Method for implementing several network security functions with one chip

Abstract

The invention discloses a method of realizing multiterm network safety function by using a single chip. The method comprises the following steps: the chip carries out an analysis to the received message and obtains the content of the crucial fields about inputting the message; according to the analysis result, double layer process is carried out and the MAC table is used for research; if the research of the MAC table hits target, then a source IP, ,a target IP, a source port, a target port and a protocol in the analyzed message are used for looking for the firewall connection table; if not hit target, then the content is sent to the CPU and the CPU make a further process; if the research for the firewall connection table hits target, the message is carried out the corresponding process according to the marks in the firewall connection table; if failing not hit target, then be sent to the CPU and the CPU makes a further process. The invention improves the system performance of the network and reduces the system cost.

Description

technical field [0001] The invention relates to the technical field of network security and networking, in particular to a method for realizing multiple network security functions with a single chip. Background technique [0002] With the continuous development of network technology, the network has become an indispensable tool in social life. Enterprises as small as soho (home office) and as large as tens of thousands of people have established their own networks. What happened is that the harm caused by network viruses and hackers is getting bigger and bigger, each time is more frequent, the scope of influence is getting bigger every time, and the losses caused are getting more serious every time. Faced with this situation, all enterprises with networks have to seriously consider the security of their own networks. To solve network security, of course, cannot do without network security equipment. Currently, the network security equipment on the market adopts the followi...

AI Technical Summary

Problems solved by technology

The disadvantage of this scheme is: to process each message, the route in the routing table must be searched again to match the address translation rules in the NAT table, so the performance will be greatly limited; in addition, the size of the routing table and the NAT table are not It may be too large, which also seriously limits its practical application range

[0009] The above solutions have shortcomings, either their performance is not high, or the performance in complex applications is not high, and they cannot meet the growing needs of customers.

Images