KR20060005936A - Apparatus and method for optimizing lookup memory in routing system - Google Patents

Abstract

The present invention relates to a lookup memory of a routing system. When the routing system is initialized, when the lookup memory is divided into at least one or more areas, and there is a request for adding access control list information for determining whether to forward a packet, A device and method for optimizing a look-up memory for reducing the waste of look-up memory by classifying and storing the access control list information in a divided area of the look-up memory and optimizing the number of entries stored in the look-up memory.

Routing System, Lookup Memory, Optimization, Entry, TCAM, ZBT SRAM

Description

Apparatus and method for optimizing lookup memory of routing system {APPARATUS AND METHOD FOR OPTIMIZING LOOKUP MEMORY IN ROUTING SYSTEM}

1 is a diagram illustrating a conventional routing system.

2 is a diagram illustrating a connection relationship between memories of a conventional routing system.

3 illustrates an example of an entry expanded in a memory of a conventional routing system.

4 illustrates a lookup memory optimization apparatus of a routing system according to an exemplary embodiment of the present invention.

5 is a diagram illustrating a connection relationship between memories in a look-up memory optimization apparatus according to an exemplary embodiment of the present invention.

6 is a flowchart illustrating an operation flowchart corresponding to a method for adding an entry of a look-up memory optimizer according to an exemplary embodiment of the present invention.

7A to 7B are diagrams illustrating information generated in the process of performing an entry addition operation of the lookup memory optimizer illustrated in FIG. 6.

8 is a flowchart illustrating an operation flowchart corresponding to a lookup processing operation of the apparatus for optimizing a lookup memory according to an exemplary embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

400: network processor 402: interface unit

404: entry management unit 406: control unit

408: lookup processing unit 410: TCAM

412: first storage unit 414: second storage unit

420: auxiliary memory 422: first auxiliary storage

424: secondary storage unit

The present invention relates to lookup memory optimization of a routing system, and more particularly, to a lookup memory optimization apparatus and method for reducing the waste of lookup memory by optimizing the number of routing entries stored in the lookup memory.

The IP lookup technology currently proposed for the development of a high-speed router is largely based on hardware using a content addressable memory (hereinafter referred to as "CAM"), caching, and large memory structures. And technology based on software such as LC (Level Compressed) tree, hashing, and multi-bit trie. The implementation of IP address lookup by software has the advantage of being more flexible and easily applied by modification of protocol. However, it has the disadvantage of being slower than hardware-based IP lookup technology at high packet throughput. As a result, today's major router vendors produce high-speed routers that perform IP address lookups by hardware.

Used to implement the IP lookup function by hardware, the CAM performs the exact match search operation in one clock cycle. The CAM compares the input search key in parallel with all entries in the CAM, i.e. all elements stored in segments physically partitioned within the CAM, and as a result, the element matching the search key is stored. Print the addresses of the physical segments. If there is any data related to the matched element, this data is also output. In this way, the CAM can be quickly searched by comparing the search key with all entries in the CAM in parallel and outputting them, which typically takes a very short latency time of 10 to 20 ns.

On the other hand, the ternary CAM is a kind of more flexible CAM that can compare the input search key with the storage elements of various lengths, and has three states: logic '1' state and logic '0' state. And store information using a 'don't care' state.

A conventional routing system using such a ternary CAM is shown in FIG. 1.

As shown in FIG. 1, the conventional routing system includes a network processor 100, a ternary CAM 110, and an auxiliary memory 120.

The network processor 100 includes an interface unit 102, an entry management unit 104, and a lookup processing unit 106.

The interface unit 102 adds / deletes arbitrary ACLs to the access control list (hereinafter referred to as "ACL") information and the ternary CAM 110 inputted from a user through a command line interface (CLI). The entry management information 104 including the information to be provided is provided to the entry management unit 104. Here, the ACL represents information for determining whether to forward the packet transmitted to the routing system, and the information included in the ACL may vary according to a user's needs. For example, the ACL may include information about a source IP address, a destination IP address, a reception port number, a transmission port number, a protocol type, and packet forwarding, but is not limited thereto.

When the entry management information provided by the interface unit 102 is information for adding an arbitrary ACL, the entry management unit 104 converts the ACL input from the user through the CLI into the entry format of the ternary CAM 110 and then turns it. Store it in the CAM 110. Meanwhile, when the entry management information provided by the interface unit 102 is information for deleting any ACL stored in the ternary CAM 110, the entry manager 104 deletes the corresponding ACL stored in the ternary CAM 110. do.

When the packet is received, the lookup processor 106 classifies the received packet according to an entry format of a preset ACL, and then uses a ACL of the classified received packet to check whether the received packet is forwarded or not. Look up 110 and the auxiliary memory 120.

The lookup processor 106 determines whether to forward the ternary CAM 110 and the auxiliary memory 120 according to the forwarding information of the received packet obtained as a result of the lookup.

The ternary CAM 110 stores at least one ACL, and the auxiliary memory 120 stores packet forwarding information including information on whether to forward a packet corresponding to the ACL, and ZBT (Zero Bus Turnaround). ) May be implemented as SRAM. The information on whether the packet is forwarded includes information on permit / deny of forwarding of the packet received by the network processor.

2 is a diagram illustrating a connection relationship between the ternary CAM 110 and the auxiliary memory 120.

As shown in FIG. 2, the ACL of the ternary CAM 110 and the packet forwarding information of the auxiliary memory 120 correspond to each other, and the ACL entry stored in the ternary CAM 110 corresponds to the source IP from which the packet is generated. Source port number indicating the address, the destination IP address to which the packet is finally transmitted, the port number of the network processor 100 from which the packet was received, and the port number to which the packet is to be transmitted from the network processor 110 to the destination IP address. It includes a destination port number, indicating the protocol information for the packet transmission between the terminal of the source IP address and the terminal of the destination IP address.

In the ACL entry shown in FIG. 2, the source port number and the destination port number can be represented by 16 bits, respectively. Therefore, there may be 65536 (2 ¹⁶ ) source port numbers and destination port numbers, respectively.

FIG. 3 is a view showing entries of the ternary CAM 110 in which the 65536 individual source port numbers and destination port numbers are reduced to 30 through entry expansion among the ACL entries shown in FIG.

Referring to FIG. 3, when the source port number range / destination port number range is 1 to 65534, that is, when there are 65535 source port / destination ports, the source port entry / target port entry is 30 for each ACL. It can be present in pieces. For example, the second entry is represented as "000000000000001x", which indicates that the least significant bit logic '0' and logic '1' of "0000000000000010" and "0000000000000011" are obtained through don't care. Indicates. As a result, 900 entries (30 source port entries x 30 destination port entries) may exist in the ternary CAM 110 for one ACL. The ACL entry stored in the ternary CAM 110 is composed of five tuples of a source IP address, a destination IP address, a source / destination port number, and a protocol, and total 104 bits. Accordingly, the entry of the ACL as shown in FIG. 2 may occupy as much as '104 x 900 (93600)' bits in the ternary CAM 110.

However, among the five tuples of ACL entries, the source IP address, the destination IP address, and the protocol are equally applicable to the expanded entry, so the memory area of '72 x 900 (64800) 'bits in the ternary CAM 110 is applied. It can be a waste. This case is the case of IPv4, and when applied to IPv6, the source IP address (128 bits), the destination IP address (128 bits), and the protocol (8 bits) must be supported, which is wasted in the ternary CAM 110. There will be more memory areas.

Accordingly, an object of the present invention is to provide a look-up memory optimization apparatus and method for reducing the waste of look-up memory by optimizing the number of routing entries stored in the look-up memory. There is this.

In the routing system including a look-up memory according to an aspect of the present invention for achieving the above object, the method for optimizing the look-up memory, during initialization of the routing system, partitioning the look-up memory into at least one area, whether the packet forwarding Classifying and storing the access control list information in the divided region of the lookup memory when there is a request for addition of the access control list information for determining Processing forwarding of the received packet using stored access control list information.

The access control list information includes source IP address information from which the packet is generated, destination IP address information to which the packet is to be transmitted, reception port information indicating a port number at which the packet is received by the routing system, and the packet from the routing system. Destination port information indicating a port number for transmission to a next path, protocol information for communication between a terminal of the source IP address and a terminal of the destination IP address, identifier information for identifying the access control list information, and the packet At least one of forwarding progress information indicating whether forwarding to the next path in the routing system.

The classifying and storing the access control list information in a divided area of the lookup memory may include storing at least one of the source IP address, a destination IP address, and protocol information in a first area of the lookup memory. Storing at least one of identifier information, source port information, and destination port information in a second area of the lookup memory, storing the identifier information in a third area of the lookup memory, and forwarding progress information of the packet. And storing the fourth area of the lookup memory.

The method for optimizing a lookup memory according to an aspect of the present invention may include checking whether a range of a source / destination port exists in the received access control list information, and when the range of the source / destination port exists, The method may further include determining the number of entries of the access control list to be stored in the lookup memory according to the range of the target port.

The processing of forwarding may include checking whether information matching the transmission / reception information of the received packet is in the first area of the lookup memory, and if there is information matching the transmission / reception information of the received packet, Checking whether the interface information of the routing system including the identifier information of the third region mapped to the information of the first region matched with the transmission / reception information exists in the second region, and if there is interface information of the routing system, And processing the forwarding of the received packet according to the packet forwarding progress information stored in the fourth region mapped with the interface information of the routing system.

Transmitting and receiving information of the received packet may include at least one of source IP address information from which the packet is generated, destination IP address information to which the packet is transmitted, and protocol information for communication between the terminal of the source IP address and the terminal of the destination IP address. It includes either.

The interface information of the routing system is selected from among the identifier information, reception port information indicating a port number at which the packet is received by the routing system, and destination port information indicating a port number for the packet from the routing system to the next path. It includes at least one.

On the other hand, the memory according to an aspect of the present invention, the first area for storing the transmission and reception address information of at least one packet, and the second area for storing the network interface information via the packet to be transmitted from the source to the destination A first storage unit comprising: a first region mapped with the transmission / reception address information stored in the first region of the first storage unit, and storing identifier information for retrieving network interface information corresponding to the transmission / reception address information; And a second storage unit mapped to the network interface information stored in the second area of the first storage unit and including a second area for storing information on whether to forward the packet received through the network interface.

The transmission / reception information of the packet may include at least one of source IP address information from which the packet is generated, destination IP address information to which the packet is transmitted, and protocol information for communication between a terminal located at the source IP address and a terminal located at the destination IP address. It includes either.

The network interface information includes at least one of the identifier information, port information on which the packet is received through a network interface, and port information on which the packet is transmitted from a network interface.

The information on whether the received packet is forwarded may be at least one of whether the received packet is allowed to transmit to the next path or not at the network interface.

The first storage unit may be implemented as a ternary cam.

The second storage unit may be implemented with ZBT SRAM.

In addition, the apparatus for optimizing a lookup memory of a routing system including a lookup memory according to an aspect of the present invention may include: an area divider for partitioning the lookup memory into at least one memory when the routing system is initialized, and whether a packet is forwarded or not; A classification processing unit for classifying and storing the access control list information in the area-divided lookup memory when there is a request for addition of the access control list information for determining, and if an arbitrary packet is received, stored in the area-divided lookup memory. And a forwarding processor configured to process forwarding of the received packet by using access control list information.

The lookup memory stores at least one of source IP address information from which the packet is generated, destination IP address information to which the packet is transmitted, and protocol information for communication between the terminal of the source IP address and the terminal of the destination IP address. Identification information for identifying the first area and the access control list information, reception port information indicating the number of the port where the packet is received by the routing system, and port number for the packet to be transmitted from the routing system to the next path. A first storage unit including a second area for storing at least one of the target port information, and a first area mapped with the first area of the first storage unit and storing identifier information for identifying the access control list information And forwards the packet to a second area of the first storage unit and forwards the packet to the next path in the routing system. And a second storage unit configured to store packet forwarding progress information indicating whether the ding proceeds.

The forwarding processor may be configured to: a) check whether information matching the transmission / reception information of the received packet exists in the first area of the look-up memory, and b) if there is information matching the transmission / reception information of the received packet. Determination unit for determining whether the interface information of the routing system including the identifier information mapped to the information stored in the first region that matches the transmission and reception information in the second region, if there is interface information of the routing system, the routing And a forwarding unit to determine whether to forward the received packet according to packet forwarding progress information stored in a fourth region mapped with interface information of a system.

The interface information of the routing system is selected from among the identifier information, reception port information indicating a port number at which the packet is received by the routing system, and destination port information indicating a port number for the packet from the routing system to the next path. It includes at least one.

Hereinafter, an apparatus and a method for optimizing a lookup memory of a routing system according to the present invention will be described in detail with reference to the accompanying drawings.

In addition, it should be noted that the same reference numerals are given to the same elements, although belonging to different drawings for convenience of understanding.

4 is a diagram illustrating a lookup memory optimization apparatus of a routing system according to an exemplary embodiment of the present invention.

As shown in FIG. 4, the lookup memory optimization apparatus of the routing system includes a network processor 400, a ternary CAM 410, and an auxiliary memory 420.

The network processor 400 includes an interface unit 402, an entry manager 404, a controller 406, and a lookup processor 408.

The interface unit 402 provides the entry management unit 404 with ACL information and entry management information input from the user through the CLI. Here, the ACL information and the entry management information have the same meaning as the ACL information and the entry management information described in FIG. 1, and thus description thereof will be omitted.

When the entry management information provided by the interface unit 402 is information for adding an arbitrary ACL, the entry management unit 404 converts the ACL into the entry format of the ternary CAM 410 to convert the ternary CAM 410. Store in On the other hand, when the entry management information provided by the interface unit 402 is information for deleting any ACL stored in the ternary CAM 410, the entry manager 404 deletes the corresponding ACL stored in the ternary CAM 410. do.

The lookup processor 406 converts the received packet into an entry format of a preset ACL and uses the ACL of the format-converted packet to check whether the received packet is forwarded or not, with the ternary CAM 410 and the auxiliary memory. Look up (420).

The lookup processing unit 406 determines whether to forward the ternary CAM 410 and the auxiliary memory 420 according to the forwarding information of the received packet according to the lookup result.

The controller 406 divides the ternary CAM 410 into a first storage unit 412 and a second storage unit 414 when the network processor 400 is initialized, and the auxiliary memory 420 as a first auxiliary unit. The area is divided into a memory 422 and a second auxiliary memory 424.

The ternary CAM 410 includes a first storage unit 412 and a second storage unit 414. The first storage unit 41 stores first entry information of at least one or more ACLs received from the entry manager 404. The first entry information of the ACL corresponds to the second entry information search number stored in the first auxiliary storage unit 422 of the auxiliary memory 420. Herein, description of the first entry information and the second entry information search number will be made with reference to FIG. 5.

The second storage unit 414 stores the second entry information corresponding to the second entry information search number stored in the first auxiliary storage unit 422 of the auxiliary memory 420. The second entry information corresponds to packet forwarding information stored in the second auxiliary storage unit 424 of the auxiliary memory 420. Here, the description of the second entry information and the packet forwarding information will be described with reference to FIG. 5. On the other hand, the auxiliary memory 420 may be implemented as a ZBT SRAM.

FIG. 5 is a diagram illustrating a relationship between the ternary CAM 410 and the auxiliary memory 420 illustrated in FIG. 4, and illustrates information stored in the ternary CAM 410 and the auxiliary memory 420, respectively.

As shown in FIG. 5, first entry information of an ACL is stored in the first storage unit 412 of the ternary CAM 410, and the first entry information of the ACL is a source IP address (32 bits) It contains three fields: IP address (32 bits) and Protocol (8 bits). A second entry information search number (ACL Number, 32 bits) corresponding to the first entry information of the ACL is stored in the first auxiliary storage unit 422. Here, the second entry information search number is a number for searching for the second entry information stored in the second storage unit.

Meanwhile, second entry information corresponding to the second entry information search number stored in the first auxiliary storage unit 422 is stored in the second storage unit 414, and the second entry information is searched for the second entry information. It includes three fields: number (ACL Number, 16 bits), source port (16 bits) and destination port (16 bits).

The second entry information stored in the second storage unit 414 corresponds to the packet forwarding information stored in the second auxiliary storage unit 424. The packet forwarding information is information for determining whether a packet received by the network processor 400 is forwarded, and includes information on granting / denying of packet forwarding.

6 is a flowchart illustrating an operation flowchart corresponding to a method of adding an entry to the ternary CAM 410 and the auxiliary memory 420 in the lookup memory optimization apparatus of the routing system according to an exemplary embodiment of the present invention.

As shown in FIG. 6, when an ACL input by the user through the CLI is received from the interface unit 402 (S600), the entry manager 404 inspects a source port field among information constituting the ACL. It is checked whether there is a source port range (S602). Here, an example of the ACL entered by the user through the CLI is illustrated in FIG. 7A. As shown in FIG. 7A, the ACL input by the user through the CLI includes a second entry information search number field 700, a packet forwarding information field 702, a protocol field 704, and a source IP address field 706. , A source port field 708, a destination IP address field 710, and a destination port field 712. That is, in the ACL input by the user through the CLI, the second entry information search number field 700 is '10002', and the packet forwarding information field 702 is the destination IP address of the packet received by the network processor 400. Indicates that the forwarding has been 'permit', the protocol field 704 indicates that the type of protocol is' 1 ', the source IP address field 706 indicates that the source IP address is '10 .1.1.2', and the source port field 708 indicates that the source port number is between '1 and 13', the destination IP address field 710 indicates that the destination IP address is '10 .1.2.2 ', and the destination port field 712 indicates that the destination port number is' 21'. '

As a result of determining the source port range in step S602, as shown in the ACL of FIG. 7A, since the source port number range is between '1 and 13', the entry manager 404 performs an entry expansion on the source port number ( S604). Here, the result of entry expansion for the source port number is shown in Fig. 7B. As shown in FIG. 7B. Since the source port number range is '1 to 13', the total source ports are 13, whereas as a result of the entry expansion, the source ports can be represented by a total of 6 entries. In other words, if the source port number '2' is represented by binary expression, it is '0010' and the source port number '3' is represented by binary expression is '0011'. In this way, the least significant bits' 0 'and' 1 'of the source port numbers' 0010' and 1011 'converted to binary expressions are processed by the money, so that the entry' 001x 'can be represented.

After expanding the entry for the source port, the entry manager 404 checks whether the destination port number range exists by checking the destination port field of the ACL shown in FIG. 7A (S606).

As shown in FIG. 7A, the entry manager 404 generates six entries for the source port using the ACL inputted through the CLI because the target port number is '21' and there is no target port number range. For example, one entry for the destination port is generated (S610) and then stored in the ternary CAM 410 and the auxiliary memory 420.

8 is a flowchart illustrating an operation flowchart corresponding to a lookup processing operation on a received packet of the lookup memory optimization apparatus of the routing system according to an exemplary embodiment of the present invention.

As shown in FIG. 8, when an arbitrary packet is received (S800), the lookup processing unit 408 extracts a component of first entry information from among information included in the received packet. The first storage unit 412 looks up whether there is the same entry information as the extracted first entry information (S802), and checks whether there is entry information corresponding to the first entry information extracted from the received packet (S804). When the first storage information 412 includes first entry information extracted from the received packet, that is, entry information matching three tuples of source IP address information, destination IP address information, and protocol information, the lookup processing unit 408 The second storage unit 414 is stored in the first storage unit 412 using the second entry information search number stored in the first auxiliary storage unit 422 corresponding to the entry information matched with the extracted first entry information. Look up (S806). As a result of looking up the second storage unit 414, when there is second entry information corresponding to the second entry information search number (S808), the lookup processing unit 408 searches for packet forwarding information corresponding to the second entry information. In order to look up the second auxiliary storage unit 424 (S810).

Thereafter, the lookup processor 408 performs a forwarding operation of the received packet according to the packet forwarding information obtained by looking up the second auxiliary storage 424 (S812).

Although the present invention has been described in detail only with respect to the described embodiments, it will be apparent to those skilled in the art that various modifications and changes are possible within the technical spirit of the present invention, and such modifications and modifications belong to the appended claims.

According to the lookup memory optimization apparatus of the routing system of the present invention as described above, by optimizing the entries stored in the lookup memory, N ACLs [source IP address (32-bit), destination IP address in the existing lookup memory in the case of IPv4]. (32 bits), protocol (8 bits), source port (16 bits), destination port (16 bits)], memory space equal to 104 x N x 900 (93600 N) bits is required. When N ACLs are supported in the applied lookup memory, memory space of '72N (source IP address, destination IP address, protocol) + 32 (source port, destination port) N900' bit is needed for IPv4. Memory space can be reduced.

Also, in case of IPv6, N ACLs (source IP address (128 bits), destination IP address (128 bits), protocol (8 bits), source port (16 bits), destination port (16 bits)) in the existing lookup memory. When supporting N2, the memory space of '296 × N × 900 (266400N)' bits is required, but when supporting N ACLs in the lookup memory to which the present invention is applied, '264N (source IP address, destination IP address) , Protocol) + 32 (source port, destination port) N900 'bit of memory space is required, so memory space can be reduced than before.

Claims (19)

In a lookup memory optimization method in a routing system including a lookup memory, When the routing system is initialized, dividing the lookup memory into at least one region; Classifying and storing the access control list information in a divided area of the lookup memory when there is a request for adding access control list information for determining whether to forward the packet;  And if any packet is received, processing forwarding of the received packet using access control list information stored in the area-divided lookup memory. The method of claim 1, The access control list information, Source IP address information from which the packet is generated, destination IP address information to which the packet is to be transmitted, receiving port information indicating a number of a port where the packet is received by the routing system, and a port for transmitting the packet from the routing system to the next path. Destination port information indicating a number of protocol information, protocol information for communication between the terminal of the source IP address and the terminal of the destination IP address, identifier information for identifying the access control list information, and the packet from the routing system to the next path. The lookup memory optimization method comprising at least one of the forwarding progress information indicating whether the forwarding progress. The method of claim 1, The classifying and storing the access control list information in the divided area of the lookup memory may include: Storing at least one of the source IP address, the destination IP address, and protocol information in a first area of the lookup memory; Storing at least one of the identifier information, source port information, and destination port information in a second area of the lookup memory; Storing the identifier information in a third area of the lookup memory; And storing the forwarding progress information of the packet in a fourth area of the lookup memory. The method of claim 1, Checking whether a range of a source / destination port exists among the received access control list information; And determining the number of entries of the access control list to be stored in the lookup memory according to the range of the source / destination port, if the range of the source / destination port exists. The method of claim 1,  The step of processing the forwarding, Checking whether information matching the transmission / reception information of the received packet is in a first area of the lookup memory; If there is information that matches the transmission / reception information of the received packet, whether the interface information of the routing system including the identifier information of the third area that is mapped to the information of the first area that matches the transmission / reception information exists in the second area. Checking the steps, And if there is interface information of the routing system, processing forwarding of the received packet according to packet forwarding progress information stored in a fourth region mapped with the interface information of the routing system. The method of claim 5, Transmission and reception information of the received packet is, Look-up memory optimization including at least one of source IP address information from which the packet is generated, destination IP address information from which the packet is transmitted, and protocol information for communication between the terminal of the source IP address and the terminal of the destination IP address. Way. The method of claim 5, Interface information of the routing system, A lookup memory including at least one of the identifier information, reception port information indicating a port number of the packet received by the routing system, and destination port information indicating a port number for the packet to be transmitted from the routing system to the next path. Optimization method. A first storage unit including a first area for storing transmission and reception address information of at least one packet, and a second area for storing network interface information through which the packet is transmitted from a source to a destination; A first area mapped to transmission / reception address information stored in a first area of the first storage unit and storing identifier information for retrieving network interface information corresponding to the transmission / reception address information, and a second area of the first storage unit. And a second storage unit mapped to the stored network interface information and including a second area for storing information about whether to forward the packet received through the network interface. The method of claim 8, Transmission and reception information of the packet, And at least one of source IP address information from which the packet is generated, destination IP address information to which the packet is transmitted, and protocol information for communication between a terminal located at the source IP address and a terminal located at the destination IP address. The method of claim 8, The network interface information, And at least one of the identifier information, port information at which the packet is received at a network interface, and port information at which the packet is transmitted from a network interface. The method of claim 8, Information on whether the received packet forwarding progress, And the received packet is at least one of a transmission permission or a transmission rejection to a next path at the network interface. The method of claim 8, The first storage unit, Memory implemented with the Ternary CAM. The method of claim 8, The second storage unit, Memory implemented with ZBT SRAM. In the lookup memory optimization apparatus of a routing system including a lookup memory, An area divider configured to divide the lookup memory into at least one memory upon initialization of the routing system; A classification processing unit for classifying and storing the access control list information in the area-divided lookup memory when there is a request for adding access control list information for determining whether to forward the packet; And a forwarding processor configured to process forwarding of the received packet by using access control list information stored in the area-divided lookup memory when an arbitrary packet is received. The method of claim 14, The access control list information, Source IP address information from which the packet is generated, destination IP address information to which the packet is to be transmitted, receiving port information indicating a number of a port where the packet is received by the routing system, and a port for transmitting the packet from the routing system to the next path. Destination port information indicating a number of protocol information, protocol information for communication between the terminal of the source IP address and the terminal of the destination IP address, identifier information for identifying the access control list information, and the packet to the next path in the routing system. The apparatus for optimizing a lookup memory including at least one of packet forwarding progress information indicating whether forwarding progresses. The method of claim 14, The lookup memory, Storing at least one of a first area storing at least one of the source IP address information, destination IP address information, and protocol information, identifier information for identifying the access control list information, source port information, and destination port information. A first storage part including a second area, A first region mapped to a first region of the first storage unit and storing identifier information for identifying the access control list information, and a second region mapped to a second region of the first storage unit and storing the packet forwarding progress information Look-up memory optimization device including two storage. The method of claim 14, The forwarding processing unit, a) checking whether information matching the transmission / reception information of the received packet exists in a first area of the lookup memory, b) if there is information matching the transmission / reception information of the received packet, whether the interface information of the routing system including the identifier information mapped to the information stored in the first area matching the transmission / reception information is in the second region; Judgment unit to judge, And a forwarding unit configured to determine whether to forward the received packet according to packet forwarding progress information stored in a fourth region mapped with the interface information of the routing system when the interface information of the routing system is present. The method of claim 17, Transmission and reception information of the received packet is, Lookup memory optimization device including at least one of the source IP address information, the packet is generated, the destination IP address information to which the packet is transmitted, the protocol information for communication between the terminal of the source IP address and the terminal of the destination IP address . The method of claim 17, Interface information of the routing system, A lookup memory including at least one of the identifier information, reception port information indicating a port number of the packet received by the routing system, and destination port information indicating a port number for the packet to be transmitted from the routing system to the next path. Optimization device.

Images