Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Package transmitting method and system based on safety service

A security service and packet forwarding technology, applied in the field of security service-based packet forwarding methods and systems, can solve the problems of reduced forwarding efficiency and long processing flow, etc.

Inactive Publication Date: 2010-02-10
NEW H3C TECH CO LTD
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Obviously, the processing flow is longer, which greatly reduces the packet forwarding efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Package transmitting method and system based on safety service
  • Package transmitting method and system based on safety service
  • Package transmitting method and system based on safety service

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0100] Since the quintuples of each packet in the same service flow are the same, and the security service entries are usually established based on the quintuples of the packets, and the forwarding entries: FIB entries and ARP entries are also based on the quintuples of the packets. Based on the tuple, it can be known that the security service processing and forwarding processing for each packet of the same service flow are the same. Therefore, the core idea of ​​the present invention is: when the FIB entry is learned, the ARP entry corresponding to the FIB entry is searched, the first association relationship between the FIB entry and the ARP entry is established, and the first packet of the service flow is processed according to In the prior art, search for security service table items, FIB table items, and ARP table items is performed, and according to the search results, the attribute information of the package, the information of all security services that need to be perfo...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention discloses a method and a system for packet forwarding based on the security service. A first association relation between an FIB table and an ARP table is established; the firstpacket of the service flow is received, the corresponding security service information and the FIB table of the first packet are obtained, and a second association relation between the attribute information of the service flow packet carried by the first packet and the security service information and the FIB table are established; the follow-up packet of the service flow is received, and according to the attribute information of the follow-up packet and the second association relation and the first association relation, the security service information and the ARP table information are searched, the follow-up packet is processed with the security service according to the security service information, and the follow-up packet is forwarded according to the ARP table information. The presentinvention does not need to search the security service table and the ARP table of each packet, thus greatly improving the packet forwarding efficiency based on the security service.

Description

technical field [0001] The invention relates to the technical field of security services, in particular to a packet forwarding method and system based on security services. Background technique [0002] With the popularization and development of the network, the requirements for network equipment are not only simple fast forwarding, but also need network equipment to provide security services. This market demand promotes the development of security equipment, and puts forward the following requirements for security equipment: in the case of implementing security services such as security inspection and filtering on network data, it still provides relatively good forwarding performance. [0003] For security devices to meet the above requirements, it depends on the improvement of hardware performance, as well as the organization of software-related entries and the optimization of related business processes. How to organize related main entries and rely on them to improve pro...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/56H04L29/06H04L45/74
Inventor 李明玉王飓邹旭东常向青
Owner NEW H3C TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products