The present application relates to the technical field of
computer network, and especially relates to a fast forwarding method and
system of
network data packet of zero-patch kernel integration. The method comprises the following steps: registering a hook function at a key node of data
packet processing, obtaining a registration custom
processing function, expanding a connection tracking structure in a
Linux kernel connection
tracking system, and adding a custom field to store a fast forwarding state; constructing a fast NAT
connection table; when the data packet reaches the registration custom
processing function, calculating a hash value of the data packet, searching for a corresponding connection node in the fast NAT
connection table through the hash value; if the valid connection node is found, updating header information of the data packet and sending the data packet to a target interface; otherwise, marking connection tracking information and making the data packet go through a regular Netfilter
processing flow. The present application can solve the performance
bottleneck problem caused by the dependence of the Netfilter complete flow in the traditional
Linux kernel network forwarding scheme.