WO2023010731A1 - Procédé de traitement d'informations de données et serveur - Google Patents

Procédé de traitement d'informations de données et serveur Download PDF

Info

Publication number
WO2023010731A1
WO2023010731A1 PCT/CN2021/135684 CN2021135684W WO2023010731A1 WO 2023010731 A1 WO2023010731 A1 WO 2023010731A1 CN 2021135684 W CN2021135684 W CN 2021135684W WO 2023010731 A1 WO2023010731 A1 WO 2023010731A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
vni
segment
reserved
data segment
Prior art date
Application number
PCT/CN2021/135684
Other languages
English (en)
Chinese (zh)
Inventor
吴情彪
叶志钢
Original Assignee
武汉绿色网络信息服务有限责任公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 武汉绿色网络信息服务有限责任公司 filed Critical 武汉绿色网络信息服务有限责任公司
Publication of WO2023010731A1 publication Critical patent/WO2023010731A1/fr

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/70—Admission control; Resource allocation
    • H04L47/72—Admission control; Resource allocation using reservation actions during connection setup
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/70—Admission control; Resource allocation
    • H04L47/72—Admission control; Resource allocation using reservation actions during connection setup
    • H04L47/722—Admission control; Resource allocation using reservation actions during connection setup at the destination endpoint, e.g. reservation of terminal resources or buffer space
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/90—Buffering arrangements
    • H04L49/901—Buffering arrangements using storage descriptor, e.g. read or write pointers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2521—Translation architectures other than single NAT servers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1095—Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2212/00—Encapsulation of packets
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management

Definitions

  • the invention relates to the field of communication technology, in particular to a data information processing method and server.
  • VXLAN Virtual eXtensible LAN, scalable virtual local area network
  • VXLAN Virtual eXtensible LAN, scalable virtual local area network
  • Embodiments of the present invention provide a data information processing method and a server.
  • the first process strips and saves the first vni in the first data segment to the reserved segment buffer In the area
  • the second process can directly share the first vni in the reserved segment buffer area to determine the corresponding nat information and the second vni; to solve the problem that the current second process needs to execute and the first process Obtaining the corresponding information by performing the same operation leads to a problem that the working efficiency of the server is low.
  • An embodiment of the present invention provides a method for processing data information, which is applied to a server.
  • the server includes a network card, a first process, and a second process.
  • the network card includes a buffer area, and the buffer area includes a data segment buffer area and a reserved segment buffer area. area, the data information processing method includes:
  • the network card receives a first data segment, and saves the first data segment to the data segment buffer area, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes the first vni;
  • the first process parses the first packaged data from the first data segment and acquires the first vni, and saves the first vni to the reserved segment buffer;
  • the second process extracts the initial data from the data segment buffer, extracts the first VNI from the reserved segment buffer, and determines the corresponding VNI according to the initial data and the first VNI. Nat inner data header information and the second vni;
  • the second process saves the nat inner layer data header information and the second vni to the reserved segment buffer;
  • the first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data to the reserved segment buffer , so that the initial data located in the data segment buffer, the nat inner data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.
  • the second process extracts the initial data from the data segment buffer, extracts the first vni from the reserved segment buffer, and according to the initial data and the The steps for the first vni to determine the corresponding nat inner layer data header information and the second vni include:
  • the second process extracts an initial inner data header from the initial data, and extracts the first vni from the reserved segment buffer;
  • the second process searches corresponding nat IP, nat PORT and the second vni respectively in the nat conversion table and the vni conversion table according to the initial inner layer data header and the first vni;
  • the second process determines the nat inner layer data header information according to the nat IP and the nat PORT.
  • the first process parses the first packaged data from the first data segment and obtains the first vni, and saves the first vni to the reserved segment buffer Before the steps, include:
  • the network card sends the pointer of the first data segment to the first process
  • the first process accesses the first data segment according to the pointer of the first data segment.
  • the second process extracts the initial data from the data segment buffer, extracts the first vni from the reserved segment buffer, and according to the initial data and the Before the first vni determines the corresponding nat inner layer data header information and the steps of the second vni, it includes:
  • the network card sends the pointer of the initial data to the second process
  • the second process determines the reserved segment buffer according to the pointer of the initial data, and accesses the initial data and the first vni.
  • the first process extracts the second vni from the reserved segment buffer, determines the second package data according to the second vni, and saves the second package data to the The reserved segment buffer area, so that the initial data located in the data segment buffer area, the nat inner layer data header information located in the reserved segment buffer area and the second encapsulation data together constitute the first After the steps of the second data segment, including:
  • the network card determines a corresponding sending tunnel according to the second data segment
  • the network card sends the second data segment according to the sending tunnel.
  • the server further includes a third process
  • the first encapsulated data also includes a source IP address and a destination IP address
  • the network card receives the first data segment and saves the first data segment to The data segment cache area
  • the first data segment includes first package data and initial data
  • the first process parses the first encapsulated data from the first data segment and obtains the source IP address and the destination IP address, and saves the source IP address and the destination IP address to the The reserved segment cache area;
  • the third process extracts the source IP address and the destination IP address from the reserved segment buffer, and judges whether the first data segment is legitimate data according to the source IP address and the destination IP address head;
  • the third process processes the initial data
  • the third process discards the initial data.
  • the server further includes a fourth process
  • the network card further includes a mirrored buffer
  • the mirrored buffer includes a mirrored data segment buffer and a mirrored reserved segment buffer
  • the network card receives the first data segment, and save the first data segment to the data segment buffer, the first data segment includes the first package data and initial data, after the first package data includes the step of the first vni, including:
  • the first process parses the first packaged data from the first data segment and obtains the first vni, and judges whether the user of the first data segment has subscribed to a virus detection service according to the first vni;
  • the first process saves the first data segment to the mirrored data segment cache area, and saves the first vni to the mirrored reserved segment cache area;
  • the fourth process extracts the first data segment and the first vni from the mirror buffer, and generates a corresponding virus detection report according to the rules of the virus detection service.
  • An embodiment of the present invention provides a server, the server includes a network card, a first process, and a second process, the network card includes a buffer area, and the buffer area includes a data segment buffer area and a reserved segment buffer area;
  • the network card is configured to receive a first data segment and save the first data segment to the data segment buffer, the first data segment includes first packaged data and initial data, and the first packaged data includes first vni;
  • the first process is configured to parse the first packaged data from the first data segment and obtain the first vni, and save the first vni to the reserved segment buffer;
  • the second process is used to extract the initial data from the data segment buffer, extract the first vni from the reserved segment buffer, and determine according to the initial data and the first vni The corresponding nat inner data header information and the second vni;
  • the second process is also used to save the nat inner layer data header information and the second vni to the reserved segment buffer;
  • the first process is further configured to extract the second vni from the reserved segment buffer, determine second package data according to the second vni, and save the second package data to the reserved A segment buffer, so that the initial data located in the data segment buffer, the nat inner layer data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.
  • the second process is further configured to extract an initial inner data header from the initial data, and extract the first vni from the reserved segment buffer;
  • the second process is used to search the corresponding nat IP and the second vni in the nat conversion table and the vni conversion table respectively according to the initial inner layer data header and the first vni.
  • the network card is further configured to send a pointer of the first data segment to the first process
  • the first process is further configured to determine the data segment cache according to the pointer of the first data segment, and access the first data segment.
  • the present invention provides a data information processing method and a server.
  • the buffer area in the network card includes a data segment buffer area and a reserved segment buffer area.
  • the first process parses the first VNI from the first data segment and converts the first VNI Save to the reserved segment buffer; the second process extracts the first vni from the reserved segment buffer, and determines the corresponding nat inner layer data header information and the second vni according to the first vni;
  • the second process saves the nat inner layer data header information and the second vni to the reserved segment buffer; the first process then extracts the second vni from the reserved segment buffer to Do the corresponding operation.
  • the reserved segment buffer area is opened in the buffer area of the network card, and the first vni, nat inner data header information and the second vni obtained by the first process and the second process are temporarily stored in the reserved segment buffer area , so that the first process and the second process can share the information obtained by processing each other, avoiding partial duplication of operations performed by the first process and the second process; and when the first process and the second process obtain The corresponding information in the first data segment and the corresponding operations are performed while still ensuring the integrity of the first data segment, so that other processes can normally obtain the information of the first data segment, preventing the server from restarting from the outside world The first data segment is obtained for use by other processes.
  • this solution improves the working efficiency of the server.
  • FIG. 1 is a schematic diagram of a scene of a data information processing system provided by an embodiment of the present invention
  • FIG. 2 is a schematic diagram of a section of a cache area in a network card provided by an embodiment of the present invention
  • FIG. 3 is a schematic flowchart of a first data information processing method provided by an embodiment of the present invention.
  • FIG. 4 is a schematic diagram of an interval of a cache area in another network card provided by an embodiment of the present invention.
  • FIG. 5 is a schematic diagram of the composition and structure of the first data segment provided by the embodiment of the present invention.
  • FIG. 6 is a schematic flowchart of a second data information processing method provided by an embodiment of the present invention.
  • FIG. 7 is a schematic flowchart of a third data information processing method provided by an embodiment of the present invention.
  • FIG. 8 is a schematic flowchart of a fourth data information processing method provided by an embodiment of the present invention.
  • FIG. 9 is a schematic flowchart of a fifth data information processing method provided by an embodiment of the present invention.
  • FIG. 10 is a schematic flowchart of a sixth data information processing method provided by an embodiment of the present invention.
  • FIG. 11 is a schematic flowchart of a seventh data information processing method provided by an embodiment of the present invention.
  • FIG. 12 is a schematic diagram of signaling interaction of a data information processing method provided by an embodiment of the present invention.
  • FIG. 13 is a schematic structural diagram of a first server provided by an embodiment of the present invention.
  • FIG. 14 is a schematic structural diagram of a second server provided by an embodiment of the present invention.
  • FIG. 15 is a schematic structural diagram of a third server provided by an embodiment of the present invention.
  • FIG. 16 is a schematic structural diagram of a fourth server provided by an embodiment of the present invention.
  • first”, “second”, etc. in the present invention are used to distinguish different objects, not to describe a specific order.
  • the terms “include” and “have”, as well as any variations thereof, are intended to cover a non-exclusive inclusion.
  • a process, method, system, product, or device that includes a series of steps or modules is not limited to the listed steps or modules, but optionally also includes steps or modules that are not listed, or optionally includes For other steps or modules inherent in these processes, methods, products or devices.
  • the execution subject of the data information processing method provided in the embodiment of the present invention may be the server provided in the embodiment of the present invention, or an electronic device integrated with the server, and the server may be implemented in the form of hardware or software.
  • Network card A piece of computer hardware designed to allow computers to communicate on a computer network, allowing users to connect to each other via cables or wirelessly. Each network card has a unique 48-bit serial number called a MAC address, which is written in a piece of ROM on the network card.
  • a network card is not a self-contained autonomous unit because it does not carry its own power source but must use the power of the computer it is plugged into and be controlled by that computer. When the network card receives an erroneous frame, it discards the frame without notifying the computer it's plugged into. When the network card receives a correct frame, it notifies the computer using an interrupt and delivers it to the network layer in the protocol stack. When the computer wants to send an IP data packet, it is handed down from the protocol stack to the network card to be assembled into a frame and sent to the LAN.
  • a process is an entity, and each process has its own address space.
  • a process includes a text area, a data area, and a stack; among them, the text area stores the code executed by the processor, and the data area stores variables and process execution Dynamically allocated memory used during, the stack area stores instructions and local variables for active procedure calls.
  • a process is also an "executing program".
  • a program is an inanimate entity. Only when the processor of the operating system gives life to the program can the program become an active entity. We call it a process.
  • Cache A data storage area shared by multiple hardware or program processes running at different speeds or priorities. It acts as a speed smoother between high-speed and low-speed devices, temporarily stores data, and frequently accessed data can be put into the buffer, reducing access to slow devices to improve system efficiency.
  • the embodiment of the present invention provides a data information processing method and server. The details will be described respectively below.
  • FIG. 1 is a schematic diagram of a scene of a data information processing system provided by an embodiment of the present invention.
  • the data information processing system may include a network card 100, a first process 200, and a second process 300.
  • the network card includes a cache area, and the buffer area includes a data segment buffer area and a reserved segment buffer area.
  • the cache area is located in the network card 100.
  • the network card 100 configures a space of 2048 bytes for the cache area, and each label indicates the corresponding The serial number of the byte, for example, "0" means the 0th byte, and "2047" means the 2047th byte.
  • the interval of the first 1600 bytes is the data segment cache area for storing the data segment, that is, the 0th byte to the 1599th byte are used to save the data segment; further, it can be from the 1600th byte to the 2047th byte Choose up to 256 bytes in the interval where the bytes are located as the reserved segment buffer for storing part of the information in the data segment. It should be noted that after the data segment buffer and the reserved segment buffer are determined, if the data segment buffer is known, the first byte and The relative position of the first byte of the reserved segment buffer to determine the reserved segment buffer.
  • a preset interval may be reserved between the reserved segment buffer area and the data segment buffer area, so as to properly distinguish the data segment from the stored part of the information in the data segment, as shown in FIG. 2
  • the reserved segment buffer area may be the interval of the 1663th byte to the 1918th byte in the buffer area; or the reserved segment buffer area and the data segment buffer area may also be adjacently set
  • the reserved segment buffer is determined only according to the preset relative position of the first byte of the data segment buffer and the first byte of the reserved segment buffer. Of course, the corresponding space of the reserved segment buffer can be reasonably selected according to the length of the stored partial information in the data segment.
  • the network card 100 is mainly used to receive the first data segment, and save the first data segment to the data segment buffer area, the first data segment includes the first packaged data and initial data , the first encapsulation data includes a first vni;
  • the first process is mainly used to parse the first encapsulation data from the first data segment and obtain the first vni, and convert the first vni Save to the reserved segment buffer;
  • the second process is mainly used to extract the initial data from the data segment buffer, extract the first vni from the reserved segment buffer, and according to The initial data and the first vni determine the corresponding nat inner layer data header information and the second vni, and save the nat inner layer data header information and the second vni to the reserved segment buffer;
  • the first process is mainly used to extract the second vni from the reserved segment buffer, determine the second encapsulation data according to the second vni, and save the second encapsulation data to the extended information, so that
  • the data information processing system may be included in a server, that is, the network card 100, the first process 200, and the second process 300 may all be included in the server.
  • the server may be an independent server, or a server network or server cluster composed of servers.
  • the server includes but is not limited to a computer, a network host, a single network server, multiple network server sets, or a server cluster composed of multiple servers.
  • Cloud Server is composed of a large number of computers or network servers based on cloud computing.
  • the network card 100 can communicate with the outside world and processes inside the server, for example, the network card 100 can receive or send data segments to the outside world, and the network card 100 can also communicate with processes inside the server Send the required data segment pointers respectively;
  • the first process 200 can decapsulate the data segment according to the data segment pointer, and can also perform the encapsulation operation on the data segment according to the corresponding information, whether it is decapsulation or encapsulation, Both can save the relevant information of the obtained header text in an area different from the area where the data segment is located;
  • the second process 300 can obtain the relevant information of the header text from the corresponding area, and obtain the corresponding information according to the corresponding mapping rules, And save the corresponding information to an area different from the area where the data segment is located.
  • the server may include multiple physical ports and multiple virtual ports.
  • the plurality of physical ports may be included in the network card 100, and the plurality of physical ports are used to receive data segments sent by the terminal or bras (broadband remote access server, broadband access server), or to send data to the terminal or bras (broadband remote access server, broadband access server) sends data segments.
  • the network card 100, the first process 200 and the second process 300 may communicate through the plurality of virtual ports.
  • one of the physical ports of the network card 100 receives a data segment
  • the network card driver can send a "data segment pointer" to the first process 200 or the second process 300 and notify the first process 200 or the second process 300
  • a process 200 or the second process 300 processes data segments
  • the first process 200 and the second process 300 can send "unpacking/encapsulating data task completion instructions" to different virtual ports through the network card driver and "process the data segment information task completion instruction" to indicate that the corresponding task has been completed, and the corresponding receiving and sending of reports can be carried out through the network card driver between different virtual ports, and the first process 200 can also notify another physical port to send Data segments to the outside world of the server.
  • the terminal may be a general-purpose computer device or a special-purpose computer device.
  • the terminal can be a desktop computer, a portable computer, a network server, a personal digital assistant (PDA), a mobile phone, a tablet computer, a wireless terminal device, a communication device, an embedded device, etc., and the present embodiment does not Define the type of the terminal.
  • PDA personal digital assistant
  • FIG. 1 is only an application scenario related to the solution of this application, and does not constitute a limitation on the application scenario of the solution of this application. More processes are shown. For example, only two processes are shown in FIG. 1 . It can be understood that the data information processing system may also include one or more other processes that can access the network card 100 , which is not limited here.
  • An embodiment of the present invention provides a data information processing method
  • the execution subject of the data information processing method is the server
  • the server includes a network card, a first process and a second process
  • the network card includes a cache area
  • the buffer area includes a data segment buffer area and a reserved segment buffer area
  • the data information processing method includes: the network card receives a first data segment, and saves the first data segment into the data segment buffer area, the first data segment includes first packaged data and initial data, the first packaged data includes the first vni;
  • the first process parses the first packaged data from the first data segment and obtains The first vni, and save the first vni to the reserved segment buffer;
  • the second process extracts the initial data from the data segment buffer, and extracts the initial data from the reserved segment buffer Extract the first vni from the first vni, and determine the corresponding nat inner layer data header information and the second vni according to the initial data and the first vni;
  • the second process uses
  • FIG. 3 it is a schematic flowchart of an embodiment of a method for processing data information in an embodiment of the present invention.
  • the method for processing data information includes:
  • the network card receives a first data segment, and saves the first data segment to the data segment buffer, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes first vni.
  • the network card may be the network card 100 as shown in FIG.
  • the data segment sent by the broadband access server may be the network card 100 as shown in FIG.
  • the data segment sent by the broadband access server may be the network card 100 as shown in FIG.
  • the data segment sent by the broadband access server may be the network card 100 as shown in FIG.
  • the data segment sent by the broadband access server may be the network card 100 as shown in FIG.
  • the buffer includes the data segment buffer and the reserved segment buffer, and the data segment buffer may be located before the reserved segment buffer, that is, the data segment buffer may be located the previous part of the buffer.
  • the first data segment may include the first encapsulation data and the initial data, the first encapsulation data is located before the initial data, and the first vni is included in the first encapsulation data.
  • the interval length division of the first vni, the first package data, and the initial data in Figure 4 is only for the convenience of drawing, and does not limit the proportional relationship of the interval lengths of the three .
  • the first data segment may include the first package data and the initial data, and the specific description is as follows:
  • the first encapsulation data may include VXLAN header 501, Outer UDP header 502, Outer IP header 503, and Outer Ethernet header 504 in turn, and further, according to the distance from the initial data by far Recently, VXLAN header501 includes VXLAN Flags505 and VNI506.
  • VNI is the first vni in the above
  • the first vni (VNI) is a VXLAN network identifier, which is used to identify the tenant to which the first data segment belongs.
  • VXLAN Flags is a flag bit, including 8 bits, and the format is "RRRRRRRR".
  • I 1
  • the "I" bit 1
  • the "R” bit is reserved and unused, and is set to 0
  • Reserved507 is also included between VXLAN Flags505 and VNI506, between VNI506 and the initial data, and is used to reserve unused Use, set to 0.
  • the initial data may include Inner Ethernet header 508, Inner IP header 509, Inner TCP header 601, and Payload 602 in sequence according to the distance from the first encapsulated data in descending order.
  • the Inner Ethernet header includes the MAC address of the sending end and the MAC address of the lan interface of the second process
  • the Inner IP header includes the IP address of the sending end and the IP address of the receiving end
  • the Inner TCP header includes the port number of the sending end.
  • the sending end and the receiving end correspond to two of the above-mentioned server, terminal, and bras according to the actual sending and receiving of the first data segment; wherein, the Payload may include instruction information or data information.
  • the first process parses the first encapsulated data from the first data segment to acquire the first vni, and saves the first vni to the reserved segment buffer.
  • the first process can access the first data segment, and parse the first encapsulation data in the first data segment, and obtain the first vni in the first encapsulation data according to the parsing result .
  • the first process can obtain the VXLAN Flags information in the first encapsulation data, and for the VXLAN Flags whose format is "RRRRRRRR", if the "I" bit is 1, then perform the step S102, if "I " bit is 0, then step S102 is not executed.
  • a preset interval may be reserved between the reserved segment buffer and the data segment buffer to properly distinguish the data segment from the stored part of the information in the data segment, so , here a preset interval can be reserved between the first vni and the initial data, so that when the first vni is acquired later, according to the first byte of the preset data segment buffer and
  • this embodiment can further verify the first vni, for example, it can be further judged that "determined by the above steps Whether there is a preset interval between the "first vni” and the data segment buffer area, so as to judge whether the "determined first vni" is the real first vni.
  • the first process may send related information such as "unpacking data segment task completion instruction" to the network card. Instructions to inform the network card that the first process has completed decapsulating data segments and other related operations, so that the network card can perform the next operation.
  • the first process may acquire the pointer of the initial data at this time, and the first process may also send the pointer of the initial data to the network card.
  • the second process extracts the initial data from the data segment buffer, extracts the first vni from the reserved segment buffer, and determines according to the initial data and the first vni The corresponding nat inner data header information and the second vni.
  • the first vni can be understood as the VXLAN network identifier of the sender who sends the first data segment to the network card, and the sender can be a terminal or a bras.
  • the first vni may be referred to as lan vni
  • the first vni (lan vni) and the Outer in the first encapsulated data UDP header, Outer IP header and Outer Ethernet header correspond, and the second vni can be determined according to the first vni.
  • the Inner IP header in the initial data contains the private network IP address, and the IP address related to the private network can be obtained from the mapping relationship formulated according to the NAT protocol.
  • the Inner IP header and the Payload in the initial data also include the Inner TCP header, where the Inner Ethernet header, the Inner IP header, and the Inner TCP header can be referred to as the initial data
  • the encapsulated data inside can be referred to as the initial inner layer data header, wherein, the Inner IP header and Payload can also be other protocol types such as Inner UDP header, Inner ICMP header, etc.
  • the initial inner layer data header can be updated as the nat inner layer data header.
  • the second process when the second process extracts the first vni from the reserved segment buffer or at the same time, it can also extract the first vni from the reserved segment buffer Stripping, that is, removing the first vni, so as to avoid affecting the subsequent storage of new information in the reserved segment buffer.
  • the second process saves the nat inner data header information and the second vni to the reserved segment buffer.
  • the second process may also access the first data segment, and "stripping" the initial inner data header in the first data segment.
  • the initial inner data header includes Inner Ethernet header, Inner IP header and Inner TCP header
  • the second process can point the pointer to the Payload in the initial data to "stripping" the initial inner layer data in the first data segment header, not really stripping the initial inner data header in the first data segment. It can be understood that what is saved in the data segment buffer at this time is the Payload in the initial data, and what is saved in the reserved segment buffer is the nat information and the second vni.
  • a preset interval can be reserved between the second vni, the nat information, and the initial data, so that when the second vni and the nat inner data header information are acquired later, the On the premise that the reserved segment buffer is determined according to the preset relative position of the first byte of the data segment buffer and the first byte of the reserved segment buffer, this embodiment can further verify The second vni and the nat information.
  • the second process may send related instructions such as "processing data segment information task completion instruction" to the network card to inform the network card of the The second process has completed related operations such as the task of processing data segment information, so that the network card can perform the next operation.
  • the second process may obtain the Payload pointer in the initial data at this time, and the second process may also send the Payload pointer in the initial data to the network card.
  • the first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data in the reserved segment A buffer area, so that the initial data located in the data segment buffer area, the nat inner layer data header information located in the reserved segment buffer area and the second encapsulated data together constitute a second data segment.
  • the second vni can determine a new outgoing tunnel ID, and a new corresponding Outer UDP header, Outer IP header, and Outer Ethernet header can be obtained according to the second vni and the outgoing tunnel ID.
  • the The first process can configure new corresponding Outer UDP header, Outer IP header and Outer Ethernet header for the second vni according to the second vni, and the second vni can also form a new corresponding VXLAN header, above
  • the new corresponding Outer UDP header, Outer IP header, Outer Ethernet header, and VXLAN header together constitute the second encapsulation data; specifically, the second encapsulation data can be stored in the nat in the reserved segment buffer area. After the inner data header information.
  • the second vni may also be stripped from the reserved segment buffer , that is, remove the second vni, so as to avoid affecting the subsequent storage of new information in the reserved segment buffer.
  • the nat inner layer data header information is the updated initial inner layer data header, that is, the initial inner layer data header has been converted into the nat inner layer data header information, and at this time the pointer The Payload in the initial data has been pointed to; therefore, it should be noted that the "the initial data located in the data segment buffer, the The nat inner layer data header information and the second encapsulated data together constitute the second data segment" actually means: the Payload in the initial data located in the data segment buffer and the reserved segment buffer The nat inner data header information and the second encapsulation data together constitute the second data segment.
  • the method of this embodiment can enable the first process and the second process to ensure the integrity of the first data segment while acquiring corresponding information in the first data segment and performing corresponding operations , so that other processes can normally obtain or process the information of the first data segment.
  • the steps before step S102 may include the following steps:
  • the network card sends the pointer of the first data segment to the first process.
  • the first data segment is located in the data segment buffer in the network card, therefore, when the physical port of the network card receives the first data segment and saves the first data segment in After the data segment buffer, the network card may send the pointer of the first data segment to the first process, so as to inform the first process of the address of the data segment buffer.
  • the first process accesses the first data segment according to the pointer of the first data segment.
  • the first process obtains the pointer of the first data segment, that is, obtains the address of the data segment buffer, it can obtain the first data segment and Execute related operations in step S102.
  • the steps before step S103 may include the following steps:
  • the network card sends the pointer of the initial data to the second process.
  • the first process can send the pointer of the initial data to the network card, that is, the network card sends the initial data to the second process
  • the second process can quickly locate the starting position of the initial data, and at this time only the initial data and the content behind it are visible to the second process, avoiding the initial The content before the data interferes with the second process, improving the working efficiency of the second process.
  • the second process accesses the initial data and the first vni according to the pointer of the initial data.
  • the second process obtains the pointer of the initial data, it can obtain the initial data and search backward according to the interval where the initial data is located.
  • the preset The relative position of the first byte of the data segment buffer area and the first byte of the reserved segment buffer area to determine the reserved segment buffer area, so here it can also be determined indirectly according to the pointer of the initial data
  • the reserved segment buffer area is used to obtain the first vni; and then the related operation of step S103 is performed on the initial data and the first vni.
  • the step S103 may include the following steps:
  • the second process extracts an initial inner data header from the initial data, and extracts the first vni from the reserved segment buffer.
  • the first vni is stored in the reserved segment buffer by the first process, that is, the second process can directly extract the first vni from the reserved segment buffer.
  • the first vni obtained through parsing and obtaining by the first process may be saved in the reserved segment buffer area, and may be directly extracted and used by the second process, that is, It can avoid that the second process also executes the step of "parsing and obtaining the first vni from the first data segment", which improves the working efficiency of the server.
  • the initial inner layer data header is the Inner IP header in the initial data in the step S103, that is, the second process extracts the reserved segment buffer according to the pointer of the initial data Describe the first vni.
  • the second process looks up the corresponding nat IP, nat PORT and second vni in the nat conversion table and vni conversion table respectively.
  • the nat conversion table can be a private network IP-nat IP conversion table, and each nat IP can correspond to a private network IP, that is, the private network IP obtained according to the initial inner layer data header can be in the nat conversion table Get the corresponding nat IP and corresponding nat PORT.
  • each first vni in the vni conversion table may correspond to a second vni.
  • the first vni may be called lan vni
  • the first vni (lan vni) and the Outer UDP header, Outer IP header and Outer Ethernet header correspond
  • the second vni obtained through the vni conversion table can be called wan vni, and further, it can also be determined according to the second vni (wan vni) New corresponding Outer UDP header, Outer IP header and Outer Ethernet header.
  • the second process determines the nat inner data header information according to the nat IP and the nat PORT.
  • the initial inner layer data header may include the original Inner Ethernet header, the original Inner IP header and the original Inner TCP header, taking the terminal sending the first data segment to the server as an example:
  • the MAC address of the sending end in the original Inner Ethernet header and the MAC address of the lan interface of the second process can be updated to the MAC address of the wan interface of the second process and the MAC address of the next-hop device respectively ;
  • the IP address of the sender in the original Inner IP header can be modified to the nat IP; the port of the sender in the original Inner TCP header can be modified to the nat PORT; above, update the initial inner layer data header It is the inner layer data header of the nat.
  • step S105 may include the following steps:
  • Step 1 The network card sends the pointer of the Payload in the initial data to the first process.
  • the second process obtains the pointer of the Payload in the initial data, and sends the pointer of the Payload in the initial data to the network card, and then, the network card can also send The first process sends a Payload pointer in the initial data.
  • the first process can quickly locate the initial position of the Payload in the initial data, and at this time only the Payload in the initial data and the content behind it are visible to the first process, avoiding the The content before the Payload in the initial data interferes with the first process, improving the work efficiency of the first process.
  • Step 2 The first process determines to access the second vni according to the Payload pointer in the initial data.
  • the first process obtains the pointer of the Payload in the initial data, it searches backward according to the interval where the Payload is located in the initial data.
  • the Payload pointer in the initial data can also indirectly determine the Reserving a segment buffer to acquire the second vni; and then performing the related operations of step S105 on the initial data and the second vni.
  • step S105 the following steps may be included after step S105:
  • the network card determines a corresponding sending tunnel according to the second data segment.
  • the second encapsulated data in the second data segment can determine a pair of IP addresses at both ends of the tunnel and the source MAC address of the tunnel, but one end of different tunnels may correspond to the same source MAC address and IP address. address; further, the second vni in the second data segment can determine the sending tunnel through the VXLAN network identifier.
  • the network card sends the second data segment according to the sending tunnel.
  • the sending tunnel is the transmission path of the second data segment.
  • the sending One end of the tunnel is the physical port of the network card, and the other end of the sending tunnel is the physical port of the bras, that is, the second data segment can be transmitted from the network card to the bras.
  • the server also includes a third process
  • the first encapsulated data also includes a source IP address and a destination IP address
  • the step S101 may include the following steps:
  • the first process parses the first encapsulated data from the first data segment to obtain the source IP address and the destination IP address, and save the source IP address and the destination IP address to the reserved segment buffer.
  • the Outer IP header in the first data segment includes IP SA603 and IP DA604, wherein IP SA is the source IP address, that is, the IP address of the VTEP at the source end of the VXLAN tunnel, and IP DA is the destination IP address, that is, the IP address of the destination VTEP of the VXLAN tunnel.
  • IP SA is the source IP address, that is, the IP address of the VTEP at the source end of the VXLAN tunnel
  • IP DA is the destination IP address, that is, the IP address of the destination VTEP of the VXLAN tunnel.
  • the first process can access the first data segment, and parse the first encapsulation data in the first data segment, and obtain the Outer IP header in the first encapsulation data according to the parsing result , to obtain the source IP address and the destination IP address therein. It can be understood that at this time, what is stored in the data segment buffer is the initial data, and what is saved in the reserved segment buffer is the source IP address and the destination IP address.
  • a preset interval may be reserved between the reserved segment buffer and the data segment buffer to properly distinguish the data segment from the stored part of the information in the data segment, so , where the source IP address, the destination IP address and the initial data can all reserve a corresponding preset space, so that when the source IP address and the destination IP address are acquired later,
  • the reserved segment buffer is determined according to the preset relative position of the first byte of the data segment buffer and the first byte of the reserved segment buffer
  • this embodiment can further verify The source IP address and the destination IP address, for example, can further determine whether there is a preset interval between "the source IP address and the destination IP address determined through the above steps" and the data segment cache area, so as to determine Whether the "determined source IP address and destination IP address" are the real source IP address and destination IP address.
  • the first process may send related instructions such as "unpacking data segment task completion instruction" to the network card to inform the network card that the first A process has completed related operations such as "unpacking the data segment", so that the network card can perform the next operation.
  • the first process may acquire the pointer of the initial data at this time, and the first process may also send the pointer of the initial data to the network card.
  • the third process extracts the source IP address and the destination IP address from the reserved segment buffer, and judges whether the first data segment is Legal data header.
  • the network card can also send the pointer of the initial data to the third process, so that the third process can quickly locate the initial data according to the pointer of the initial data. , so as to improve the working efficiency of the third process.
  • the source IP address and the destination IP address are respectively the IP address of the source VTEP and the IP address of the destination VTEP of the VXLAN tunnel, that is, the third process
  • the destination IP address can determine multiple VXLAN tunnels that can transmit the first data segment.
  • the third process may include a VXLAN tunnel table, and the VXLAN tunnel table lists legal conditions of data segments passing through each VXLAN tunnel. Therefore, according to the VXLAN tunnel corresponding to the first data segment, and then searching the VXLAN tunnel table, it can be determined whether the first data segment is legal.
  • the third process processes the initial data.
  • the third process may read the initial data, modify the initial data, and send the initial data.
  • the third process discards the initial data.
  • the third process may ignore the initial data and continue to perform related operations on other data segments.
  • the steps S401-S404 can be executed before the step S101, that is, it can be judged first whether the first data segment is a legal data header, and only when the first data segment is a legal data header, will it be executed The step S101, otherwise, the step S101 is not executed.
  • the server further includes a fourth process
  • the network card further includes a mirror buffer
  • the mirror buffer includes a mirror data segment buffer and a mirror reserved segment buffer
  • the network card receives the first data segment, and saves the first data segment to the data segment buffer, the first data segment includes first package data and initial data, and the first package data includes the first vni
  • the step may include the following steps:
  • the first process parses the first packaged data from the first data segment to acquire the first vni, and judges whether the user of the first data segment has enabled virus detection according to the first vni Serve.
  • the first process can access the first data segment, and parse the first encapsulation data in the first data segment, and obtain the first vni in the first encapsulation data according to the parsing result ; Further, the first process stores a mapping of multiple vnis and multiple results of "whether to activate virus detection service", that is, each vni will correspond to the result of "yes” or “no” to activate virus detection service. After the first process obtains the first vni, it can find the corresponding result of "whether to activate the virus detection service” according to the above mapping, so as to determine whether the user of the first data segment has activated the virus detection service.
  • the first process saves the first data segment to the mirrored data segment buffer, and saves the first vni to the mirrored pre- Segment cache.
  • the first process may first copy the first data segment, and then save the copied first data segment to the mirrored data segment cache Similarly, in the step S501, after the first process acquires the first vni, the first vni may be temporarily stored, and when the user of the first data segment activates the virus detection service, the The first process may save the temporarily stored first vni to the mirror reserved segment buffer.
  • both the first data segment and the first vni are stored in the mirror buffer, it can be understood that the first process performs mirror processing on the first data segment and the first vni, so that the The first data segment and the first vni are also stored in the mirror buffer area; like this, when multiple processes need to access the first data segment or the first vni at the same time, they can be accessed from the cache respectively.
  • the second process can execute the steps S103-S104, and at the same time, the fourth process can execute the step S503.
  • the fourth process does not need to spend time waiting for the second process to execute the steps S103-S104 before executing the step S503, that is, the time and the time for the second process to execute the steps S103-S104
  • the time for the fourth process to execute the step S503 does not need to be accumulated, but both are parallel; further, because the time for the second process to execute the steps S103-S104 and the time for the fourth process to execute the steps
  • the time of S503 exists in parallel rather than serially, so the time between receiving the first data segment and sending the first data segment of the network card in the embodiment of the present invention can be reduced, improving the Describe the efficiency of the server work.
  • the fourth process extracts the first data segment and the first vni from the mirror buffer, and generates a corresponding virus detection report according to the rules of the virus detection service.
  • the rules of the virus detection service can be understood as follows: multiple virus types are defined in the fourth process, and the fourth process can extract and parse the first data segment. If the data segment data analyzed in the segment hits at least one virus type in the plurality of virus types, then the fourth process will generate a virus detection report, which includes the virus detection report according to the first vni The determined user information and the virus type corresponding to the user information.
  • FIG. 12 it is a schematic diagram of the signaling interaction of the data information processing method in the embodiment of the present invention.
  • the schematic diagram of the signaling interaction of the data information processing method includes the following steps:
  • the network card receives the first data segment, and saves the first data segment to the data segment buffer area;
  • the network card sends the pointer of the first data segment to the first process
  • the first process parses the first encapsulated data in the first data segment from the first data segment, and acquires the first vni in the first encapsulated data;
  • the first process saves the first vni to a reserved segment buffer
  • the first process sends an "unblocking data segment task completion instruction" to the network card
  • the network card sends a pointer to the initial data in the first data segment to the second process
  • the second process extracts the initial data from the data segment buffer, and extracts the first vni from the reserved segment buffer;
  • the second process determines corresponding nat inner layer data header information and a second vni according to the initial data and the first vni;
  • the second process saves the nat inner layer data header information to the reserved segment buffer
  • the second process saves the second vni to the reserved segment buffer
  • the second process sends a "processing data segment information task completion instruction" to the network card
  • the network card sends a pointer to the Payload in the initial data in the first data segment to the first process
  • the first process extracts the second vni from the reserved segment buffer, and determines second encapsulation data according to the second vni;
  • the first process saves the second packaged data to the reserved segment buffer, so that the initial data located in the data segment buffer, the nat located in the reserved segment buffer
  • the inner data header information and the second encapsulated data together constitute a second data segment
  • the first process sends an "encapsulation data task completion instruction" to the network card.
  • the server 400 includes a network card 401, The first process 402 and the second process 403, the network card 401 includes a buffer area, and the buffer area includes a data segment buffer area and a reserved segment buffer area;
  • the network card 401 is configured to receive a first data segment, and save the first data segment to the data segment buffer, the first data segment includes first encapsulated data and initial data, and the first encapsulated data Including the first vni;
  • the first process 402 is configured to parse the first packaged data from the first data segment and acquire the first vni, and save the first vni to the reserved segment buffer;
  • the second process 403 is configured to extract the initial data from the data segment buffer, extract the first vni from the reserved segment buffer, and extract the initial data and the first vni according to the initial data and the first vni Determine the corresponding nat inner data header information and the second vni;
  • the second process 403 is also configured to save the nat inner layer data header information and the second vni to the reserved segment buffer;
  • the first process 402 is further configured to extract the second vni from the reserved segment cache, determine second package data according to the second vni, and save the second package data to the reserved segment A buffer area, so that the initial data located in the data segment buffer area, the nat inner layer data header information located in the reserved segment buffer area and the second encapsulated data together constitute a second data segment.
  • the second process 403 is further configured to extract an initial inner data header from the initial data, and extract the first vni from the reserved segment buffer;
  • the network card 401 is further configured to send a pointer of the first data segment to the first process 402;
  • the first process 402 is further configured to access the first data segment according to the pointer of the first data segment.
  • the network card 401 is further configured to send the pointer of the initial data to the second process.
  • the second process 403 is further configured to access the initial data and the first vni according to the pointer of the initial data.
  • the network card 401 is further configured to determine a corresponding sending tunnel according to the second data segment.
  • the network card 401 is further configured to send the second data segment according to the sending tunnel.
  • the server further includes a third process 404
  • the first encapsulation data further includes a source IP address and a destination IP address
  • the first process 402 is also used to Analyzing the first encapsulated data in the first data segment to obtain the source IP address and the destination IP address, and saving the source IP address and the destination IP address to the reserved segment cache District;
  • the third process 404 is specifically used for:
  • the third process processes the initial data
  • the third process discards the initial data.
  • the server further includes a fourth process 405, and the network card further includes a mirror cache area, and the mirror cache area includes a mirror data segment cache area and a mirror reserved segment cache area, the first process 402 is further configured to parse the first packaged data from the first data segment and obtain the first vni, and determine the user of the first data segment according to the first vni Whether to subscribe to the virus detection service; and
  • the first process 402 is further configured to save the first data segment to the mirrored data segment buffer, and save the first vni to mirror reserved segment buffer;
  • the fourth process 405 is specifically used for:
  • the present invention provides a data information processing method and a server.
  • the buffer area in the network card includes a data segment buffer area and a reserved segment buffer area.
  • the first process parses the first VNI from the first data segment and converts the first VNI Save to the reserved segment buffer; the second process extracts the first vni from the reserved segment buffer, and determines the corresponding nat inner layer data header information and the second vni according to the first vni;
  • the second process saves the nat inner layer data header information and the second vni to the reserved segment buffer; the first process then extracts the second vni from the reserved segment buffer to Do the corresponding operation.
  • the reserved segment buffer area is opened in the buffer area of the network card, and the first vni, nat inner data header information and the second vni obtained by the first process and the second process are temporarily stored in the reserved segment buffer area , so that the first process and the second process can share the information obtained by processing each other, avoiding partial duplication of operations performed by the first process and the second process; and when the first process and the second process obtain The corresponding information in the first data segment and the corresponding operations are performed while still ensuring the integrity of the first data segment, so that other processes can normally obtain the information of the first data segment, preventing the server from restarting from the outside world The first data segment is obtained for use by other processes.
  • this solution improves the working efficiency of the server.
  • the embodiment of the present invention also provides a server, as shown in FIG. 16 , which shows a schematic structural diagram of the server involved in the embodiment of the present invention, specifically:
  • the server may include a processor 801 of one or more processing cores, a memory 802 of one or more computer-readable storage media, a power supply 803, an input unit 804 and other components.
  • a processor 801 of one or more processing cores may include a processor 801 of one or more processing cores, a memory 802 of one or more computer-readable storage media, a power supply 803, an input unit 804 and other components.
  • FIG. 16 is not limited to the server, and may include more or less components than shown in the figure, or combine some components, or arrange different components. in:
  • the processor 801 is the control center of the server, and uses various interfaces and lines to connect various parts of the entire server, by running or executing software programs and/or modules stored in the memory 802, and calling data stored in the memory 802, Execute various functions of the server and process data to monitor the server as a whole.
  • the processor 801 can include one or more processing cores; the processor 801 can be a central processing unit (Central Processing Unit, CPU), and can also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP ), Application Specific Integrated Circuit (ASIC), off-the-shelf programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.
  • CPU Central Processing Unit
  • DSP Digital Signal Processor
  • ASIC Application Specific Integrated Circuit
  • FPGA Field-Programmable Gate Array
  • the general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc., preferably, the processor 801 can integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, User interface and application programs, etc., modem processor mainly handles wireless communication. It can be understood that the foregoing modem processor may not be integrated into the processor 801 .
  • the memory 802 can be used to store software programs and modules, and the processor 801 executes various functional applications and data processing by running the software programs and modules stored in the memory 802 .
  • the memory 802 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playback function, an image playback function, etc.); The data created by the use of the server, etc.
  • the memory 802 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage devices.
  • the memory 802 may also include a memory server, so as to provide the processor 801 with access to the memory 802.
  • the server also includes a power supply 803 for supplying power to each component.
  • the power supply 803 can be logically connected to the processor 801 through the power management system, so that functions such as charging, discharging, and power consumption management can be realized through the power management system.
  • the power supply 803 may also include one or more DC or AC power supplies, recharging systems, power failure detection circuits, power converters or inverters, power status indicators and other arbitrary components.
  • the server can also include an input unit 804, which can be used to receive input numbers or character information, and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control.
  • an input unit 804 can be used to receive input numbers or character information, and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control.
  • the server may also include a display unit, etc., which will not be repeated here.
  • the processor 801 in the server will load the executable file corresponding to the process of one or more application programs into the memory 802 according to the following instructions, and the processor 801 will run the executable file stored in the memory. 802 to implement various functions, the processor 801 can issue instructions to the network card, the first process and the second process in the server, so that the network card, the first process and the second process The process performs the following steps in sequence:
  • the network card receives a first data segment, and saves the first data segment to the data segment buffer area, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes the first vni;
  • the first process parses the first packaged data from the first data segment and acquires the first vni, and saves the first vni to the reserved segment buffer;
  • the second process extracts the initial data from the data segment buffer, extracts the first VNI from the reserved segment buffer, and determines the corresponding VNI according to the initial data and the first VNI. Nat inner data header information and the second vni;
  • the second process saves the nat inner layer data header information and the second vni to the reserved segment buffer;
  • the first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data to the reserved segment buffer , so that the initial data located in the data segment buffer, the nat inner data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.
  • the embodiment of the present invention provides a kind of computer-readable storage medium, and this storage medium can comprise: Read Only Memory (ROM, Read Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk etc. .
  • a computer program is stored thereon, and the computer program is loaded by the processor to issue instructions to the network card, the first process and the second process in the server, so that the network card, the first process and the second process The process performs the following steps in sequence:
  • the network card receives a first data segment, and saves the first data segment to the data segment buffer area, the first data segment includes first encapsulated data and initial data, and the first encapsulated data includes the first vni;
  • the first process parses the first packaged data from the first data segment and acquires the first vni, and saves the first vni to the reserved segment buffer;
  • the second process extracts the initial data from the data segment buffer, extracts the first VNI from the reserved segment buffer, and determines the corresponding VNI according to the initial data and the first VNI. Nat inner data header information and the second vni;
  • the second process saves the nat inner layer data header information and the second vni to the reserved segment buffer;
  • the first process extracts the second vni from the reserved segment buffer, determines second package data according to the second vni, and saves the second package data to the reserved segment buffer , so that the initial data located in the data segment buffer, the nat inner data header information located in the reserved segment buffer and the second encapsulated data together constitute a second data segment.
  • each of the above units or structures can be implemented as an independent entity, or can be combined arbitrarily as the same or several entities.
  • each of the above units or structures please refer to the previous method embodiments, here No longer.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

La présente invention concerne un procédé de traitement d'informations de données, ainsi qu'un serveur. Le procédé consiste à : enregistrer, au moyen d'une carte d'interface réseau, un premier segment de données dans une zone tampon de segment de données, le premier segment de données comprenant des premières données encapsulées et des données initiales ; au cours d'un premier processus, analyser les premières données encapsulées afin d'acquérir un premier vni, puis enregistrer le premier vni dans une zone tampon de segment réservé ; au cours d'un second processus, extraire respectivement les données initiales et le premier vni de la zone tampon de segment de données et de la zone tampon de segment réservé, puis enregistrer, dans la zone tampon de segment réservé, des informations d'en-tête de données de couche interne nat et un second vni qui sont déterminés en fonction des données initiales et du premier vni ; et au cours du premier processus, extraire le second vni de la zone tampon de segment réservé, puis enregistrer, dans la zone tampon de segment réservé, des secondes données encapsulées déterminées selon le second vni, de façon à ce que les données initiales, les informations d'en-tête de données de couche interne nat et les secondes données encapsulées forment ensemble un second segment de données. Au moyen de la solution, une zone tampon de segment réservé est prévue pour enregistrer et traiter des informations de données, ainsi que pour empêcher un premier segment de données d'être détruit, ce qui permet d'améliorer l'efficacité de fonctionnement d'un serveur.
PCT/CN2021/135684 2021-08-03 2021-12-06 Procédé de traitement d'informations de données et serveur WO2023010731A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202110884143.3A CN113630341B (zh) 2021-08-03 2021-08-03 数据信息处理的方法和服务器
CN202110884143.3 2021-08-03

Publications (1)

Publication Number Publication Date
WO2023010731A1 true WO2023010731A1 (fr) 2023-02-09

Family

ID=78382370

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/135684 WO2023010731A1 (fr) 2021-08-03 2021-12-06 Procédé de traitement d'informations de données et serveur

Country Status (2)

Country Link
CN (1) CN113630341B (fr)
WO (1) WO2023010731A1 (fr)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113630341B (zh) * 2021-08-03 2023-06-06 武汉绿色网络信息服务有限责任公司 数据信息处理的方法和服务器

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080229325A1 (en) * 2007-03-15 2008-09-18 Supalov Alexander V Method and apparatus to use unmapped cache for interprocess communication
CN101887399A (zh) * 2010-06-28 2010-11-17 北京用友政务软件有限公司 服务器端无障碍存取高速缓存数据的方法
CN104111897A (zh) * 2013-04-16 2014-10-22 华为技术有限公司 一种数据处理方法、装置及计算机系统
CN105608159A (zh) * 2015-12-18 2016-05-25 北京奇虎科技有限公司 数据缓存的方法和装置
CN113630341A (zh) * 2021-08-03 2021-11-09 武汉绿色网络信息服务有限责任公司 数据信息处理的方法和服务器

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6304564B1 (en) * 1996-11-29 2001-10-16 Lucent Technologies Inc. Method for transmitting messages in wireless communication system using a server process
EP1586182B1 (fr) * 2003-01-23 2007-12-19 Cisco Technology, Inc. Procedes et dispositifs d'emission de donnees entre des reseaux de zone de stockage
CN103200085B (zh) * 2013-04-16 2016-05-25 中航网信(北京)科技有限公司 一种实现vxlan报文线速收发的方法及系统
US9571362B2 (en) * 2013-05-24 2017-02-14 Alcatel Lucent System and method for detecting a virtual extensible local area network (VXLAN) segment data path failure
US9692698B2 (en) * 2014-06-30 2017-06-27 Nicira, Inc. Methods and systems to offload overlay network packet encapsulation to hardware
WO2017177400A1 (fr) * 2016-04-13 2017-10-19 华为技术有限公司 Procédé et système de traitement de données
US10713277B2 (en) * 2017-10-26 2020-07-14 Sap Se Patching content across shared and tenant containers in multi-tenancy database systems
CN110071880B (zh) * 2018-01-24 2021-06-18 北京金山云网络技术有限公司 报文转发方法、转发装置、服务器及存储介质
US11962499B2 (en) * 2018-10-31 2024-04-16 Vmware, Inc. Multitenancy for service machines
CN109857517B (zh) * 2019-01-04 2020-12-29 中国科学院计算技术研究所 一种虚拟化系统及其数据交换方法
CN110086571A (zh) * 2019-04-10 2019-08-02 广州华多网络科技有限公司 一种数据发送及接收的方法、装置及数据处理系统
US10877822B1 (en) * 2019-12-16 2020-12-29 Vmware, Inc. Zero-copy packet transmission between virtualized computing instances

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080229325A1 (en) * 2007-03-15 2008-09-18 Supalov Alexander V Method and apparatus to use unmapped cache for interprocess communication
CN101887399A (zh) * 2010-06-28 2010-11-17 北京用友政务软件有限公司 服务器端无障碍存取高速缓存数据的方法
CN104111897A (zh) * 2013-04-16 2014-10-22 华为技术有限公司 一种数据处理方法、装置及计算机系统
CN105608159A (zh) * 2015-12-18 2016-05-25 北京奇虎科技有限公司 数据缓存的方法和装置
CN113630341A (zh) * 2021-08-03 2021-11-09 武汉绿色网络信息服务有限责任公司 数据信息处理的方法和服务器

Also Published As

Publication number Publication date
CN113630341A (zh) 2021-11-09
CN113630341B (zh) 2023-06-06

Similar Documents

Publication Publication Date Title
CN112398817B (zh) 数据发送的方法及设备
US20180309595A1 (en) Method for sending virtual extensible local area network packet, computer device, and computer readable medium
CN110048963B (zh) 虚拟网络中的报文传输方法、介质、装置和计算设备
KR102388195B1 (ko) Bras 시스템 기반 메시지 패키징 방법 및 장치
WO2021013046A1 (fr) Procédé de communication et carte réseau
CN112040030B (zh) 报文传输方法、装置、计算机设备及存储介质
CN112333298B (zh) 报文传输方法、装置、计算机设备及存储介质
CN108924274B (zh) 域名系统dns处理方法、装置、存储介质及电子设备
CN113132202B (zh) 一种报文传输方法及相关设备
WO2024067336A1 (fr) Procédé de traitement de paquet, dispositif de carte réseau programmable, serveur physique et support de stockage
CN107770072B (zh) 一种发送和接收报文的方法和设备
US20220255772A1 (en) Packet sending method, apparatus, and system
EP3771169A1 (fr) Procédé de traitement de message et dispositif associé
CN115486046A (zh) 基于开放虚拟软交换机ovs的数据包处理方法及设备
WO2020019958A1 (fr) Procédé, dispositif et système d'encapsulation de message vxlan, et procédé, dispositif et système d'exécution de stratégie
WO2023010731A1 (fr) Procédé de traitement d'informations de données et serveur
WO2022116850A1 (fr) Procédé et dispositif d'identification d'utilisateur de réseau privé, système de service et support de stockage
CN114584526A (zh) 一种arp协议处理方法、系统、存储介质及电子设备
WO2023010730A1 (fr) Procédé et serveur d'analyse de paquets de données
WO2024037366A1 (fr) Procédé d'émission de règle de transfert, et carte d'interface réseau intelligente et support de stockage
WO2020083380A1 (fr) Traitement de message
CN113259220B (zh) 共享报文中私有信息的方法和服务器
WO2022078001A1 (fr) Procédé et appareil pour gérer une règle statique, et dispositif électronique et support de stockage
WO2021088357A1 (fr) Procédé de génération d'informations de transfert, dispositif et système associés
CN114567614A (zh) 基于fpga实现arp协议处理的方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21952594

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE