CN113132241A - ACL template dynamic configuration method and device - Google Patents
ACL template dynamic configuration method and device Download PDFInfo
- Publication number
- CN113132241A CN113132241A CN202110494571.5A CN202110494571A CN113132241A CN 113132241 A CN113132241 A CN 113132241A CN 202110494571 A CN202110494571 A CN 202110494571A CN 113132241 A CN113132241 A CN 113132241A
- Authority
- CN
- China
- Prior art keywords
- target
- acl
- target service
- template
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
Abstract
The invention provides a method and a device for dynamically configuring an ACL template, which relate to the technical field of communication and comprise the following steps: responding to an adding event aiming at a target service, acquiring attribute information of the target service, and registering the target service according to the attribute information; the attribute information comprises resource information of the target service and address space information required when the target service is analyzed; then determining the position information of the target service in a preset ACL template according to the address space information; finally, configuration updating is carried out on the preset ACL template according to the target ACL rule and the position information, and a target ACL template is obtained; wherein the target ACL rule represents an ACL rule corresponding to the resource information. The invention self-defines and updates the preset ACL template according to the actual requirement of the target service, improves the use efficiency of the target ACL template, and thus increases the analysis range of the target ACL template to the target service.
Description
Technical Field
The present invention relates to the field of communications technologies, and in particular, to a method and an apparatus for dynamically configuring an ACL template.
Background
When executing a certain service, the switching chip firstly divides the resources (such as messages) in the service according to the configuration information, and then recombines the resources to generate keywords. The keyword is used for matching with an Access Control List (ACL) rule in an ACL template configured in advance by the exchange chip, and corresponding operation is performed if matching is successful. In the prior art, the information capacity (i.e., space resources) of the ACL template is limited, and the conventional ACL template uses a static ACL template, which needs to satisfy the service requirements of all products in a certain series, thereby causing the space resources of the ACL template to be used up. For a certain product, the information in the static ACL template is not all valid data. Therefore, the existing ACL template configuration method has the technical problem of low use efficiency.
Disclosure of Invention
The invention aims to provide a method and a device for dynamically configuring an ACL template, which are used for solving the technical problem of low use efficiency of the ACL template in the prior art.
In a first aspect, the present invention provides a method for dynamically configuring an ACL template, where the method includes: responding to an adding event aiming at a target service, acquiring attribute information of the target service, and registering the target service according to the attribute information; wherein the attribute information includes resource information of the target service and address space information required when the target service is analyzed; determining the position information of the target service in a preset ACL template according to the address space information; the preset ACL template is configured and updated according to the target ACL rule and the position information to obtain a target ACL template; wherein the target ACL rule represents an ACL rule corresponding to the resource information.
Further, after the preset ACL template is configured and updated according to the target ACL rule and the location information to obtain the target ACL template, the method further includes: comparing the occupied space resources of the target ACL template with the total space resources of the target ACL template, and determining a comparison result; and determining the configuration result of the target ACL template according to the comparison result.
Further, the method further comprises: and deleting the target ACL rule in the target ACL template when the target service is stopped.
Further, after determining the location information of the target service in the preset ACL template according to the address space information, the method further includes: and adding the address space information into a preset array for storage.
Further, the attribute information further includes a number of the target service.
In a second aspect, the present invention provides an apparatus for dynamically configuring an ACL template, where the apparatus includes: the system comprises an acquisition registration unit, a service registration unit and a service management unit, wherein the acquisition registration unit is used for responding to an addition event aiming at a target service, acquiring attribute information of the target service and registering the target service according to the attribute information; wherein the attribute information includes resource information of the target service and address space information required when the target service is analyzed; the first determining unit is used for determining the position information of the target service in a preset ACL template according to the address space information; the configuration updating unit is used for performing configuration updating on the preset ACL template according to a target ACL rule and the position information to obtain a target ACL template; wherein the target ACL rule represents an ACL rule corresponding to the resource information.
Further, the apparatus further comprises: the comparison unit is used for comparing the occupied space resources of the target ACL template with the total space resources of the target ACL template to determine a comparison result; and the second determining unit is used for determining the configuration result of the target ACL template according to the comparison result.
Further, the apparatus further comprises: and the deleting unit is used for deleting the target ACL rule in the target ACL template when the target service is stopped.
In a third aspect, the present invention further provides an electronic device, which includes a memory and a processor, where the memory stores a computer program that is executable on the processor, and the processor executes the computer program to implement the steps of the ACL template dynamic configuration method.
In a fourth aspect, the present invention also provides a computer readable medium having non-volatile program code executable by a processor, wherein the program code causes the processor to execute the ACL template dynamic configuration method.
The invention provides a method and a device for dynamically configuring an ACL template, comprising the following steps: responding to an adding event aiming at the target service, firstly acquiring attribute information of the target service, and registering the target service according to the attribute information; the attribute information comprises resource information of the target service and address space information required when the target service is analyzed; then determining the position information of the target service in a preset ACL template according to the address space information; finally, configuration updating is carried out on the preset ACL template according to the target ACL rule and the position information, and a target ACL template is obtained; wherein the target ACL rule represents an ACL rule corresponding to the resource information. The invention self-defines and updates the preset ACL template according to the actual requirement of the target service, improves the use efficiency of the target ACL template, and thus increases the analysis range of the target ACL template to the target service.
Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and drawings.
In order to make the aforementioned and other objects, features and advantages of the present invention comprehensible, preferred embodiments accompanied with figures are described in detail below.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings can be obtained by those skilled in the art without creative efforts.
Fig. 1 is a flowchart of a method for dynamically configuring an ACL template according to an embodiment of the present invention;
FIG. 2 is a flowchart of another ACL template dynamic configuration method provided in the embodiment of the present invention;
FIG. 3 is a flowchart of another ACL template dynamic configuration method provided in the embodiment of the present invention;
fig. 4 is a schematic structural diagram of an ACL template dynamic configuration apparatus according to an embodiment of the present invention.
Icon:
11-acquiring a registration unit; 12-a first determination unit; 13-configuration update unit.
Detailed Description
The technical solutions of the present invention will be described clearly and completely with reference to the following embodiments, and it should be understood that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The concepts of templates, ACLs and groups are given in the prior art, wherein a template: after the message enters the switch (or called as a switch chip), the message is cut according to the information configured in advance by the switch chip to form a new keyword. And for the self-defined module, configuring information in advance, namely called a template. ACL: the formed key words are compared with the rules configured in advance by the exchange chip, corresponding operation is carried out when the key words conform to the rules, and the rules configured in advance are called ACL. Group: ACLs typically exist in groups, where a group includes several ACLs. Each Group is called a Group.
After entering the exchange chip, the message is firstly segmented according to the configuration information and then recombined into keywords. And (5) immediately entering the keywords obtained after recombination into a Group, matching the keywords with the ACL in the Group, and performing corresponding operation if the matching is successful. For a custom ACL, the configuration information used by the ACL is a template, and the data capacity that the template can store is a fixed value.
Those skilled in the art generally compress the data segments and location segments that may be used into a template, which is static and is written into the system at system initialization. And when the message enters the switch, matching the message with the template, and cutting according to the information in the template to further generate the key field.
Since the information capacity (or data capacity) of the template is limited, the preset static template needs to satisfy the business requirements of all products in a certain series, and the space of the static template is used up. For a certain product, the information in the static template is not all valid data. Therefore, the current ACL template configuration method has a technical problem of low ACL template use efficiency. Therefore, the present invention is directed to provide a method and an apparatus for dynamically configuring an ACL template, which can dynamically update the configuration of a preset ACL template according to a current service (i.e., a target service described below), and can effectively improve the efficiency of using the ACL template.
In order to facilitate understanding of the embodiment, a detailed description is first given of a method for dynamically configuring an ACL template disclosed in the embodiment of the present invention.
Example 1:
in accordance with an embodiment of the present invention, there is provided an embodiment of a method for dynamic configuration of an ACL template, it should be noted that the steps illustrated in the flowchart of the drawings may be performed in a computer system such as a set of computer executable instructions, and that while a logical order is illustrated in the flowchart, in some cases the steps illustrated or described may be performed in an order different than that described herein. The ACL template dynamic configuration method can be applied to a switching chip.
Fig. 1 is a flowchart of a method for dynamically configuring an ACL template according to an embodiment of the present invention, as shown in fig. 1, the method includes the following steps:
step S101, responding to the adding event aiming at the target service, acquiring the attribute information of the target service, and registering the target service according to the attribute information. The attribute information includes resource information of the target service and address space information required when the target service is analyzed. In addition, the attribute information further includes a number of the target service, which is used to distinguish the target service. The resource information of the target service may refer to content information included in the target service, for example: and (5) message.
And step S102, determining the position information of the target service in a preset ACL template according to the address space information. The preset ACL template is short for a preset custom ACL template.
The address space in the switch chip that can be resolved is a finite space, and the minimum unit of resolution is usually one or two bytes. That is, the total space resources of the preset ACL template are limited. Therefore, for a certain type of message to be matched in the target service, a preset array with a fixed word length can be set to store information required by the preset ACL template. Taking the switch chip with model NP8360 as an example, the switch chip can identify the first 128 bytes of the message, and the unit of parsing is one byte. Therefore, the embodiment of the present invention may set a preset array: u32 g _ udfkkey [4 ]; a Byte represents a Byte, and an element at a certain position in the preset array is 0, which indicates that the position is free, and if the element is 1, which indicates that the position is occupied.
The algorithm implementation process for dynamically adding rule resources (i.e. the target ACL rules in the following step S103) to the custom ACL template according to the target service is as follows:
when a certain target service needs to use a custom ACL template, the embodiment of the present invention may register the target service and the resource information corresponding to the target service, and use the following functions:
u32 Add ServiceInList(u32 ServiceNum,u32*Conf)；
wherein, ServiceNum: a number corresponding to the target service; conf: the array pointer mapped on the custom ACL template for the resolved address needed by the target service (i.e. the address space information needed when the target service is resolved) returns the position of the resolved address in the custom ACL template (i.e. the position information of the target service in the preset ACL template) when the function execution is finished. The function is used for adding the resolving address required by the target service in the event to be added into the g _ udfkey [4], and returning the position of the address which is expected to be resolved in the custom ACL template.
And step S103, configuring and updating the preset ACL template according to the target ACL rule and the position information to obtain the target ACL template. Wherein the target ACL rule represents an ACL rule corresponding to the resource information.
After the target service is added, the embodiment of the present invention needs to perform configuration update on the preset ACL template. Therefore, the embodiment of the present invention needs to implement the above configuration update operation through the following function:
u32 CreateUdfkeyProfile(void)；
in the above function, the preset ACL template configured in advance is configured and updated according to the target ACL rule corresponding to the current target service in the embodiment of the present invention, and the configuration and update operation has certain adaptability.
The method for dynamically configuring the ACL template provided by the embodiment of the invention comprises the following steps: responding to an adding event aiming at a target service, acquiring attribute information of the target service, and registering the target service according to the attribute information; the attribute information comprises resource information of the target service and address space information required when the target service is analyzed; then determining the position information of the target service in a preset ACL template according to the address space information; finally, configuration updating is carried out on the preset ACL template according to the target ACL rule and the position information, and a target ACL template is obtained; wherein the target ACL rule represents an ACL rule corresponding to the resource information. The embodiment of the invention self-defines and updates the preset ACL template according to the actual requirement of the target service, improves the use efficiency of the target ACL template, and thus increases the analysis range of the target ACL template to the target service.
In an optional embodiment, as shown in fig. 2, in step S103, after the configuration updating is performed on the preset ACL template according to the target ACL rule and the location information, to obtain the target ACL template, the method further includes:
step S104, comparing the occupied space resources of the target ACL template with the total space resources of the target ACL template, and determining a comparison result;
and step S105, determining the configuration result of the target ACL template according to the comparison result.
The comparison result has two conditions, the first is that the occupied space resource of the target ACL template is smaller than the total space resource of the target ACL template; the second is that the occupied space resources of the target ACL template are not less than the total space resources of the target ACL template. And when the comparison result is in the first condition, determining that the configuration result of the target ACL template is successful, and when the comparison result is in the second condition, determining that the configuration result of the target ACL template is failed.
Because the preset ACL template is the ACL template before the target ACL rule is added, and the target ACL template is the ACL template after the target ACL rule is added, occupied space resources of the preset ACL template are different from occupied space resources of the target ACL template, and the total space resources of the target ACL template are consistent with the total space resources of the preset ACL template.
In the process of adding the target service, attention needs to be paid to the comparison result of the currently occupied space resource of the target ACL template and the total space resource of the target ACL template at any time, so as to prevent the overflow of the space resource from causing the failure of the configuration of the custom ACL template.
In an optional embodiment, the method further comprises: when the target service is stopped, the target ACL rules in the target ACL template are deleted.
The algorithm implementation process for dynamically deleting the rule resources of the custom ACL template according to the target service is as follows:
when a certain target service exits, the required resolution address which is not mutually exclusive with other services needs to be deleted in the corresponding target ACL template. Therefore, the embodiment of the present invention needs the following function to implement the deletion operation:
u32 DelServiceInList(u32 ServiceNum)；
wherein, ServiceNum represents the number corresponding to the target service to be exited.
Therefore, the embodiment of the invention dynamically adds or deletes the custom ACL template according to the current service requirement of the product (namely the switch), thereby improving the resource use efficiency of the custom ACL template.
In an alternative embodiment, as shown in fig. 3, after determining the location information of the target service in the preset ACL template according to the address space information in step S102, the method further includes:
and step S106, adding the address space information into a preset array for storage.
The embodiment of the present invention needs to store the resolution address required by each target service, and it should be noted that the resolution addresses required by different target services may be the same or different.
The embodiment of the invention changes the configuration of the custom ACL template from static state to dynamic state, can dynamically realize the increase and decrease of template resources, and improves the utilization rate of the template resources, thereby increasing the range of the custom ACL analysis message. Therefore, the embodiment of the invention can enable the exchange chip with lower cost to support more services and improve the competitiveness of the product.
Example 2:
the embodiment of the present invention provides an ACL template dynamic configuration device, which is mainly used to execute the ACL template dynamic configuration method provided in the above-mentioned content of embodiment 1, and the following describes the ACL template dynamic configuration device provided in the embodiment of the present invention in detail.
Fig. 4 is a schematic structural diagram of an ACL template dynamic configuration apparatus according to an embodiment of the present invention. As shown in fig. 4, the ACL template dynamic configuration apparatus mainly includes: an acquisition registration unit 11, a first determination unit 12 and a configuration update unit 13, wherein:
an acquisition registration unit 11 configured to acquire attribute information of a target service in response to an addition event for the target service, and register the target service according to the attribute information; the attribute information comprises resource information of the target service and address space information required when the target service is analyzed;
the first determining unit 12 is configured to determine, according to the address space information, location information of the target service in a preset ACL template;
the configuration updating unit 13 is configured and updated for the preset ACL template according to the target ACL rule and the position information to obtain a target ACL template; wherein the target ACL rule represents an ACL rule corresponding to the resource information.
The ACL template dynamic configuration device provided by the embodiment of the present invention includes: in response to an addition event for a target service, acquiring attribute information of the target service by using an acquisition and registration unit 11, and registering the target service according to the attribute information; the attribute information comprises resource information of the target service and address space information required when the target service is analyzed; then, the first determining unit 12 is used for determining the position information of the target service in the preset ACL template according to the address space information; finally, the configuration updating unit 13 is used for carrying out configuration updating on the preset ACL template according to the target ACL rule and the position information to obtain a target ACL template; wherein the target ACL rule represents an ACL rule corresponding to the resource information. The three units in the embodiment of the invention can self-define and configure and update the preset ACL template according to the actual requirement of the target service, thereby improving the use efficiency of the target ACL template and further increasing the analysis range of the target service by the target ACL template.
Optionally, the apparatus further comprises: a comparison unit and a second determination unit, wherein:
the comparison unit is used for comparing the occupied space resources of the target ACL template with the total space resources of the target ACL template and determining a comparison result;
and the second determining unit is used for determining the configuration result of the target ACL template according to the comparison result.
Optionally, the apparatus further comprises: and the deleting unit is used for deleting the target ACL rule in the target ACL template when the target service is stopped.
Optionally, the apparatus further comprises: and the storage unit is used for adding the address space information into a preset array for storage.
Optionally, the attribute information further includes a number of the target service.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In an optional embodiment, the present embodiment further provides an electronic device, which includes a memory and a processor, where the memory stores a computer program operable on the processor, and the processor executes the computer program to implement the steps of the method of the foregoing method embodiment.
In an alternative embodiment, the present embodiment also provides a computer readable medium having non-volatile program code executable by a processor, wherein the program code causes the processor to perform the method of the above method embodiment.
In the embodiments provided in the present embodiment, it should be understood that the disclosed method and apparatus may be implemented in other manners. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one logical division, and there may be other divisions when actually implemented, and for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection of devices or units through some communication interfaces, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit.
The functions, if implemented in the form of software functional units and sold or used as a stand-alone product, may be stored in a non-volatile computer-readable storage medium executable by a processor. Based on such understanding, the technical solution of the present embodiment or parts of the technical solution may be essentially implemented in the form of a software product stored in a storage medium and including instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.
Finally, it should be noted that: the above-mentioned embodiments are only specific embodiments of the present invention, which are used for illustrating the technical solutions of the present invention and not for limiting the same, and the protection scope of the present invention is not limited thereto, although the present invention is described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: any person skilled in the art can modify or easily conceive the technical solutions described in the foregoing embodiments or equivalent substitutes for some technical features within the technical scope of the present disclosure; such modifications, changes or substitutions do not depart from the spirit and scope of the embodiments of the present invention, and they should be construed as being included therein.
Claims (10)
1. A method for dynamically configuring an ACL template, comprising:
responding to an adding event aiming at a target service, acquiring attribute information of the target service, and registering the target service according to the attribute information; wherein the attribute information includes resource information of the target service and address space information required when the target service is analyzed;
determining the position information of the target service in a preset ACL template according to the address space information;
the preset ACL template is configured and updated according to the target ACL rule and the position information to obtain a target ACL template; wherein the target ACL rule represents an ACL rule corresponding to the resource information.
2. The method according to claim 1, wherein after the configuration update is performed on the preset ACL template according to the target ACL rule and the location information to obtain the target ACL template, the method further comprises:
comparing the occupied space resources of the target ACL template with the total space resources of the target ACL template, and determining a comparison result;
and determining the configuration result of the target ACL template according to the comparison result.
3. The method of claim 1, further comprising:
and deleting the target ACL rule in the target ACL template when the target service is stopped.
4. The method of claim 1, after determining the location information of the target service in a preset ACL template according to the address space information, further comprising:
and adding the address space information into a preset array for storage.
5. The method of claim 4, wherein the attribute information further comprises a number of the target service.
6. An apparatus for dynamically configuring an ACL template, comprising:
the system comprises an acquisition registration unit, a service registration unit and a service management unit, wherein the acquisition registration unit is used for responding to an addition event aiming at a target service, acquiring attribute information of the target service and registering the target service according to the attribute information; wherein the attribute information includes resource information of the target service and address space information required when the target service is analyzed;
the first determining unit is used for determining the position information of the target service in a preset ACL template according to the address space information;
the configuration updating unit is used for performing configuration updating on the preset ACL template according to a target ACL rule and the position information to obtain a target ACL template; wherein the target ACL rule represents an ACL rule corresponding to the resource information.
7. The apparatus of claim 6, further comprising:
the comparison unit is used for comparing the occupied space resources of the target ACL template with the total space resources of the target ACL template to determine a comparison result;
and the second determining unit is used for determining the configuration result of the target ACL template according to the comparison result.
8. The apparatus of claim 6, further comprising:
and the deleting unit is used for deleting the target ACL rule in the target ACL template when the target service is stopped.
9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method according to any of claims 1 to 5 when executing the computer program.
10. A computer-readable medium having non-volatile program code executable by a processor, the program code causing the processor to perform the method of any of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110494571.5A CN113132241B (en) | 2021-05-07 | 2021-05-07 | ACL template dynamic configuration method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110494571.5A CN113132241B (en) | 2021-05-07 | 2021-05-07 | ACL template dynamic configuration method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113132241A true CN113132241A (en) | 2021-07-16 |
| CN113132241B CN113132241B (en) | 2022-05-24 |
Family
ID=76781330
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110494571.5A Active CN113132241B (en) | 2021-05-07 | 2021-05-07 | ACL template dynamic configuration method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113132241B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116846848A (en) * | 2023-09-01 | 2023-10-03 | 常州楠菲微电子有限公司 | ACL template configuration method and device, storage medium and electronic equipment |
Citations (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060090202A1 (en) * | 2004-10-27 | 2006-04-27 | Institute For Information Industry | Methods and systems for data authorization and mobile devices using the same |
| US20070100830A1 (en) * | 2005-10-20 | 2007-05-03 | Ganesha Beedubail | Method and apparatus for access control list (ACL) binding in a data processing system |
| CN101141304A (en) * | 2007-09-18 | 2008-03-12 | 杭州华三通信技术有限公司 | Management method and equipment of ACL regulation |
| CN101197675A (en) * | 2007-11-14 | 2008-06-11 | 杭州华三通信技术有限公司 | Accesses control list configuration method and device |
| US7487548B1 (en) * | 2004-04-21 | 2009-02-03 | Symantec Corporation | Granular access control method and system |
| CN101399747A (en) * | 2007-09-27 | 2009-04-01 | 中兴通讯股份有限公司 | ACL configuration implementation method |
| US20090125470A1 (en) * | 2007-11-09 | 2009-05-14 | Juniper Networks, Inc. | System and Method for Managing Access Control Lists |
| US20090144804A1 (en) * | 2007-11-29 | 2009-06-04 | Oracle International Corporation | Method and apparatus to support privileges at multiple levels of authentication using a constraining acl |
| CN101895467A (en) * | 2010-07-08 | 2010-11-24 | 中兴通讯股份有限公司 | Method and device for filtering message |
| CN102025641A (en) * | 2010-12-27 | 2011-04-20 | 中兴通讯股份有限公司 | Message filtering method and exchange equipment |
| US20110223886A1 (en) * | 2009-09-18 | 2011-09-15 | Qualcomm Incorporated | Access point-based control of access control list |
| CN103220287A (en) * | 2013-04-11 | 2013-07-24 | 汉柏科技有限公司 | Method for service matching of messages by means of access control list (ACL) |
| CN105025029A (en) * | 2015-07-27 | 2015-11-04 | 潍坊学院 | OLT (Optical Line Terminal) equipment dynamic access control list generation method and data packet processing method |
| CN106453409A (en) * | 2016-11-28 | 2017-02-22 | 迈普通信技术股份有限公司 | Packet processing method and access device |
| CN106612188A (en) * | 2015-10-21 | 2017-05-03 | 中兴通讯股份有限公司 | Method and device for extending software function based on micro service architecture |
| CN107547680A (en) * | 2017-06-29 | 2018-01-05 | 新华三技术有限公司 | A kind of data processing method and device |
| CN110035074A (en) * | 2019-04-01 | 2019-07-19 | 盛科网络（苏州）有限公司 | A kind of chip implementing method and device of ACL matching UDF message |
-
2021
- 2021-05-07 CN CN202110494571.5A patent/CN113132241B/en active Active
Patent Citations (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7487548B1 (en) * | 2004-04-21 | 2009-02-03 | Symantec Corporation | Granular access control method and system |
| US20060090202A1 (en) * | 2004-10-27 | 2006-04-27 | Institute For Information Industry | Methods and systems for data authorization and mobile devices using the same |
| US20070100830A1 (en) * | 2005-10-20 | 2007-05-03 | Ganesha Beedubail | Method and apparatus for access control list (ACL) binding in a data processing system |
| CN101141304A (en) * | 2007-09-18 | 2008-03-12 | 杭州华三通信技术有限公司 | Management method and equipment of ACL regulation |
| CN101399747A (en) * | 2007-09-27 | 2009-04-01 | 中兴通讯股份有限公司 | ACL configuration implementation method |
| US20090125470A1 (en) * | 2007-11-09 | 2009-05-14 | Juniper Networks, Inc. | System and Method for Managing Access Control Lists |
| CN101197675A (en) * | 2007-11-14 | 2008-06-11 | 杭州华三通信技术有限公司 | Accesses control list configuration method and device |
| US20090144804A1 (en) * | 2007-11-29 | 2009-06-04 | Oracle International Corporation | Method and apparatus to support privileges at multiple levels of authentication using a constraining acl |
| US20110223886A1 (en) * | 2009-09-18 | 2011-09-15 | Qualcomm Incorporated | Access point-based control of access control list |
| CN101895467A (en) * | 2010-07-08 | 2010-11-24 | 中兴通讯股份有限公司 | Method and device for filtering message |
| CN102025641A (en) * | 2010-12-27 | 2011-04-20 | 中兴通讯股份有限公司 | Message filtering method and exchange equipment |
| CN103220287A (en) * | 2013-04-11 | 2013-07-24 | 汉柏科技有限公司 | Method for service matching of messages by means of access control list (ACL) |
| CN105025029A (en) * | 2015-07-27 | 2015-11-04 | 潍坊学院 | OLT (Optical Line Terminal) equipment dynamic access control list generation method and data packet processing method |
| CN106612188A (en) * | 2015-10-21 | 2017-05-03 | 中兴通讯股份有限公司 | Method and device for extending software function based on micro service architecture |
| CN106453409A (en) * | 2016-11-28 | 2017-02-22 | 迈普通信技术股份有限公司 | Packet processing method and access device |
| CN107547680A (en) * | 2017-06-29 | 2018-01-05 | 新华三技术有限公司 | A kind of data processing method and device |
| CN110035074A (en) * | 2019-04-01 | 2019-07-19 | 盛科网络（苏州）有限公司 | A kind of chip implementing method and device of ACL matching UDF message |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116846848A (en) * | 2023-09-01 | 2023-10-03 | 常州楠菲微电子有限公司 | ACL template configuration method and device, storage medium and electronic equipment |
| CN116846848B (en) * | 2023-09-01 | 2023-12-05 | 常州楠菲微电子有限公司 | ACL template configuration method and device, storage medium and electronic equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113132241B (en) | 2022-05-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9836346B2 (en) | Error troubleshooting using a correlated knowledge base | |
| CN109344153B (en) | Service data processing method and terminal equipment | |
| CN111147605B (en) | Service registration method, device and equipment | |
| CN113132241B (en) | ACL template dynamic configuration method and device | |
| US11093389B2 (en) | Method, apparatus, and computer program product for managing storage system | |
| CN111803917A (en) | Resource processing method and device | |
| CN111338689A (en) | File calling method, device and equipment | |
| CN111190915A (en) | Method for determining road tool identifier or role identifier, server and storage medium | |
| CN112000971B (en) | File permission recording method, system and related device | |
| CN111694703A (en) | Cache region management method and device and computer equipment | |
| CN109117351B (en) | Front-end display implementation method for Docker container cloud host and Dashboard | |
| CN111782605A (en) | Chip card file management method, device, terminal and storage medium | |
| CN111475424B (en) | Method, apparatus, and computer readable storage medium for managing a storage system | |
| US20190332484A1 (en) | Method, device and program product for reducing data recovery time of storage system | |
| CN113076086B (en) | Metadata management system and method for modeling model object using the same | |
| CN111858590B (en) | Storage system metadata organization method, system, terminal and storage medium | |
| CN117439993B (en) | Redis cluster load balancing method, device, equipment and storage medium | |
| CN113254470A (en) | Data change method and device, computer equipment and storage medium | |
| CN111459911A (en) | Service data processing method and device | |
| CN111008195A (en) | Database free space management method, system, terminal and storage medium | |
| CN116186046B (en) | Device data modification method and device, computer device and storage medium | |
| CN110674084A (en) | Method, apparatus, and computer-readable storage medium for data protection | |
| CN111651123B (en) | Processing method, device and equipment for concurrent IO (input/output) requests | |
| CN114143187B (en) | Intelligent platform interface network address management method, system, terminal and storage medium | |
| CN116431566B (en) | Data migration method, device, electronic equipment and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |