WO2023010731A1

WO2023010731A1 - Data information processing method and server

Info

Publication number: WO2023010731A1
Application number: PCT/CN2021/135684
Authority: WO
Inventors: 吴情彪; 叶志钢
Original assignee: 武汉绿色网络信息服务有限责任公司
Priority date: 2021-08-03
Filing date: 2021-12-06
Publication date: 2023-02-09
Also published as: CN113630341A; CN113630341B

Abstract

The present invention provides a data information processing method and a server. The method comprises: a network interface card saving a first data segment in a data segment buffer area, wherein the first data segment comprises first encapsulated data and initial data; during a first process, parsing the first encapsulated data to acquire a first vni therefrom, and saving the first vni in a reserved segment buffer area; during a second process, respectively extracting the initial data and the first vni from the data segment buffer area and the reserved segment buffer area, and saving, in the reserved segment buffer area, nat inner-layer data header information and a second vni that are determined according to the initial data and the first vni; and during the first process, extracting the second vni from the reserved segment buffer area, and saving, in the reserved segment buffer area, second encapsulated data determined according to the second vni, so that the initial data, the nat inner-layer data header information and the second encapsulated data together constitute a second data segment. By means of the solution, a reserved segment buffer area is provided for saving and data information processing, and for preventing a first data segment from being destroyed, thereby improving the operation efficiency of a server.

Description

Data information processing method and server

technical field

The invention relates to the field of communication technology, in particular to a data information processing method and server.

Background technique

VXLAN (Virtual eXtensible LAN, scalable virtual local area network) encapsulates the data packets sent by the virtual machine in UDP, and uses the IP/MAC address of the physical network as the outer layer for encapsulation, and only represents the encapsulated parameters to the network, so , which greatly reduces the requirement for MAC address specifications in large Layer 2 networks.

Multiple processes in the same server need to execute different instructions on the data segment of the network card to obtain corresponding multiple target information, and each target message cannot be directly obtained by other processes, and at least two processes need to execute the same In order to obtain at least two corresponding target information, subsequent instructions can be executed, that is, the same instruction in the server needs to be executed by at least two processes, which reduces the working efficiency of the server.

Therefore, it is necessary to provide a data information processing method and a server that can improve the working efficiency of the server.

Contents of the invention

Embodiments of the present invention provide a data information processing method and a server. By opening a reserved segment buffer in the buffer area of the network card, the first process strips and saves the first vni in the first data segment to the reserved segment buffer In the area, the second process can directly share the first vni in the reserved segment buffer area to determine the corresponding nat information and the second vni; to solve the problem that the current second process needs to execute and the first process Obtaining the corresponding information by performing the same operation leads to a problem that the working efficiency of the server is low.

An embodiment of the present invention provides a method for processing data information, which is applied to a server. The server includes a network card, a first process, and a second process. The network card includes a buffer area, and the buffer area includes a data segment buffer area and a reserved segment buffer area. area, the data information processing method includes:

The network card receives a first data segment, and saves the first data segment to the data segment buffer area, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes the first vni;

The first process parses the first packaged data from the first data segment and acquires the first vni, and saves the first vni to the reserved segment buffer;

The second process extracts the initial data from the data segment buffer, extracts the first VNI from the reserved segment buffer, and determines the corresponding VNI according to the initial data and the first VNI. Nat inner data header information and the second vni;

The second process saves the nat inner layer data header information and the second vni to the reserved segment buffer;

The first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data to the reserved segment buffer , so that the initial data located in the data segment buffer, the nat inner data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.

In an embodiment, the second process extracts the initial data from the data segment buffer, extracts the first vni from the reserved segment buffer, and according to the initial data and the The steps for the first vni to determine the corresponding nat inner layer data header information and the second vni include:

The second process extracts an initial inner data header from the initial data, and extracts the first vni from the reserved segment buffer;

The second process searches corresponding nat IP, nat PORT and the second vni respectively in the nat conversion table and the vni conversion table according to the initial inner layer data header and the first vni;

The second process determines the nat inner layer data header information according to the nat IP and the nat PORT.

In one embodiment, the first process parses the first packaged data from the first data segment and obtains the first vni, and saves the first vni to the reserved segment buffer Before the steps, include:

The network card sends the pointer of the first data segment to the first process;

The first process accesses the first data segment according to the pointer of the first data segment.

In an embodiment, the second process extracts the initial data from the data segment buffer, extracts the first vni from the reserved segment buffer, and according to the initial data and the Before the first vni determines the corresponding nat inner layer data header information and the steps of the second vni, it includes:

The network card sends the pointer of the initial data to the second process;

The second process determines the reserved segment buffer according to the pointer of the initial data, and accesses the initial data and the first vni.

In an embodiment, the first process extracts the second vni from the reserved segment buffer, determines the second package data according to the second vni, and saves the second package data to the The reserved segment buffer area, so that the initial data located in the data segment buffer area, the nat inner layer data header information located in the reserved segment buffer area and the second encapsulation data together constitute the first After the steps of the second data segment, including:

The network card determines a corresponding sending tunnel according to the second data segment;

The network card sends the second data segment according to the sending tunnel.

In one embodiment, the server further includes a third process, the first encapsulated data also includes a source IP address and a destination IP address, and the network card receives the first data segment and saves the first data segment to The data segment cache area, the first data segment includes first package data and initial data, and after the first package data includes the step of the first vni, it includes:

The first process parses the first encapsulated data from the first data segment and obtains the source IP address and the destination IP address, and saves the source IP address and the destination IP address to the The reserved segment cache area;

The third process extracts the source IP address and the destination IP address from the reserved segment buffer, and judges whether the first data segment is legitimate data according to the source IP address and the destination IP address head;

If the first data segment is a legal data header, the third process processes the initial data;

If the first data segment is not a valid data header, the third process discards the initial data.

In one embodiment, the server further includes a fourth process, and the network card further includes a mirrored buffer, the mirrored buffer includes a mirrored data segment buffer and a mirrored reserved segment buffer, and the network card receives the first data segment, and save the first data segment to the data segment buffer, the first data segment includes the first package data and initial data, after the first package data includes the step of the first vni, including:

The first process parses the first packaged data from the first data segment and obtains the first vni, and judges whether the user of the first data segment has subscribed to a virus detection service according to the first vni;

If the user of the first data segment activates the virus detection service, then the first process saves the first data segment to the mirrored data segment cache area, and saves the first vni to the mirrored reserved segment cache area;

The fourth process extracts the first data segment and the first vni from the mirror buffer, and generates a corresponding virus detection report according to the rules of the virus detection service.

An embodiment of the present invention provides a server, the server includes a network card, a first process, and a second process, the network card includes a buffer area, and the buffer area includes a data segment buffer area and a reserved segment buffer area;

The network card is configured to receive a first data segment and save the first data segment to the data segment buffer, the first data segment includes first packaged data and initial data, and the first packaged data includes first vni;

The first process is configured to parse the first packaged data from the first data segment and obtain the first vni, and save the first vni to the reserved segment buffer;

The second process is used to extract the initial data from the data segment buffer, extract the first vni from the reserved segment buffer, and determine according to the initial data and the first vni The corresponding nat inner data header information and the second vni;

The second process is also used to save the nat inner layer data header information and the second vni to the reserved segment buffer;

The first process is further configured to extract the second vni from the reserved segment buffer, determine second package data according to the second vni, and save the second package data to the reserved A segment buffer, so that the initial data located in the data segment buffer, the nat inner layer data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.

In an embodiment, the second process is further configured to extract an initial inner data header from the initial data, and extract the first vni from the reserved segment buffer; and

The second process is used to search the corresponding nat IP and the second vni in the nat conversion table and the vni conversion table respectively according to the initial inner layer data header and the first vni.

In an embodiment, the network card is further configured to send a pointer of the first data segment to the first process; and

The first process is further configured to determine the data segment cache according to the pointer of the first data segment, and access the first data segment.

The present invention provides a data information processing method and a server. The buffer area in the network card includes a data segment buffer area and a reserved segment buffer area. The first process parses the first VNI from the first data segment and converts the first VNI Save to the reserved segment buffer; the second process extracts the first vni from the reserved segment buffer, and determines the corresponding nat inner layer data header information and the second vni according to the first vni; The second process saves the nat inner layer data header information and the second vni to the reserved segment buffer; the first process then extracts the second vni from the reserved segment buffer to Do the corresponding operation. In this solution, the reserved segment buffer area is opened in the buffer area of the network card, and the first vni, nat inner data header information and the second vni obtained by the first process and the second process are temporarily stored in the reserved segment buffer area , so that the first process and the second process can share the information obtained by processing each other, avoiding partial duplication of operations performed by the first process and the second process; and when the first process and the second process obtain The corresponding information in the first data segment and the corresponding operations are performed while still ensuring the integrity of the first data segment, so that other processes can normally obtain the information of the first data segment, preventing the server from restarting from the outside world The first data segment is obtained for use by other processes. In summary, this solution improves the working efficiency of the server.

Description of drawings

The present invention will be further described below by means of the accompanying drawings. It should be noted that the accompanying drawings in the following description are only used to explain some embodiments of the present invention, and those skilled in the art can also obtain other Attached picture.

FIG. 1 is a schematic diagram of a scene of a data information processing system provided by an embodiment of the present invention;

FIG. 2 is a schematic diagram of a section of a cache area in a network card provided by an embodiment of the present invention;

FIG. 3 is a schematic flowchart of a first data information processing method provided by an embodiment of the present invention;

FIG. 4 is a schematic diagram of an interval of a cache area in another network card provided by an embodiment of the present invention;

FIG. 5 is a schematic diagram of the composition and structure of the first data segment provided by the embodiment of the present invention;

FIG. 6 is a schematic flowchart of a second data information processing method provided by an embodiment of the present invention;

FIG. 7 is a schematic flowchart of a third data information processing method provided by an embodiment of the present invention;

FIG. 8 is a schematic flowchart of a fourth data information processing method provided by an embodiment of the present invention;

FIG. 9 is a schematic flowchart of a fifth data information processing method provided by an embodiment of the present invention;

FIG. 10 is a schematic flowchart of a sixth data information processing method provided by an embodiment of the present invention;

FIG. 11 is a schematic flowchart of a seventh data information processing method provided by an embodiment of the present invention;

FIG. 12 is a schematic diagram of signaling interaction of a data information processing method provided by an embodiment of the present invention;

FIG. 13 is a schematic structural diagram of a first server provided by an embodiment of the present invention;

FIG. 14 is a schematic structural diagram of a second server provided by an embodiment of the present invention;

FIG. 15 is a schematic structural diagram of a third server provided by an embodiment of the present invention;

FIG. 16 is a schematic structural diagram of a fourth server provided by an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative efforts fall within the protection scope of the present invention.

The terms "first", "second", etc. in the present invention are used to distinguish different objects, not to describe a specific order. Furthermore, the terms "include" and "have", as well as any variations thereof, are intended to cover a non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or modules is not limited to the listed steps or modules, but optionally also includes steps or modules that are not listed, or optionally includes For other steps or modules inherent in these processes, methods, products or devices.

Reference herein to an "embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the present invention. The occurrences of this phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. It is understood explicitly and implicitly by those skilled in the art that the embodiments described herein can be combined with other embodiments.

The execution subject of the data information processing method provided in the embodiment of the present invention may be the server provided in the embodiment of the present invention, or an electronic device integrated with the server, and the server may be implemented in the form of hardware or software.

Some basic concepts involved in the embodiments of the present invention are firstly introduced below.

Network card: A piece of computer hardware designed to allow computers to communicate on a computer network, allowing users to connect to each other via cables or wirelessly. Each network card has a unique 48-bit serial number called a MAC address, which is written in a piece of ROM on the network card. A network card is not a self-contained autonomous unit because it does not carry its own power source but must use the power of the computer it is plugged into and be controlled by that computer. When the network card receives an erroneous frame, it discards the frame without notifying the computer it's plugged into. When the network card receives a correct frame, it notifies the computer using an interrupt and delivers it to the network layer in the protocol stack. When the computer wants to send an IP data packet, it is handed down from the protocol stack to the network card to be assembled into a frame and sent to the LAN.

Process: A process is an entity, and each process has its own address space. Generally, a process includes a text area, a data area, and a stack; among them, the text area stores the code executed by the processor, and the data area stores variables and process execution Dynamically allocated memory used during, the stack area stores instructions and local variables for active procedure calls. A process is also an "executing program". A program is an inanimate entity. Only when the processor of the operating system gives life to the program can the program become an active entity. We call it a process.

Cache: A data storage area shared by multiple hardware or program processes running at different speeds or priorities. It acts as a speed smoother between high-speed and low-speed devices, temporarily stores data, and frequently accessed data can be put into the buffer, reducing access to slow devices to improve system efficiency.

The embodiment of the present invention provides a data information processing method and server. The details will be described respectively below.

Please refer to FIG. 1. FIG. 1 is a schematic diagram of a scene of a data information processing system provided by an embodiment of the present invention. The data information processing system may include a network card 100, a first process 200, and a second process 300. The network card includes a cache area, and the buffer area includes a data segment buffer area and a reserved segment buffer area.

In the embodiment of the present application, the cache area is located in the network card 100. As shown in FIG. 2, the network card 100 configures a space of 2048 bytes for the cache area, and each label indicates the corresponding The serial number of the byte, for example, "0" means the 0th byte, and "2047" means the 2047th byte. Among them, the interval of the first 1600 bytes is the data segment cache area for storing the data segment, that is, the 0th byte to the 1599th byte are used to save the data segment; further, it can be from the 1600th byte to the 2047th byte Choose up to 256 bytes in the interval where the bytes are located as the reserved segment buffer for storing part of the information in the data segment. It should be noted that after the data segment buffer and the reserved segment buffer are determined, if the data segment buffer is known, the first byte and The relative position of the first byte of the reserved segment buffer to determine the reserved segment buffer.

Wherein, a preset interval may be reserved between the reserved segment buffer area and the data segment buffer area, so as to properly distinguish the data segment from the stored part of the information in the data segment, as shown in FIG. 2 , the reserved segment buffer area may be the interval of the 1663th byte to the 1918th byte in the buffer area; or the reserved segment buffer area and the data segment buffer area may also be adjacently set The reserved segment buffer is determined only according to the preset relative position of the first byte of the data segment buffer and the first byte of the reserved segment buffer. Of course, the corresponding space of the reserved segment buffer can be reasonably selected according to the length of the stored partial information in the data segment.

In the embodiment of the present application, the network card 100 is mainly used to receive the first data segment, and save the first data segment to the data segment buffer area, the first data segment includes the first packaged data and initial data , the first encapsulation data includes a first vni; the first process is mainly used to parse the first encapsulation data from the first data segment and obtain the first vni, and convert the first vni Save to the reserved segment buffer; the second process is mainly used to extract the initial data from the data segment buffer, extract the first vni from the reserved segment buffer, and according to The initial data and the first vni determine the corresponding nat inner layer data header information and the second vni, and save the nat inner layer data header information and the second vni to the reserved segment buffer; The first process is mainly used to extract the second vni from the reserved segment buffer, determine the second encapsulation data according to the second vni, and save the second encapsulation data to the extended information, so that the initial data located in the data segment buffer, the nat inner layer data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.

In the embodiment of the present application, the data information processing system may be included in a server, that is, the network card 100, the first process 200, and the second process 300 may all be included in the server. The server may be an independent server, or a server network or server cluster composed of servers. For example, the server includes but is not limited to a computer, a network host, a single network server, multiple network server sets, or a server cluster composed of multiple servers. Cloud Server. Among them, the cloud server is composed of a large number of computers or network servers based on cloud computing.

In the embodiment of the present application, the network card 100 can communicate with the outside world and processes inside the server, for example, the network card 100 can receive or send data segments to the outside world, and the network card 100 can also communicate with processes inside the server Send the required data segment pointers respectively; the first process 200 can decapsulate the data segment according to the data segment pointer, and can also perform the encapsulation operation on the data segment according to the corresponding information, whether it is decapsulation or encapsulation, Both can save the relevant information of the obtained header text in an area different from the area where the data segment is located; the second process 300 can obtain the relevant information of the header text from the corresponding area, and obtain the corresponding information according to the corresponding mapping rules, And save the corresponding information to an area different from the area where the data segment is located.

Further, the server may include multiple physical ports and multiple virtual ports. Wherein, the plurality of physical ports may be included in the network card 100, and the plurality of physical ports are used to receive data segments sent by the terminal or bras (broadband remote access server, broadband access server), or to send data to the terminal or bras (broadband remote access server, broadband access server) sends data segments. Wherein, the network card 100, the first process 200 and the second process 300 may communicate through the plurality of virtual ports. As shown in Figure 1, for example, one of the physical ports of the network card 100 receives a data segment, and the network card driver can send a "data segment pointer" to the first process 200 or the second process 300 and notify the first process 200 or the second process 300 A process 200 or the second process 300 processes data segments, and the first process 200 and the second process 300 can send "unpacking/encapsulating data task completion instructions" to different virtual ports through the network card driver and "process the data segment information task completion instruction" to indicate that the corresponding task has been completed, and the corresponding receiving and sending of reports can be carried out through the network card driver between different virtual ports, and the first process 200 can also notify another physical port to send Data segments to the outside world of the server.

In the embodiment of the present application, the terminal may be a general-purpose computer device or a special-purpose computer device. In the specific implementation, the terminal can be a desktop computer, a portable computer, a network server, a personal digital assistant (PDA), a mobile phone, a tablet computer, a wireless terminal device, a communication device, an embedded device, etc., and the present embodiment does not Define the type of the terminal.

Those skilled in the art can understand that the application environment shown in Figure 1 is only an application scenario related to the solution of this application, and does not constitute a limitation on the application scenario of the solution of this application. More processes are shown. For example, only two processes are shown in FIG. 1 . It can be understood that the data information processing system may also include one or more other processes that can access the network card 100 , which is not limited here.

It should be noted that the schematic diagram of the data information processing scene shown in FIG. Constituting a limitation on the technical solutions provided by the embodiments of the present invention, those of ordinary skill in the art know that, with the evolution of the data information processing system and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention can solve similar technical problems. The same applies.

An embodiment of the present invention provides a data information processing method, the execution subject of the data information processing method is the server, the server includes a network card, a first process and a second process, and the network card includes a cache area , the buffer area includes a data segment buffer area and a reserved segment buffer area, and the data information processing method includes: the network card receives a first data segment, and saves the first data segment into the data segment buffer area, the first data segment includes first packaged data and initial data, the first packaged data includes the first vni; the first process parses the first packaged data from the first data segment and obtains The first vni, and save the first vni to the reserved segment buffer; the second process extracts the initial data from the data segment buffer, and extracts the initial data from the reserved segment buffer Extract the first vni from the first vni, and determine the corresponding nat inner layer data header information and the second vni according to the initial data and the first vni; the second process uses the nat inner layer data header information and the The second vni is stored in the reserved segment buffer; the first process extracts the second vni from the reserved segment buffer, and determines the second encapsulation data according to the second vni, and converts the The second encapsulation data is saved to the reserved segment buffer, so that the initial data located in the data segment buffer, the nat inner layer data header information located in the reserved segment buffer and the The second packaged data together constitute the second data segment.

As shown in FIG. 3 , it is a schematic flowchart of an embodiment of a method for processing data information in an embodiment of the present invention. The method for processing data information includes:

S101. The network card receives a first data segment, and saves the first data segment to the data segment buffer, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes first vni.

In this embodiment, the network card may be the network card 100 as shown in FIG. The data segment sent by the broadband access server).

Wherein, as shown in FIG. 4, the buffer includes the data segment buffer and the reserved segment buffer, and the data segment buffer may be located before the reserved segment buffer, that is, the data segment buffer may be located the previous part of the buffer. Further, the first data segment may include the first encapsulation data and the initial data, the first encapsulation data is located before the initial data, and the first vni is included in the first encapsulation data. It should be noted that the interval length division of the first vni, the first package data, and the initial data in Figure 4 is only for the convenience of drawing, and does not limit the proportional relationship of the interval lengths of the three .

Specifically, as shown in FIG. 5, the first data segment may include the first package data and the initial data, and the specific description is as follows:

According to the distance from the initial data from near to far, the first encapsulation data may include VXLAN header 501, Outer UDP header 502, Outer IP header 503, and Outer Ethernet header 504 in turn, and further, according to the distance from the initial data by far Recently, VXLAN header501 includes VXLAN Flags505 and VNI506. Wherein, VNI is the first vni in the above, and the first vni (VNI) is a VXLAN network identifier, which is used to identify the tenant to which the first data segment belongs. A tenant can have one or more VNIs, and different VNIs Tenants cannot directly communicate with each other on the second layer; among them, VXLAN Flags is a flag bit, including 8 bits, and the format is "RRRRRRRR". When the "I" bit is 1, it means that the first vni (VNI) is valid, which is 0 , indicating that the first vni (VNI) is invalid, the "R" bit is reserved and unused, and is set to 0; wherein, Reserved507 is also included between VXLAN Flags505 and VNI506, between VNI506 and the initial data, and is used to reserve unused Use, set to 0.

The initial data may include Inner Ethernet header 508, Inner IP header 509, Inner TCP header 601, and Payload 602 in sequence according to the distance from the first encapsulated data in descending order. Wherein, the Inner Ethernet header includes the MAC address of the sending end and the MAC address of the lan interface of the second process, the Inner IP header includes the IP address of the sending end and the IP address of the receiving end, and the Inner TCP header includes the port number of the sending end. Wherein, the sending end and the receiving end correspond to two of the above-mentioned server, terminal, and bras according to the actual sending and receiving of the first data segment; wherein, the Payload may include instruction information or data information.

S102. The first process parses the first encapsulated data from the first data segment to acquire the first vni, and saves the first vni to the reserved segment buffer.

Wherein, the first process can access the first data segment, and parse the first encapsulation data in the first data segment, and obtain the first vni in the first encapsulation data according to the parsing result . Specifically, the first process can obtain the VXLAN Flags information in the first encapsulation data, and for the VXLAN Flags whose format is "RRRRRRRR", if the "I" bit is 1, then perform the step S102, if "I " bit is 0, then step S102 is not executed.

It can be understood that at this time, what is stored in the data segment buffer is the initial data, and what is saved in the reserved segment buffer is the first vni. According to the above analysis, it can be seen that a preset interval may be reserved between the reserved segment buffer and the data segment buffer to properly distinguish the data segment from the stored part of the information in the data segment, so , here a preset interval can be reserved between the first vni and the initial data, so that when the first vni is acquired later, according to the first byte of the preset data segment buffer and On the premise that the relative position of the first byte of the reserved segment buffer area is used to determine the reserved segment buffer area, this embodiment can further verify the first vni, for example, it can be further judged that "determined by the above steps Whether there is a preset interval between the "first vni" and the data segment buffer area, so as to judge whether the "determined first vni" is the real first vni.

It can be understood that after the first process saves the first vni to the reserved segment buffer, the first process may send related information such as "unpacking data segment task completion instruction" to the network card. Instructions to inform the network card that the first process has completed decapsulating data segments and other related operations, so that the network card can perform the next operation. At the same time, the first process may acquire the pointer of the initial data at this time, and the first process may also send the pointer of the initial data to the network card.

S103. The second process extracts the initial data from the data segment buffer, extracts the first vni from the reserved segment buffer, and determines according to the initial data and the first vni The corresponding nat inner data header information and the second vni.

According to the above description, the first vni can be understood as the VXLAN network identifier of the sender who sends the first data segment to the network card, and the sender can be a terminal or a bras. For example, when the terminal sends the first data segment to the network card, the first vni may be referred to as lan vni, and the first vni (lan vni) and the Outer in the first encapsulated data UDP header, Outer IP header and Outer Ethernet header correspond, and the second vni can be determined according to the first vni.

Wherein, when the terminal sends the first data segment to the network card, the Inner IP header in the initial data contains the private network IP address, and the IP address related to the private network can be obtained from the mapping relationship formulated according to the NAT protocol. The nat IP information corresponding to the network IP address and the corresponding nat PORT information. According to the above discussion, it can be seen that the Inner IP header and the Payload in the initial data also include the Inner TCP header, where the Inner Ethernet header, the Inner IP header, and the Inner TCP header can be referred to as the initial data The encapsulated data inside can be referred to as the initial inner layer data header, wherein, the Inner IP header and Payload can also be other protocol types such as Inner UDP header, Inner ICMP header, etc. Further, according to the nat IP information and the nat PORT information, the initial inner layer data header can be updated as the nat inner layer data header.

It should be noted that here, when the second process extracts the first vni from the reserved segment buffer or at the same time, it can also extract the first vni from the reserved segment buffer Stripping, that is, removing the first vni, so as to avoid affecting the subsequent storage of new information in the reserved segment buffer.

S104. The second process saves the nat inner data header information and the second vni to the reserved segment buffer.

Specifically, the second process may also access the first data segment, and "stripping" the initial inner data header in the first data segment. Taking the above discussion as an example, the initial inner data header includes Inner Ethernet header, Inner IP header and Inner TCP header, it should be noted that at this time, the second process can point the pointer to the Payload in the initial data to "stripping" the initial inner layer data in the first data segment header, not really stripping the initial inner data header in the first data segment. It can be understood that what is saved in the data segment buffer at this time is the Payload in the initial data, and what is saved in the reserved segment buffer is the nat information and the second vni. Similarly, a preset interval can be reserved between the second vni, the nat information, and the initial data, so that when the second vni and the nat inner data header information are acquired later, the On the premise that the reserved segment buffer is determined according to the preset relative position of the first byte of the data segment buffer and the first byte of the reserved segment buffer, this embodiment can further verify The second vni and the nat information.

It can be understood that after the second process executes the step S104, the second process may send related instructions such as "processing data segment information task completion instruction" to the network card to inform the network card of the The second process has completed related operations such as the task of processing data segment information, so that the network card can perform the next operation. At the same time, the second process may obtain the Payload pointer in the initial data at this time, and the second process may also send the Payload pointer in the initial data to the network card.

S105. The first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data in the reserved segment A buffer area, so that the initial data located in the data segment buffer area, the nat inner layer data header information located in the reserved segment buffer area and the second encapsulated data together constitute a second data segment.

Wherein, the second vni can determine a new outgoing tunnel ID, and a new corresponding Outer UDP header, Outer IP header, and Outer Ethernet header can be obtained according to the second vni and the outgoing tunnel ID. Specifically, the The first process can configure new corresponding Outer UDP header, Outer IP header and Outer Ethernet header for the second vni according to the second vni, and the second vni can also form a new corresponding VXLAN header, above The new corresponding Outer UDP header, Outer IP header, Outer Ethernet header, and VXLAN header together constitute the second encapsulation data; specifically, the second encapsulation data can be stored in the nat in the reserved segment buffer area. After the inner data header information.

It should be noted that, when the first process extracts the second vni from the reserved segment buffer or at the same time, the second vni may also be stripped from the reserved segment buffer , that is, remove the second vni, so as to avoid affecting the subsequent storage of new information in the reserved segment buffer.

According to the above analysis, the nat inner layer data header information is the updated initial inner layer data header, that is, the initial inner layer data header has been converted into the nat inner layer data header information, and at this time the pointer The Payload in the initial data has been pointed to; therefore, it should be noted that the "the initial data located in the data segment buffer, the The nat inner layer data header information and the second encapsulated data together constitute the second data segment" actually means: the Payload in the initial data located in the data segment buffer and the reserved segment buffer The nat inner data header information and the second encapsulation data together constitute the second data segment.

It can be understood that after the steps S101-S105, the first data segment still exists completely in the data segment buffer, that is, the entire method steps do not modify or destroy the first data segment. Therefore, the method of this embodiment can enable the first process and the second process to ensure the integrity of the first data segment while acquiring corresponding information in the first data segment and performing corresponding operations , so that other processes can normally obtain or process the information of the first data segment.

In this embodiment, as shown in FIG. 6, the steps before step S102 may include the following steps:

S201. The network card sends the pointer of the first data segment to the first process.

It can be understood that the first data segment is located in the data segment buffer in the network card, therefore, when the physical port of the network card receives the first data segment and saves the first data segment in After the data segment buffer, the network card may send the pointer of the first data segment to the first process, so as to inform the first process of the address of the data segment buffer.

S202. The first process accesses the first data segment according to the pointer of the first data segment.

It can be understood that after the first process obtains the pointer of the first data segment, that is, obtains the address of the data segment buffer, it can obtain the first data segment and Execute related operations in step S102.

In this embodiment, as shown in FIG. 7, the steps before step S103 may include the following steps:

S301. The network card sends the pointer of the initial data to the second process.

According to the above analysis, after the execution of the step S102, the first process can send the pointer of the initial data to the network card, that is, the network card sends the initial data to the second process In this way, the second process can quickly locate the starting position of the initial data, and at this time only the initial data and the content behind it are visible to the second process, avoiding the initial The content before the data interferes with the second process, improving the working efficiency of the second process.

S302. The second process accesses the initial data and the first vni according to the pointer of the initial data.

It can be understood that after the second process obtains the pointer of the initial data, it can obtain the initial data and search backward according to the interval where the initial data is located. According to the above analysis, according to the preset The relative position of the first byte of the data segment buffer area and the first byte of the reserved segment buffer area to determine the reserved segment buffer area, so here it can also be determined indirectly according to the pointer of the initial data The reserved segment buffer area is used to obtain the first vni; and then the related operation of step S103 is performed on the initial data and the first vni.

In this embodiment, as shown in FIG. 8, the step S103 may include the following steps:

S1031. The second process extracts an initial inner data header from the initial data, and extracts the first vni from the reserved segment buffer.

According to the above analysis, it can be seen that the first vni is stored in the reserved segment buffer by the first process, that is, the second process can directly extract the first vni from the reserved segment buffer. It can be understood that, in this embodiment, the first vni obtained through parsing and obtaining by the first process may be saved in the reserved segment buffer area, and may be directly extracted and used by the second process, that is, It can avoid that the second process also executes the step of "parsing and obtaining the first vni from the first data segment", which improves the working efficiency of the server.

Wherein, the initial inner layer data header is the Inner IP header in the initial data in the step S103, that is, the second process extracts the reserved segment buffer according to the pointer of the initial data Describe the first vni.

S1032. According to the initial inner data header and the first vni, the second process looks up the corresponding nat IP, nat PORT and second vni in the nat conversion table and vni conversion table respectively.

Wherein, the nat conversion table can be a private network IP-nat IP conversion table, and each nat IP can correspond to a private network IP, that is, the private network IP obtained according to the initial inner layer data header can be in the nat conversion table Get the corresponding nat IP and corresponding nat PORT.

Wherein, each first vni in the vni conversion table may correspond to a second vni. Specifically, when the terminal sends the first data segment to the network card, the first vni may be called lan vni, and the first vni (lan vni) and the Outer UDP header, Outer IP header and Outer Ethernet header correspond; the second vni obtained through the vni conversion table can be called wan vni, and further, it can also be determined according to the second vni (wan vni) New corresponding Outer UDP header, Outer IP header and Outer Ethernet header.

S1033. The second process determines the nat inner data header information according to the nat IP and the nat PORT.

Specifically, taking the above discussion as an example, the initial inner layer data header may include the original Inner Ethernet header, the original Inner IP header and the original Inner TCP header, taking the terminal sending the first data segment to the server as an example: At this point, the MAC address of the sending end in the original Inner Ethernet header and the MAC address of the lan interface of the second process can be updated to the MAC address of the wan interface of the second process and the MAC address of the next-hop device respectively ; The IP address of the sender in the original Inner IP header can be modified to the nat IP; the port of the sender in the original Inner TCP header can be modified to the nat PORT; above, update the initial inner layer data header It is the inner layer data header of the nat.

It can be understood that the steps before step S105 may include the following steps:

Step 1. The network card sends the pointer of the Payload in the initial data to the first process.

According to the above analysis, in the step S104, the second process obtains the pointer of the Payload in the initial data, and sends the pointer of the Payload in the initial data to the network card, and then, the network card can also send The first process sends a Payload pointer in the initial data. In this way, the first process can quickly locate the initial position of the Payload in the initial data, and at this time only the Payload in the initial data and the content behind it are visible to the first process, avoiding the The content before the Payload in the initial data interferes with the first process, improving the work efficiency of the first process.

Step 2: The first process determines to access the second vni according to the Payload pointer in the initial data.

It can be understood that after the first process obtains the pointer of the Payload in the initial data, it searches backward according to the interval where the Payload is located in the initial data. According to the above analysis, according to the preset data segment buffer area The relative position of the first byte of the reserved segment buffer area and the first byte of the reserved segment buffer area to determine the reserved segment buffer area, then the Payload pointer in the initial data can also indirectly determine the Reserving a segment buffer to acquire the second vni; and then performing the related operations of step S105 on the initial data and the second vni.

In this embodiment, as shown in FIG. 9, the following steps may be included after step S105:

S106. The network card determines a corresponding sending tunnel according to the second data segment.

Wherein, the second encapsulated data in the second data segment can determine a pair of IP addresses at both ends of the tunnel and the source MAC address of the tunnel, but one end of different tunnels may correspond to the same source MAC address and IP address. address; further, the second vni in the second data segment can determine the sending tunnel through the VXLAN network identifier.

S107. The network card sends the second data segment according to the sending tunnel.

It can be understood that the sending tunnel is the transmission path of the second data segment. For example, when the terminal sends the first data segment to the network card, the second vni obtained after the first data segment undergoes the above-mentioned multiple transformations, the sending One end of the tunnel is the physical port of the network card, and the other end of the sending tunnel is the physical port of the bras, that is, the second data segment can be transmitted from the network card to the bras.

In this embodiment, as shown in FIG. 10, the server also includes a third process, and the first encapsulated data also includes a source IP address and a destination IP address, and the step S101 may include the following steps:

S401. The first process parses the first encapsulated data from the first data segment to obtain the source IP address and the destination IP address, and save the source IP address and the destination IP address to the reserved segment buffer.

Specifically, as shown in Figure 5, the Outer IP header in the first data segment includes IP SA603 and IP DA604, wherein IP SA is the source IP address, that is, the IP address of the VTEP at the source end of the VXLAN tunnel, and IP DA is the destination IP address, that is, the IP address of the destination VTEP of the VXLAN tunnel.

Wherein, the first process can access the first data segment, and parse the first encapsulation data in the first data segment, and obtain the Outer IP header in the first encapsulation data according to the parsing result , to obtain the source IP address and the destination IP address therein. It can be understood that at this time, what is stored in the data segment buffer is the initial data, and what is saved in the reserved segment buffer is the source IP address and the destination IP address. According to the above analysis, it can be seen that a preset interval may be reserved between the reserved segment buffer and the data segment buffer to properly distinguish the data segment from the stored part of the information in the data segment, so , where the source IP address, the destination IP address and the initial data can all reserve a corresponding preset space, so that when the source IP address and the destination IP address are acquired later, On the premise that the reserved segment buffer is determined according to the preset relative position of the first byte of the data segment buffer and the first byte of the reserved segment buffer, this embodiment can further verify The source IP address and the destination IP address, for example, can further determine whether there is a preset interval between "the source IP address and the destination IP address determined through the above steps" and the data segment cache area, so as to determine Whether the "determined source IP address and destination IP address" are the real source IP address and destination IP address.

Similarly, after the first process executes the step S401, the first process may send related instructions such as "unpacking data segment task completion instruction" to the network card to inform the network card that the first A process has completed related operations such as "unpacking the data segment", so that the network card can perform the next operation. At the same time, the first process may acquire the pointer of the initial data at this time, and the first process may also send the pointer of the initial data to the network card.

S402. The third process extracts the source IP address and the destination IP address from the reserved segment buffer, and judges whether the first data segment is Legal data header.

Similarly, after the network card receives the pointer of the initial data, it can also send the pointer of the initial data to the third process, so that the third process can quickly locate the initial data according to the pointer of the initial data. , so as to improve the working efficiency of the third process.

According to the above description, the source IP address and the destination IP address are respectively the IP address of the source VTEP and the IP address of the destination VTEP of the VXLAN tunnel, that is, the third process The destination IP address can determine multiple VXLAN tunnels that can transmit the first data segment. Further, the third process may include a VXLAN tunnel table, and the VXLAN tunnel table lists legal conditions of data segments passing through each VXLAN tunnel. Therefore, according to the VXLAN tunnel corresponding to the first data segment, and then searching the VXLAN tunnel table, it can be determined whether the first data segment is legal.

S403. If the first data segment is a valid data header, the third process processes the initial data.

Specifically, when the first data segment is a valid data header, the third process may read the initial data, modify the initial data, and send the initial data.

S404. If the first data segment is not a valid data header, the third process discards the initial data.

Specifically, when the first data segment is not a valid data header, the third process may ignore the initial data and continue to perform related operations on other data segments.

Wherein, the steps S401-S404 can be executed before the step S101, that is, it can be judged first whether the first data segment is a legal data header, and only when the first data segment is a legal data header, will it be executed The step S101, otherwise, the step S101 is not executed.

In this embodiment, as shown in FIG. 11 , the server further includes a fourth process, and the network card further includes a mirror buffer, and the mirror buffer includes a mirror data segment buffer and a mirror reserved segment buffer, the The network card receives the first data segment, and saves the first data segment to the data segment buffer, the first data segment includes first package data and initial data, and the first package data includes the first vni After the step may include the following steps:

S501. The first process parses the first packaged data from the first data segment to acquire the first vni, and judges whether the user of the first data segment has enabled virus detection according to the first vni Serve.

Wherein, the first process can access the first data segment, and parse the first encapsulation data in the first data segment, and obtain the first vni in the first encapsulation data according to the parsing result ; Further, the first process stores a mapping of multiple vnis and multiple results of "whether to activate virus detection service", that is, each vni will correspond to the result of "yes" or "no" to activate virus detection service. After the first process obtains the first vni, it can find the corresponding result of "whether to activate the virus detection service" according to the above mapping, so as to determine whether the user of the first data segment has activated the virus detection service.

S502. If the user of the first data segment activates the virus detection service, the first process saves the first data segment to the mirrored data segment buffer, and saves the first vni to the mirrored pre- Segment cache.

Specifically, when the user of the first data segment activates the virus detection service, the first process may first copy the first data segment, and then save the copied first data segment to the mirrored data segment cache Similarly, in the step S501, after the first process acquires the first vni, the first vni may be temporarily stored, and when the user of the first data segment activates the virus detection service, the The first process may save the temporarily stored first vni to the mirror reserved segment buffer.

Wherein, both the first data segment and the first vni are stored in the mirror buffer, it can be understood that the first process performs mirror processing on the first data segment and the first vni, so that the The first data segment and the first vni are also stored in the mirror buffer area; like this, when multiple processes need to access the first data segment or the first vni at the same time, they can be accessed from the cache respectively. area and the mirrored buffer area, for example, after the network card receives the first data segment, if the embodiment of the present invention is adopted, that is, "save the first data segment to the mirrored data segment buffer area , and save the first vni to the mirror reserved segment buffer", the second process can execute the steps S103-S104, and at the same time, the fourth process can execute the step S503.

Therefore, the fourth process does not need to spend time waiting for the second process to execute the steps S103-S104 before executing the step S503, that is, the time and the time for the second process to execute the steps S103-S104 The time for the fourth process to execute the step S503 does not need to be accumulated, but both are parallel; further, because the time for the second process to execute the steps S103-S104 and the time for the fourth process to execute the steps The time of S503 exists in parallel rather than serially, so the time between receiving the first data segment and sending the first data segment of the network card in the embodiment of the present invention can be reduced, improving the Describe the efficiency of the server work.

S503. The fourth process extracts the first data segment and the first vni from the mirror buffer, and generates a corresponding virus detection report according to the rules of the virus detection service.

Wherein, the rules of the virus detection service can be understood as follows: multiple virus types are defined in the fourth process, and the fourth process can extract and parse the first data segment. If the data segment data analyzed in the segment hits at least one virus type in the plurality of virus types, then the fourth process will generate a virus detection report, which includes the virus detection report according to the first vni The determined user information and the virus type corresponding to the user information.

In this embodiment, as shown in FIG. 12, it is a schematic diagram of the signaling interaction of the data information processing method in the embodiment of the present invention. The schematic diagram of the signaling interaction of the data information processing method includes the following steps:

S1. The network card receives the first data segment, and saves the first data segment to the data segment buffer area;

S2. The network card sends the pointer of the first data segment to the first process;

S3. The first process parses the first encapsulated data in the first data segment from the first data segment, and acquires the first vni in the first encapsulated data;

S4. The first process saves the first vni to a reserved segment buffer;

S5. The first process sends an "unblocking data segment task completion instruction" to the network card;

S6. The network card sends a pointer to the initial data in the first data segment to the second process;

S7. The second process extracts the initial data from the data segment buffer, and extracts the first vni from the reserved segment buffer;

S8. The second process determines corresponding nat inner layer data header information and a second vni according to the initial data and the first vni;

S9. The second process saves the nat inner layer data header information to the reserved segment buffer;

S10. The second process saves the second vni to the reserved segment buffer;

S11. The second process sends a "processing data segment information task completion instruction" to the network card;

S12. The network card sends a pointer to the Payload in the initial data in the first data segment to the first process;

S13. The first process extracts the second vni from the reserved segment buffer, and determines second encapsulation data according to the second vni;

S14. The first process saves the second packaged data to the reserved segment buffer, so that the initial data located in the data segment buffer, the nat located in the reserved segment buffer The inner data header information and the second encapsulated data together constitute a second data segment;

S15. The first process sends an "encapsulation data task completion instruction" to the network card.

In order to better implement the data information processing method in the embodiment of the present invention, on the basis of the data information processing method, a server is also provided in the embodiment of the present invention. As shown in FIG. 13 , the server 400 includes a network card 401, The first process 402 and the second process 403, the network card 401 includes a buffer area, and the buffer area includes a data segment buffer area and a reserved segment buffer area;

The network card 401 is configured to receive a first data segment, and save the first data segment to the data segment buffer, the first data segment includes first encapsulated data and initial data, and the first encapsulated data Including the first vni;

The first process 402 is configured to parse the first packaged data from the first data segment and acquire the first vni, and save the first vni to the reserved segment buffer;

The second process 403 is configured to extract the initial data from the data segment buffer, extract the first vni from the reserved segment buffer, and extract the initial data and the first vni according to the initial data and the first vni Determine the corresponding nat inner data header information and the second vni;

The second process 403 is also configured to save the nat inner layer data header information and the second vni to the reserved segment buffer;

The first process 402 is further configured to extract the second vni from the reserved segment cache, determine second package data according to the second vni, and save the second package data to the reserved segment A buffer area, so that the initial data located in the data segment buffer area, the nat inner layer data header information located in the reserved segment buffer area and the second encapsulated data together constitute a second data segment.

In some embodiments of the present application, the second process 403 is further configured to extract an initial inner data header from the initial data, and extract the first vni from the reserved segment buffer; and

It is used to search the corresponding nat IP and the second vni in the nat conversion table and the vni conversion table according to the initial inner layer data header and the first vni respectively.

In some embodiments of the present application, the network card 401 is further configured to send a pointer of the first data segment to the first process 402; and

The first process 402 is further configured to access the first data segment according to the pointer of the first data segment.

In some embodiments of the present application, the network card 401 is further configured to send the pointer of the initial data to the second process; and

The second process 403 is further configured to access the initial data and the first vni according to the pointer of the initial data.

In some embodiments of the present application, the network card 401 is further configured to determine a corresponding sending tunnel according to the second data segment; and

The network card 401 is further configured to send the second data segment according to the sending tunnel.

In some embodiments of the present application, as shown in FIG. 14 , the server further includes a third process 404, the first encapsulation data further includes a source IP address and a destination IP address, and the first process 402 is also used to Analyzing the first encapsulated data in the first data segment to obtain the source IP address and the destination IP address, and saving the source IP address and the destination IP address to the reserved segment cache District; and

The third process 404 is specifically used for:

Extracting the source IP address and the destination IP address from the reserved segment buffer, and judging whether the first data segment is a legal data header according to the source IP address and the destination IP address;

In some embodiments of the present application, as shown in FIG. 15 , the server further includes a fourth process 405, and the network card further includes a mirror cache area, and the mirror cache area includes a mirror data segment cache area and a mirror reserved segment cache area, the first process 402 is further configured to parse the first packaged data from the first data segment and obtain the first vni, and determine the user of the first data segment according to the first vni Whether to subscribe to the virus detection service; and

If the user of the first data segment activates the virus detection service, the first process 402 is further configured to save the first data segment to the mirrored data segment buffer, and save the first vni to mirror reserved segment buffer;

The fourth process 405 is specifically used for:

Extracting the first data segment and the first vni from the mirror buffer, and generating a corresponding virus detection report according to the rules of the virus detection service.

The embodiment of the present invention also provides a server, as shown in FIG. 16 , which shows a schematic structural diagram of the server involved in the embodiment of the present invention, specifically:

The server may include a processor 801 of one or more processing cores, a memory 802 of one or more computer-readable storage media, a power supply 803, an input unit 804 and other components. Those skilled in the art can understand that the server structure shown in FIG. 16 is not limited to the server, and may include more or less components than shown in the figure, or combine some components, or arrange different components. in:

The processor 801 is the control center of the server, and uses various interfaces and lines to connect various parts of the entire server, by running or executing software programs and/or modules stored in the memory 802, and calling data stored in the memory 802, Execute various functions of the server and process data to monitor the server as a whole. Optionally, the processor 801 can include one or more processing cores; the processor 801 can be a central processing unit (Central Processing Unit, CPU), and can also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP ), Application Specific Integrated Circuit (ASIC), off-the-shelf programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc., preferably, the processor 801 can integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, User interface and application programs, etc., modem processor mainly handles wireless communication. It can be understood that the foregoing modem processor may not be integrated into the processor 801 .

The memory 802 can be used to store software programs and modules, and the processor 801 executes various functional applications and data processing by running the software programs and modules stored in the memory 802 . The memory 802 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playback function, an image playback function, etc.); The data created by the use of the server, etc. In addition, the memory 802 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage devices. Correspondingly, the memory 802 may also include a memory server, so as to provide the processor 801 with access to the memory 802.

The server also includes a power supply 803 for supplying power to each component. Preferably, the power supply 803 can be logically connected to the processor 801 through the power management system, so that functions such as charging, discharging, and power consumption management can be realized through the power management system. The power supply 803 may also include one or more DC or AC power supplies, recharging systems, power failure detection circuits, power converters or inverters, power status indicators and other arbitrary components.

The server can also include an input unit 804, which can be used to receive input numbers or character information, and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control.

Although not shown, the server may also include a display unit, etc., which will not be repeated here. Specifically, in this embodiment, the processor 801 in the server will load the executable file corresponding to the process of one or more application programs into the memory 802 according to the following instructions, and the processor 801 will run the executable file stored in the memory. 802 to implement various functions, the processor 801 can issue instructions to the network card, the first process and the second process in the server, so that the network card, the first process and the second process The process performs the following steps in sequence:

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructions, or by instructions controlling related hardware, and the instructions can be stored in a computer-readable storage medium, and is loaded and executed by the processor.

For this reason, the embodiment of the present invention provides a kind of computer-readable storage medium, and this storage medium can comprise: Read Only Memory (ROM, Read Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk etc. . A computer program is stored thereon, and the computer program is loaded by the processor to issue instructions to the network card, the first process and the second process in the server, so that the network card, the first process and the second process The process performs the following steps in sequence:

In the above-mentioned embodiments, the descriptions of each embodiment have their own emphases. For the part that is not described in detail in a certain embodiment, refer to the detailed description of other embodiments above, and will not be repeated here.

During specific implementation, each of the above units or structures can be implemented as an independent entity, or can be combined arbitrarily as the same or several entities. For the specific implementation of each of the above units or structures, please refer to the previous method embodiments, here No longer.

For the specific implementation of the above operations, reference may be made to the foregoing embodiments, and details are not repeated here.

The method and server for data information processing provided by the embodiments of the present invention have been described above in detail. In this paper, specific examples are used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only used to help understand the present invention. method and its core idea; at the same time, for those skilled in the art, according to the idea of the present invention, there will be changes in the specific implementation and scope of application. Invention Limitations.

Claims

A data information processing method, characterized in that it is applied to a server, the server includes a network card, a first process and a second process, the network card includes a cache area, and the cache area includes a data segment buffer area and a reserved segment A cache area, the method for processing data information includes:

The network card receives a first data segment, and saves the first data segment to the data segment buffer area, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes the first vni;

The first process parses the first packaged data from the first data segment and acquires the first vni, and saves the first vni to the reserved segment buffer;

The second process extracts the initial data from the data segment buffer, extracts the first VNI from the reserved segment buffer, and determines the corresponding VNI according to the initial data and the first VNI. Nat inner data header information and the second vni;

The second process saves the nat inner layer data header information and the second vni to the reserved segment buffer;

The first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data to the reserved segment buffer , so that the initial data located in the data segment buffer, the nat inner data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.
The method for processing data information according to claim 1, wherein the second process extracts the initial data from the data segment buffer, and extracts the first data from the reserved segment buffer. vni, and according to the initial data and the first vni determine the corresponding nat inner layer data header information and the steps of the second vni, including:

The second process extracts an initial inner data header from the initial data, and extracts the first vni from the reserved segment buffer;

The second process searches corresponding nat IP, nat PORT and the second vni respectively in the nat conversion table and the vni conversion table according to the initial inner layer data header and the first vni;

The second process determines the nat inner layer data header information according to the nat IP and the nat PORT.
The method for processing data information according to claim 1, wherein the first process parses the first packaged data from the first data segment and acquires the first vni, and converts the first vni Before the step of saving a vni to the reserved segment buffer area, it includes:

The network card sends the pointer of the first data segment to the first process;

The first process accesses the first data segment according to the pointer of the first data segment.
The method for processing data information according to claim 1, wherein the second process extracts the initial data from the data segment buffer, and extracts the first data from the reserved segment buffer. vni, and according to the initial data and the first vni determine the corresponding nat inner layer data header information and before the step of the second vni, including:

The network card sends the pointer of the initial data to the second process;

The second process accesses the initial data and the first vni according to the pointer of the initial data.
The method for processing data information according to claim 1, wherein the first process extracts the second vni from the reserved segment buffer, and determines the second encapsulation data according to the second vni , saving the second encapsulation data to the reserved segment buffer, so that the initial data located in the data segment buffer, the nat inner layer data header located in the reserved segment buffer After the step of forming the second data segment together with the second packaged data, the steps include:

The network card determines a corresponding sending tunnel according to the second data segment;

The network card sends the second data segment according to the sending tunnel.
The method for processing data information according to claim 1, wherein the server further includes a third process, the first encapsulated data also includes a source IP address and a destination IP address, and the network card receives the first data segment , and save the first data segment to the data segment buffer, the first data segment includes first package data and initial data, and after the step of including the first vni in the first package data, include:

The first process parses the first encapsulated data from the first data segment and obtains the source IP address and the destination IP address, and saves the source IP address and the destination IP address to the The reserved segment cache area;

The third process extracts the source IP address and the destination IP address from the reserved segment buffer, and judges whether the first data segment is legitimate data according to the source IP address and the destination IP address head;

If the first data segment is a legal data header, the third process processes the initial data;

If the first data segment is not a valid data header, the third process discards the initial data.
The method for processing data information according to claim 1, wherein the server further includes a fourth process, and the network card further includes a mirror buffer, and the mirror buffer includes a mirror data segment buffer and a mirror reserved A segment buffer area, the network card receives a first data segment, and saves the first data segment to the data segment buffer area, the first data segment includes first package data and initial data, and the first package After the step of including the first vni, the data includes:

The first process parses the first packaged data from the first data segment and obtains the first vni, and judges whether the user of the first data segment has subscribed to a virus detection service according to the first vni;

If the user of the first data segment activates the virus detection service, then the first process saves the first data segment to the mirrored data segment cache area, and saves the first vni to the mirrored reserved segment cache area;

The fourth process extracts the first data segment and the first vni from the mirror buffer, and generates a corresponding virus detection report according to the rules of the virus detection service.
A server, characterized in that the server includes a network card, a first process, and a second process, the network card includes a cache area, and the cache area includes a data segment buffer area and a reserved segment buffer area;

The network card receives a first data segment, and saves the first data segment to the data segment buffer area, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes the first vni;

The first process parses the first packaged data from the first data segment and acquires the first vni, and saves the first vni to the reserved segment buffer;

The second process extracts the initial data from the data segment buffer, extracts the first VNI from the reserved segment buffer, and determines the corresponding VNI according to the initial data and the first VNI. Nat inner data header information and the second vni;

The second process saves the nat inner layer data header information and the second vni to the reserved segment buffer;

The first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data to the reserved segment buffer , so that the initial data located in the data segment buffer, the nat inner data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.
The server according to claim 8, wherein the second process is further configured to extract an initial inner data header from the initial data, and extract the first vni from the reserved segment buffer; as well as

The second process is used to search the corresponding nat IP and the second vni in the nat conversion table and the vni conversion table respectively according to the initial inner layer data header and the first vni.
The server according to claim 8, wherein the network card is further configured to send a pointer of the first data segment to the first process; and

The first process is further configured to access the first data segment according to the pointer of the first data segment.