example, instance, or illustration. Any embodiment described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments. The following description is presented to enable any person skilled in the art to make and use the invention. In the following description, details are set forth for the purpose of explanation. It will be apparent to one of ordinary skill in the art that the present invention may be practiced without these specific details. In other instances, well-known structures and processes are not shown in detail to avoid obscuring the description of the invention with unnecessary detail. Thus, the present invention is not intended to be limited to the embodiments shown, but is to be accorded the widest scope consistent with the principles and features disclosed herein.
It should be noted that, since the method in the embodiment of the present application is executed in the computing device, the processing objects of each computing device exist in the form of data or information, for example, time, which is substantially time information, it can be understood that, in the subsequent embodiments, if the size, the number, the position, and the like are mentioned, corresponding data exist, so that the electronic device performs processing, and details are not described herein.
In a typical configuration of the present application, a terminal or a trusted party, etc. includes one or more processors, such as a Central Processing Unit (CPU), an input/output interface, a network interface, and a memory. The Memory may include forms of volatile Memory, Random Access Memory (RAM), and/or non-volatile Memory in a computer-readable medium, such as Read Only Memory (ROM) or Flash Memory. Memory is an example of a computer-readable medium.
Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, Phase-Change Memory (PCM), Programmable Random Access Memory (PRAM), Static Random-Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), electrically Erasable Programmable Read-Only Memory (EEPROM), flash Memory or other Memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium, which can be used to store information that can be accessed by a computing device.
The device referred to in this application includes, but is not limited to, a user device, a network device, or a device formed by integrating a user device and a network device through a network. The user equipment includes, but is not limited to, any mobile electronic product, such as a smart phone, a tablet computer, etc., capable of performing human-computer interaction with a user (e.g., human-computer interaction through a touch panel), and the mobile electronic product may employ any operating system, such as an Android operating system, an iOS operating system, etc. The network Device includes an electronic Device capable of automatically performing numerical calculation and information processing according to a preset or stored instruction, and the hardware includes, but is not limited to, a microprocessor, an Application Specific Integrated Circuit (ASIC), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Digital Signal Processor (DSP), an embedded Device, and the like. The network device includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets or a cloud of a plurality of servers; here, the Cloud is composed of a large number of computers or web servers based on Cloud Computing (Cloud Computing), which is a kind of distributed Computing, one virtual supercomputer consisting of a collection of loosely coupled computers. Including, but not limited to, the internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless Ad Hoc network (Ad Hoc network), etc. Preferably, the device may also be a program running on the user device, the network device, or a device formed by integrating the user device and the network device, the touch terminal, or the network device and the touch terminal through a network.
Of course, those skilled in the art will appreciate that the foregoing is by way of example only, and that other existing or future devices, which may be suitable for use in the present application, are also encompassed within the scope of the present application and are hereby incorporated by reference.
Fig. 1 illustrates a method for sending a fragmented Packet according to an aspect of the present application, where the method is applied to a virtual gateway, and the virtual gateway establishes a communication connection with a Deep Packet Inspection (DPI) server, and the method includes step S101, step S102, step S103, and step S104. In step S101, original message information to be forwarded in the virtual gateway is obtained, where the virtual gateway is configured to process service flows of multiple local area networks, and the original message information includes header data and user data; in step S102, obtaining encapsulated header data and encapsulated user data obtained by performing fragment processing and encapsulating on the original message information, wherein the encapsulated header data and the encapsulated user data are dispersedly stored in discontinuous data blocks by adopting chain management; in step S103, sending the encapsulation header data and the encapsulation user data fragment to a corresponding destination device; in step S104, generating mirror header data according to the encapsulation header data, and sending the mirror header data to the DPI server to complete lightweight packet inspection of the primitive packet information through the mirror header data, where the lightweight packet inspection includes analyzing a destination address, a destination port, and a protocol type of the primitive packet information. For example, with the development of Network Virtualization technology, many Network element devices are converted from traditional specific hardware to software on general hardware, such as Network Function Virtualization (NFV), specifically, Network Function Virtualization technology, and implement functions of a traditional communication Network through IT Virtualization. A Virtual Network Function (VNF) is a network element virtualized by a virtualization technology to implement a certain network function unit. The virtual gateway is composed of a plurality of VNFs and controllers, and forwarding, processing and the like of service flow are achieved. Generally, a corresponding Data Center Switch (DCSW) exists in a communication process between a terminal (UE) and a network Content Provider (ICP, Internet Content Provider), the data center switch performs data exchange through a virtual gateway, for example, a virtual switch vSwitch corresponding to a corresponding access gateway exists in the access gateway, a plurality of virtual Customer Premise Equipment (vCPE) exist in the access gateway, each virtual terminal establishes a corresponding VXLAN tunnel with a service gateway through the access gateway, and each service gateway is connected with a corresponding cloud through mech.
Specifically, in step S101, original packet information to be forwarded in the virtual gateway is obtained, where the virtual gateway is configured to process service flows of multiple local area networks, and the original packet information includes header data and user data. For example, the original message information includes data units exchanged and transmitted in the network, that is, data blocks to be sent by the station at one time. The original message information contains complete data information to be sent, and the original message information has inconsistent length, unlimited and variable length and the like. The original message information will be continuously encapsulated into packets, frames and the like for transmission in the transmission process, and the encapsulation mode is to add some information terminals, namely, data organized in a certain format corresponding to the header data. The header data includes but is not limited to message type, message version, message length, message entity, etc. In addition, the original message information also includes user data and the like related to the message information, such as the message specific content of the message. The original message information is sent to the virtual gateway by the corresponding user equipment, and is sent to the target equipment (such as corresponding local area network equipment or a server) corresponding to the destination address in the original message through the virtual gateway. The original message includes the service flow of the home internet.
In step S102, obtaining encapsulated header data and encapsulated user data obtained by performing fragment processing and encapsulating on the original message information, wherein the encapsulated header data and the encapsulated user data are dispersedly stored in discontinuous data blocks by adopting chain management. For example, internet protocol allows IP fragmentation such that when a packet is larger than the maximum transmission unit of a link, it can be broken down into many small enough fragments to be transmitted over it. When the original message datagram is fragmented, only the first fragment (e.g., header data) has a transport layer protocol header, and the remaining fragments (e.g., user ) do not contain a transport layer protocol header, but each fragment has a corresponding IP header, and each fragment becomes a packet, and each group is independent of other packets when routing. Because of the independence between packets, fragmented IP datagrams do not necessarily arrive at their destination in order, but the IP header of each fragment enables the receiving end to assemble the IP datagram fragments in the correct order. By using the IP fragmentation technology, the original message information can be subdivided and decomposed into two parts, one part comprises corresponding header data, the other part comprises corresponding user data, and the corresponding encapsulated header data and encapsulated user data are obtained by assembling the fragmented original message information. The fragmented data can be reassembled only when reaching the destination, and the encapsulation header data and the encapsulation user data are managed in a chain mode and are dispersedly stored in discontinuous data blocks, so that transmission, processing and the like are facilitated. The IP fragmentation may be performed by a computer device corresponding to the current virtual gateway, or may be performed by a network card device in communication with the computer device. The original message information includes header data and user data of a TCP/IP Protocol, and the original message information is subjected to Protocol analysis to obtain corresponding header data and user data, and the Protocol header data is subjected to Network Address Translation (NAT), a Point-to-Point Protocol (PPP) header is added, and the like, and Cyclic Redundancy Check (CRC) is updated to generate encapsulated header data.
In step S103, the encapsulation header data and the encapsulation user data fragment are sent to a corresponding destination device. For example, the destination device includes a device corresponding to a destination address in the original packet information, and forwards the encapsulated header data and the user data to the destination address through a fragment sending technology. As shown in fig. 2, after the original message data is fragmented to determine encapsulated header data and encapsulated user data, the encapsulated header data and the encapsulated user data are sent to a destination device corresponding to a destination address, and in some cases, data transmission is performed in a Direct Memory Access (DMA) manner, and meanwhile, the encapsulated header data corresponding to a mirror image is sent to a DPI server. A DMA transfer copies data from one address space to another. When the CPU initiates this transfer, the transfer itself is performed and completed by the DMA controller. When the DMA transmission is realized, the DMA controller directly manages the bus. That is, before the DMA transfer, the CPU gives the DMA controller the bus control, and after the DMA transfer is finished, the DMA controller immediately returns the bus control to the CPU. A complete DMA transfer process must go through the steps of DMA request, DMA response, DMA transfer, DMA end, etc. In other cases, for example, the fragmented transmission is implemented by a Data Plane Development Kit (DPDK) technology, and compared to the conventional network process, the network process of the DPDK technology specifically includes: 1. the process from hardware interruption to abandoning interruption; 2. the user layer gets the packet through the device mapping, enters the user layer protocol stack and transmits to the logic layer-the service layer, etc. The DPDK can reduce the interruption times and the memory copy times, bypasses the linux protocol stack, enters the user protocol stack, and a user obtains the control right of the protocol stack, so that the protocol stack can be customized, and the complexity is reduced. The scheme improves the message forwarding efficiency of the cloud gateway product, reduces the expense of mirror image message resources, and meets the requirements of higher and higher bandwidth and time delay of the service of an operator.
In some embodiments, in step S103, a direct memory access technique is adopted to send the encapsulation header data and the encapsulation user data to the corresponding destination device at a time. For example, a conventional block DMA can only transfer data of one physically contiguous block at a time, and an interrupt is initiated after the transfer is completed. The direct memory access technique includes scatter-gather DMA, which allows multiple physically discontinuous blocks to be transferred at one time, initiating only one interrupt after the transfer is complete. By means of scatter-gather DMA technology, fragmented encapsulation head data and encapsulated user data can be transmitted to a destination device at one time, and original message information and the like can be obtained by assembling at the destination device.
In step S104, generating mirror header data according to the encapsulation header data, and sending the mirror header data to the DPI server to complete lightweight packet inspection of the primitive packet information through the mirror header data, where the lightweight packet inspection includes analyzing a destination address, a destination port, and a protocol type of the primitive packet information. For example, DPI is an application type identification technique based on the application layer and the data content below the application layer. The network device may store a feature library and a corresponding relationship between a feature string included in the feature library and an application type. The network equipment can match the data in the data packet through the characteristic character string, and further determine the application type of the data packet according to the matched characteristic character string. The feature library can be set and maintained according to actual requirements. The lightweight identification is relative to DPI depth identification in terms of analysis level, specifically to identification that the target data message is smaller than a preset data amount.
For example, lightweight identification analyzes only the content below layer 4 in the target data message, including the destination address, destination port, and protocol type. The DPI server may pre-store a lightweight application name relationship table, where the lightweight application name relationship table refers to a matching table used for determining an application name according to the feature information of the original packet information, where the feature information may be a feature character string, and after the DPI server obtains the original packet information to be identified, the DPI server may specifically analyze the header data of the original packet information to obtain an application layer and related data content below the application layer. The DPI server can match the related data content with the characteristic character strings in the characteristic library so as to determine whether the characteristic character strings matched with the related data content exist, and further determine the target application name corresponding to the target data message according to the determined characteristic character strings and the corresponding relation. If the target application name corresponding to the original message information can be determined, the correspondence between the feature information of the original message information and the target application name stored in the lightweight application name relationship table is shown, and the DPI server can search the lightweight application name correspondence table to obtain the target application name corresponding to the target data message. According to the scheme, message detection on original message information is realized through light-weight message detection, huge data volume of all data of mirror images is saved, detection requirements are reduced, and processing efficiency is improved.
In some embodiments, in step S102, protocol processing is performed on the original message information in advance to obtain processed message information; and acquiring encapsulated header data and encapsulated user data obtained by performing fragment processing and encapsulating on the processed message information. For example, the protocol processing includes, but is not limited to, functions such as dial-up authentication, Routing, DHCP, NAT, and firewall, and the like, and the information in the original message information is preprocessed through the functions, so that the original message information can be smoothly communicated with the outside, or data security is enhanced. And then, the processed message information is subjected to fragmentation processing and packaging to obtain corresponding packaging head data and packaging user data.
In some embodiments, the encapsulated user data includes a plurality of encapsulated and separated user data, and in step S102, the original message information is subjected to fragmentation processing to obtain header data and user data; if the data volume of the user data is larger than the data volume threshold, carrying out fragmentation processing on the user data to obtain a plurality of separated user data; and encapsulating the header data and the plurality of separated user data to obtain encapsulated header data and a plurality of encapsulated separated user data. For example, for the data that has been fragmented, the fragmentation may be continued, so as to ensure that each data block is not greater than the Maximum Transmission Unit (MTU) of the current path, and further increase the corresponding transmission rate. If the data size of the user data is greater than a data size threshold (e.g., MTU of the current path), it is determined to fragment the user data, and the specific number of fragments may be determined according to the data size of the user data, for example, according to the data size of the user data divided by the data size threshold and a further method to obtain the corresponding number of fragments. And after fragmentation, packaging according to the header data and the plurality of separated user data to obtain packaged header data, a plurality of packaged separated user data and the like.
In some embodiments, in step S102, the original message information is sent to a network card device, so that the network card device performs fragment processing and encapsulation on the original message information to obtain encapsulation header data and encapsulation user data; and receiving encapsulation header data and encapsulation user data fed back by the network card equipment. For example, TCP is designed to solve the unreliability problem of low-speed network transmission, but with the increase of internet backbone transmission speed (fiber, gigabit ethernet, and tera ethernet) and the emergence of more reliable access mechanism for the client, the TCP software in the related data center and client desktop environment often needs to face a lot of computing requirements, which consumes a lot of CPU time. Here, we transfer the related computation work in the TCP connection process to dedicated hardware (such as a network card) through a TCP Offload Engine (TOE) technology, thereby releasing CPU resources. Currently, more and more network card devices are beginning to support the offload feature in order to improve the performance of network transceiving and processing. The offload characteristic mainly refers to that operations such as IP fragmentation, TCP fragmentation, reassembly, checksum check and the like originally performed in a protocol stack are transferred to network card hardware for performing, so that the consumption of a system CPU is reduced, and the processing performance is improved. The computer equipment corresponding to the current virtual gateway sends the original message information to the corresponding network card equipment, and the network card equipment completes fragmentation processing, packaging and the like of the original message information, so that packaging header data and packaging user data are obtained.
In some embodiments, the method further includes step S105 (not shown), if the detection failure information sent by the DPI device is received, generating corresponding mirror user data according to the encapsulated user data; and sending the mirror image user data to the DPI equipment so as to complete the deep packet inspection of the original packet information through the mirror image user data. For example, if the target application name corresponding to the original packet information cannot be determined, it indicates that the application name relationship table does not store the correspondence between the feature information of the original packet information and the target application name, in other words, the original packet information cannot be identified by the lightweight packet inspection of the DPI server, and therefore, the mirror image user data corresponding to the original packet information needs to be sent to the DPI server for deep packet inspection. For example, when the DPI server fails to identify the target application name of the original packet information through mirror header data, sending corresponding detection failure information to the control device of the virtual gateway; and after receiving the detection failure information, the control equipment of the virtual gateway generates corresponding mirror image user data according to the user data, and then sends the mirror image user data to the DPI server for the DPI server to carry out deep packet inspection. Besides the previous hierarchical analysis, the DPI depth recognition also adds application layer analysis to recognize various applications and contents thereof, so that the amount of recognition data in a target data message by the lightweight recognition is smaller than that in the target data message by the DPI depth recognition.
In some embodiments, the completing the deep packet inspection of the original packet information by the mirror user data includes: analyzing triple information and message content of the original message information according to the mirror image header data and the mirror image user data; determining a target application name corresponding to the original message information according to the message content; and updating an application name relation table according to the triple information and the target application name. For example, after the DPI server acquires the mirror image user data, it may assemble corresponding mirror image packet information together with the mirror image header data, and perform depth detection according to the mirror image packet information. For example, the DPI server analyzes the data content of the mirror image packet to obtain triple information and packet content corresponding to the mirror image packet information, where the triple information includes an IP address, a port number, and a protocol type of the target data packet, and the packet content includes content in an application identification field of the target data packet. And the DPI server matches the corresponding relation stored in the corresponding relation table of the triple information, the message content and the deep application name obtained by analysis to obtain a corresponding target application name. And then, storing the triple information and the target application name corresponding to the mirror image message information into the lightweight application name corresponding relation table, wherein the data quantity in the lightweight application name corresponding relation table continuously approaches to the data quantity in the deep application name corresponding relation table along with the continuous multiple target data message identification of the intelligent gateway, and when the lightweight application name corresponding relation table and the deep application name corresponding relation table are kept consistent, the message information can be successfully identified to obtain the corresponding target application name only through the lightweight message detection in the gateway module, so that the identification efficiency is improved.
The foregoing mainly introduces embodiments corresponding to a method for sending a fragment packet through a virtual gateway in the present application, and in addition, the present application also provides a specific apparatus capable of implementing the foregoing embodiments, which is described below with reference to fig. 3.
Fig. 3 shows an apparatus for sending a fragmented packet (also referred to as a fragmented packet sending apparatus) according to an aspect of the present application, where the apparatus is applied to a virtual gateway, and the virtual gateway establishes a communication connection with a Deep Packet Inspection (DPI) server, and the apparatus includes an obtaining module 101, a fragmentation module 102, a sending module 103, and a detection module 104. An obtaining module 101, configured to obtain original packet information to be forwarded in the virtual gateway, where the virtual gateway is configured to process service flows of multiple local area networks, and the original packet information includes header data and user data; the fragmentation module 102 is configured to obtain encapsulation header data and encapsulation user data obtained by performing fragmentation processing on the original message information and encapsulating the original message information, where the encapsulation header data and the encapsulation user data are distributed and stored in discontinuous data blocks by using chain management; a sending module 103, configured to send the encapsulation header data and the encapsulation user data fragment to a corresponding destination device; a detection module 104, configured to generate mirror image header data according to the encapsulation header data, and send the mirror image header data to the DPI server, so as to complete lightweight packet detection of the original packet information through the mirror image header data, where the lightweight packet detection includes analyzing a destination address, a destination port, and a protocol type of the original packet information.
In some embodiments, the sending module 103 is configured to send the encapsulation header data and the encapsulation user data to the corresponding destination device at a time by using a direct memory access technology.
In some embodiments, the fragmentation module 102 is configured to perform protocol processing on the original message information in advance to obtain processed message information; and carrying out fragment processing and packaging on the processed message information to obtain packaging head data and packaging user data. In some embodiments, the encapsulated user data includes a plurality of encapsulated and separated user data, and the fragmentation module 102 is configured to perform fragmentation processing on the original message information to obtain header data and user data; if the data volume of the user data is larger than the data volume threshold, carrying out fragmentation processing on the user data to obtain a plurality of separated user data; and encapsulating the header data and the plurality of separated user data to obtain encapsulated header data and a plurality of encapsulated separated user data. In some embodiments, the fragmentation module 102 is configured to send the original message information to a network card device, so that the network card device performs fragmentation processing on the original message information and encapsulates the original message information to obtain encapsulation header data and encapsulation user data; and receiving encapsulation header data and encapsulation user data fed back by the network card equipment.
Here, the specific implementation corresponding to the obtaining module 101, the slicing module 102, the sending module 103 and the detecting module 104 shown in fig. 3 is the same as or similar to the embodiment of the step S101, the step S102, the step S103 and the step S104 shown in fig. 1, and therefore, the detailed description is omitted here and is included herein by reference.
In some embodiments, the method further includes a depth detection module (not shown) configured to generate corresponding mirror user data according to the encapsulated user data if detection failure information sent by the DPI device is received; and sending the mirror image user data to the DPI equipment so as to complete the deep packet inspection of the original packet information through the mirror image user data. In some embodiments, the completing, by the mirroring user data, the deep packet inspection of the original packet information includes: analyzing triple information and message content of the original message information according to the mirror image header data and the mirror image user data; determining a target application name corresponding to the original message information according to the message content; and updating an application name relation table according to the triple information and the target application name. Here, the specific implementation manner corresponding to the depth detection module is the same as or similar to the embodiment of the step S105, and thus is not repeated here, and is included herein by way of reference.
In addition to the methods and apparatus described in the embodiments above, the present application also provides a computer-readable storage medium storing computer code that, when executed, performs the method described in any of the preceding claims.
The present application also provides a computer program product, which when executed by a computer device, performs the method of any of the preceding claims.
The present application further provides a computer device, comprising:
one or more processors;
a memory for storing one or more computer programs;
the one or more computer programs, when executed by the one or more processors, cause the one or more processors to implement the method of any preceding claim.
FIG. 4 illustrates an exemplary system that can be used to implement the various embodiments described herein;
in some embodiments, as shown in FIG. 4, the system 400 can be implemented as any of the devices described above in the various described embodiments. In some embodiments, system 400 may include one or more computer-readable media (e.g., system Memory or non-volatile Memory (non-volatile Memory) NVM/storage 420) having instructions and one or more processors (e.g., processor(s) 405) coupled with the one or more computer-readable media and configured to execute the instructions to implement modules to perform the actions described herein.
For one embodiment, system control module 410 may include any suitable interface controllers to provide any suitable interface to at least one of the processor(s) 405 and/or any suitable device or component in communication with system control module 410.
The system control module 410 may include a memory controller module 430 to provide an interface to the system memory 415. The memory controller module 430 may be a hardware module, a software module, and/or a firmware module.
For one embodiment, system control module 410 may include one or more input/output (I/O) controllers to provide an interface to NVM/storage 420 and communication interface(s) 425.
For example, NVM/storage 420 may be used to store data and/or instructions. NVM/storage 420 may include any suitable non-volatile memory (e.g., flash memory) and/or may include any suitable non-volatile storage device(s) (e.g., one or more Hard Disk Drive(s) (HDD (s)), one or more Compact Disc (CD) Drive(s), and/or one or more Digital Versatile Disc (DVD) Drive (s)).
NVM/storage 420 may include storage resources that are physically part of the device on which system 400 is installed or may be accessed by the device and not necessarily part of the device. For example, NVM/storage 420 may be accessed over a network via communication interface(s) 425.
Communication interface(s) 425 may provide an interface for system 400 to communicate over one or more networks and/or with any other suitable device. System 400 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and/or protocols.
For one embodiment, at least one of the processor(s) 405 may be packaged together with logic for one or more controller(s) of the system control module 410, such as memory controller module 430. For one embodiment, at least one of the processor(s) 405 may be packaged together with logic for one or more controllers of the System control module 410 to form a System in a Package (SiP). For one embodiment, at least one of the processor(s) 405 may be integrated on the same die with logic for one or more controller(s) of the system control module 410. For one embodiment, at least one of the processor(s) 405 may be integrated on the same die with logic for one or more controller(s) of the System control module 410 to form a System on Chip (SoC).
In various embodiments, system 400 may be, but is not limited to being: a server, a workstation, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet, a netbook, etc.). In various embodiments, system 400 may have more or fewer components and/or different architectures. For example, in some embodiments, system 400 includes one or more cameras, a keyboard, a Liquid Crystal Display (LCD) screen (including a touch screen Display), a non-volatile memory port, a plurality of antennas, a graphics chip, an Application Specific Integrated Circuit (ASIC), and a speaker.
It should be noted that the present application may be implemented in software and/or a combination of software and hardware, for example, implemented using Application Specific Integrated Circuits (ASICs), general purpose computers or any other similar hardware devices. In one embodiment, the software programs of the present application may be executed by a processor to implement the steps or functions described above. As such, the software programs (including associated data structures) of the present application can be stored in a computer readable recording medium, such as RAM memory, magnetic or optical drive or diskette and the like. Additionally, some of the steps or functions of the present application may be implemented in hardware, for example, as circuitry that cooperates with the processor to perform various steps or functions.
In addition, some of the present application may be implemented as a computer program product, such as computer program instructions, which when executed by a computer, may invoke or provide methods and/or techniques in accordance with the present application through the operation of the computer. Those skilled in the art will appreciate that the form in which the computer program instructions reside on a computer-readable medium includes, but is not limited to, source files, executable files, installation package files, and the like, and that the manner in which the computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Computer-readable media herein can be any available computer-readable storage media or communication media that can be accessed by a computer.
Communication media includes media by which communication signals, including, for example, computer readable instructions, data structures, program modules, or other data, are transmitted from one system to another. Communication media may include conductive transmission media such as cables and wires (e.g., fiber optics, coaxial, etc.) and wireless (non-conductive transmission) media capable of propagating energy waves such as acoustic, electromagnetic, RF, microwave, and infrared. Computer readable instructions, data structures, program modules, or other data may be embodied in a modulated data signal, for example, in a wireless medium such as a carrier wave or similar mechanism such as is embodied as part of spread spectrum techniques. The term "modulated data signal" means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. The modulation may be analog, digital or hybrid modulation techniques.
By way of example, and not limitation, computer-readable storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. For example, computer-readable storage media include, but are not limited to, volatile memory such as random access memory (RAM, DRAM, SRAM); and nonvolatile memories such as flash memories, various read only memories (ROM, PROM, EPROM, EEPROM), magnetic and ferromagnetic (MRAM)/Ferroelectric memories ferro electric RAM, FeRAM); and magnetic and optical storage devices (hard disk, magnetic tape, CD, DVD); or other now known media or later developed that are capable of storing computer-readable information/data for use by a computer system.
An embodiment according to the present application comprises an apparatus comprising a memory for storing computer program instructions and a processor for executing the program instructions, wherein the computer program instructions, when executed by the processor, trigger the apparatus to perform a method and/or a solution according to the aforementioned embodiments of the present application.
It will be evident to those skilled in the art that the present application is not limited to the details of the foregoing illustrative embodiments, and that the present application may be embodied in other specific forms without departing from the spirit or essential attributes thereof. The present embodiments are therefore to be considered in all respects as illustrative and not restrictive, the scope of the application being indicated by the appended claims rather than by the foregoing description, and all changes which come within the meaning and range of equivalency of the claims are therefore intended to be embraced therein. Any reference sign in a claim should not be construed as limiting the claim concerned. Furthermore, it is obvious that the word "comprising" does not exclude other elements or steps, and the singular does not exclude the plural. A plurality of units or means recited in the apparatus claims may also be implemented by one unit or means in software or hardware.
The method, the apparatus, the computer device, and the storage medium for sending a fragment packet provided in the embodiments of the present application are described in detail above, and a specific example is applied in the present application to explain the principle and the implementation of the present invention, and the description of the above embodiments is only used to help understanding the method and the core idea of the present invention; meanwhile, for those skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.
Claims (10)
1. A method for sending a fragmented packet is applied to a virtual gateway, wherein the virtual gateway establishes a communication connection with a DPI server, and the method comprises the following steps:
acquiring original message information to be forwarded in the virtual gateway, wherein the virtual gateway is used for processing service flows of a plurality of local area networks, and the original message information comprises header data and user data;
acquiring encapsulation head data and encapsulation user data obtained by carrying out fragment processing on the original message information and encapsulating, wherein the encapsulation head data and the encapsulation user data are dispersedly stored in discontinuous data blocks by adopting chain management;
sending the encapsulation header data and the encapsulation user data fragment to corresponding destination equipment;
generating mirror image header data according to the encapsulation header data, and sending the mirror image header data to the DPI server so as to complete lightweight packet detection of the original packet information through the mirror image header data, wherein the lightweight packet detection comprises analyzing a destination address, a destination port and a protocol type of the original packet information.
2. The method according to claim 1, wherein the sending the encapsulated header data and encapsulated user data fragments to corresponding destination devices comprises:
and sending the encapsulated head data and the encapsulated user data to corresponding destination equipment at one time by adopting a direct memory access technology.
3. The method according to claim 1, wherein said obtaining encapsulated header data and encapsulated user data obtained by performing fragmentation processing and encapsulation on the original packet information comprises:
carrying out protocol processing on the original message information in advance to obtain processed message information;
and acquiring encapsulated header data and encapsulated user data obtained by performing fragment processing and encapsulating on the processed message information.
4. The method of claim 1, wherein the encapsulated user data comprises a plurality of encapsulated split user data; the acquiring of encapsulated header data and encapsulated user data obtained by performing fragment processing and encapsulation on the original message information includes:
carrying out fragmentation processing on the original message information to obtain head data and user data;
if the data volume of the user data is larger than the data volume threshold, carrying out fragmentation processing on the user data to obtain a plurality of separated user data;
and encapsulating the header data and the plurality of separated user data to obtain encapsulated header data and a plurality of encapsulated separated user data.
5. The method according to claim 1, wherein the obtaining of encapsulated header data and encapsulated user data obtained by performing fragment processing and encapsulation on the original packet information comprises:
sending the original message information to network card equipment so that the network card equipment performs fragmentation processing and packaging on the original message information to obtain packaging header data and packaging user data;
and receiving encapsulation header data and encapsulation user data fed back by the network card equipment.
6. The method of claim 1, further comprising:
if the detection failure information sent by the DPI server is received, generating corresponding mirror image user data according to the encapsulated user data;
and sending the mirror image user data to the DPI server so as to complete the deep packet inspection of the original packet information through the mirror image user data.
7. The method of claim 6, wherein the performing deep packet inspection of the original packet information through the mirrored user data comprises:
analyzing triple information and message content of the original message information according to the mirror image header data and the mirror image user data;
determining a target application name corresponding to the original message information according to the message content;
and updating an application name relation table according to the triple information and the target application name.
8. An apparatus for sending a fragmented packet, which is applied to a virtual gateway, where the virtual gateway establishes a communication connection with a DPI server, and the apparatus includes:
an obtaining module, configured to obtain original packet information to be forwarded in the virtual gateway, where the virtual gateway is configured to process service flows of multiple local area networks, and the original packet information includes header data and user data;
the fragmentation module is used for acquiring encapsulation head data and encapsulation user data obtained after fragmentation processing and encapsulation are carried out on the original message information, wherein the encapsulation head data and the encapsulation user data are subjected to chain management and are dispersedly stored in discontinuous data blocks;
the sending module is used for sending the encapsulation header data and the encapsulation user data fragments to corresponding destination equipment;
and the detection module is used for generating mirror image header data according to the encapsulation header data and sending the mirror image header data to the DPI server so as to complete the lightweight message detection of the original message information through the mirror image header data, wherein the lightweight message detection comprises the analysis of a destination address, a destination port and a protocol type of the original message information.
9. An apparatus for sending a fragmented packet, the apparatus comprising:
one or more processors;
a memory; and
one or more application programs, wherein the one or more application programs are stored in the memory and configured to perform operations of the method of any of claims 1-7 by the processor.
10. A computer-readable storage medium, having stored thereon a computer program which is loaded by a processor to perform operations of the method according to any one of claims 1 to 7.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110164217.6A CN112968844B (en) | 2021-02-05 | 2021-02-05 | Method and device for sending fragment message |
| PCT/CN2021/135676 WO2022166359A1 (en) | 2021-02-05 | 2021-12-06 | Method and apparatus for sending fragmented packets |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110164217.6A CN112968844B (en) | 2021-02-05 | 2021-02-05 | Method and device for sending fragment message |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112968844A CN112968844A (en) | 2021-06-15 |
| CN112968844B true CN112968844B (en) | 2022-05-31 |
Family
ID=76274791
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110164217.6A Active CN112968844B (en) | 2021-02-05 | 2021-02-05 | Method and device for sending fragment message |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN112968844B (en) |
| WO (1) | WO2022166359A1 (en) |
Families Citing this family (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112968844B (en) * | 2021-02-05 | 2022-05-31 | 武汉绿色网络信息服务有限责任公司 | Method and device for sending fragment message |
| CN113691619B (en) * | 2021-08-24 | 2023-01-10 | 北京天融信网络安全技术有限公司 | Message processing method and device, electronic equipment and storage medium |
| CN115361347A (en) * | 2022-08-18 | 2022-11-18 | 山东新华医疗器械股份有限公司 | Communication method, device and medium of CT (computed tomography) equipment |
| CN115134171B (en) * | 2022-08-30 | 2022-11-29 | 湖南麒麟信安科技股份有限公司 | Method, device, system and medium for encrypting storage message under isolated network environment |
| CN115499332B (en) * | 2022-09-13 | 2023-12-15 | 科东(广州)软件科技有限公司 | Method, device, equipment and medium for monitoring network message |
| CN115391792B (en) * | 2022-10-26 | 2023-02-07 | 北京邮电大学 | Fuzzy test method and related equipment |
| CN115643101A (en) * | 2022-10-31 | 2023-01-24 | 重庆长安汽车股份有限公司 | Encryption transmission method and device of communication data, electronic equipment and storage medium |
| CN116016242B (en) * | 2023-01-11 | 2023-06-06 | 南京易科腾信息技术有限公司 | NAT log acquisition method, system and storage medium based on OVS architecture |
| CN118400449B (en) * | 2024-06-27 | 2024-08-23 | 杭州迪普科技股份有限公司 | Scheduling normalization management method and device for multi-main-body safety forwarding module |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102404197A (en) * | 2010-09-15 | 2012-04-04 | 思科技术公司 | Data path processing information included in the pseudowire layer of packets |
| CN103733592A (en) * | 2011-08-11 | 2014-04-16 | 西门子公司 | Method and device for establishing an end-to-end communication between two networks |
| CN103973645A (en) * | 2013-01-30 | 2014-08-06 | 华为技术有限公司 | Data transmission method and data transmission device |
| CN104219178A (en) * | 2013-06-04 | 2014-12-17 | 中兴通讯股份有限公司 | Openflow-based control message processing method, Openflow-based control message transmitting device, Openflow-based control message receiving device and Openflow-based control message processing system |
| CN108123894A (en) * | 2017-12-22 | 2018-06-05 | 湖南卫导信息科技有限公司 | A kind of method that the transmission of sampled data stream low latency is realized based on ten thousand Broadcoms of Intel |
| CN109039945A (en) * | 2018-07-05 | 2018-12-18 | 烽火通信科技股份有限公司 | A kind of transmission method and device of protocol massages |
| CN109561021A (en) * | 2017-09-25 | 2019-04-02 | 华为技术有限公司 | A kind of method and the network equipment of message forwarding |
| CN111404817A (en) * | 2020-03-24 | 2020-07-10 | 深圳市吉祥腾达科技有限公司 | Method and system for improving fragment data packet forwarding performance of network communication equipment |
| CN111901255A (en) * | 2020-06-10 | 2020-11-06 | 中国电信股份有限公司重庆分公司 | Method and device for fast packet mirror forwarding of network equipment |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8489961B2 (en) * | 2009-10-19 | 2013-07-16 | Lg Electronics Inc. | Transmitting system and method of processing digital broadcast signal in transmitting system, receiving system and method of receiving digital broadcast signal in receiving system |
| CN101795480B (en) * | 2009-11-10 | 2012-10-17 | 常熟理工学院 | Route implementing system for total IP communication of wireless sensor network and IPv6 network |
| US10389542B2 (en) * | 2017-01-26 | 2019-08-20 | International Business Machines Corporation | Multicast helper to link virtual extensible LANs |
| CN111404765B (en) * | 2019-01-02 | 2021-10-26 | 中国移动通信有限公司研究院 | Message processing method, device, equipment and computer readable storage medium |
| CN112039731B (en) * | 2020-11-05 | 2021-01-01 | 武汉绿色网络信息服务有限责任公司 | DPI (deep packet inspection) identification method and device, computer equipment and storage medium |
| CN112968844B (en) * | 2021-02-05 | 2022-05-31 | 武汉绿色网络信息服务有限责任公司 | Method and device for sending fragment message |
-
2021
- 2021-02-05 CN CN202110164217.6A patent/CN112968844B/en active Active
- 2021-12-06 WO PCT/CN2021/135676 patent/WO2022166359A1/en active Application Filing
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102404197A (en) * | 2010-09-15 | 2012-04-04 | 思科技术公司 | Data path processing information included in the pseudowire layer of packets |
| CN103733592A (en) * | 2011-08-11 | 2014-04-16 | 西门子公司 | Method and device for establishing an end-to-end communication between two networks |
| CN103973645A (en) * | 2013-01-30 | 2014-08-06 | 华为技术有限公司 | Data transmission method and data transmission device |
| CN104219178A (en) * | 2013-06-04 | 2014-12-17 | 中兴通讯股份有限公司 | Openflow-based control message processing method, Openflow-based control message transmitting device, Openflow-based control message receiving device and Openflow-based control message processing system |
| CN109561021A (en) * | 2017-09-25 | 2019-04-02 | 华为技术有限公司 | A kind of method and the network equipment of message forwarding |
| CN108123894A (en) * | 2017-12-22 | 2018-06-05 | 湖南卫导信息科技有限公司 | A kind of method that the transmission of sampled data stream low latency is realized based on ten thousand Broadcoms of Intel |
| CN109039945A (en) * | 2018-07-05 | 2018-12-18 | 烽火通信科技股份有限公司 | A kind of transmission method and device of protocol massages |
| CN111404817A (en) * | 2020-03-24 | 2020-07-10 | 深圳市吉祥腾达科技有限公司 | Method and system for improving fragment data packet forwarding performance of network communication equipment |
| CN111901255A (en) * | 2020-06-10 | 2020-11-06 | 中国电信股份有限公司重庆分公司 | Method and device for fast packet mirror forwarding of network equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112968844A (en) | 2021-06-15 |
| WO2022166359A1 (en) | 2022-08-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112968844B (en) | Method and device for sending fragment message | |
| CN111131037B (en) | Data transmission method, device, medium and electronic equipment based on virtual gateway | |
| US10587544B2 (en) | Message processing method, processing server, terminal, and storage medium | |
| EP3239984B1 (en) | Methods and systems for analyzing record and usage in post package repair | |
| US20180262388A1 (en) | Remote device deployment | |
| WO2023005773A1 (en) | Message forwarding method and apparatus based on remote direct data storage, and network card and device | |
| US9374241B2 (en) | Tagging virtual overlay packets in a virtual networking system | |
| US8544025B2 (en) | Efficient data transfer on local network connections using a pseudo socket layer | |
| CN112350918B (en) | Service traffic scheduling method, device, equipment and storage medium | |
| CN112637367B (en) | File sharing method, device, equipment and storage medium based on home network | |
| CN107332700B (en) | Method and equipment for configuring wireless routing equipment | |
| CN111405018B (en) | File transmission method and device, electronic equipment and storage medium | |
| CN109787900B (en) | Transmission method, device, equipment and machine readable medium | |
| US11218559B2 (en) | Asymmetric networking proxy | |
| WO2021180084A1 (en) | Data transmission method, nodes and storage medium | |
| US10412002B1 (en) | Processing packet data using an offload engine in a service provider environment | |
| US20230409514A1 (en) | Transaction based remote direct memory access | |
| WO2023246060A1 (en) | User authentication and authorization method and apparatus, and medium and device | |
| CN113422669A (en) | Data transmission method, device and system, electronic equipment and computer readable storage medium | |
| WO2015055008A1 (en) | Storage controller chip and disk packet transmission method | |
| US20080056263A1 (en) | Efficient transport layer processing of incoming packets | |
| CN114980359A (en) | Data forwarding method, device, equipment, system and storage medium | |
| CN113890789B (en) | UDP tunnel traffic shunting method and traffic forwarding method suitable for data center | |
| CN113114565B (en) | Data message forwarding method and device, storage medium and electronic equipment | |
| US20240039832A1 (en) | Hitless migration of interconnected data center networks for network virtualization overlay using gateways |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |