IP packet classification method and apparatus

A technology of packet classification and equipment, which is applied in the field of network identification, can solve the problems of inability to process updates in real time, IP packet classification cannot handle massive rules, etc., and achieve good scalability, saving computing power, and fast speed

Active Publication Date: 2008-11-19
INST OF COMPUTING TECH CHINESE ACAD OF SCI
View PDF0 Cites 23 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0007] In order to overcome the defects that the existing IP packet classification cannot handle massive rules and cannot process updates in real time, the present invention proposes an IP packet classification method and equipment

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • IP packet classification method and apparatus
  • IP packet classification method and apparatus
  • IP packet classification method and apparatus

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0042] A method and device for classifying IP packets provided by the present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0043] Bloom Filter is a data structure with high space efficiency. It uses bit groups to represent a collection concisely, and can quickly determine whether an element belongs to this collection. However, Bloom Filter is not suitable for dynamic addition and deletion of collection elements—every time an element is deleted, the bit group representing the collection needs to be recalculated, which is a very time-consuming process. For this reason, a Bloom Filter (Counting Bloom Filter, CBF) with a counter is proposed, and each bit of the bit group in the Bloom Filter is replaced by a counter. Each counter of CBF is initialized to all 0s, and every time an element is added, the counters at the corresponding positions of the k Hash functions are incremented by 1; to delete an element, on...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention proposes a packet-classification method and the implementation device based on the Bloom Filter, including a Counting Bloom Filter forecasting module used for executing the forecast based on the Counting Bloom Filter towards the 5-tuple of the received and extracted IP packet of the network device and acquiring the forecast result and a rule matching module used for matching the forecast result with the rule table organized into a Hash table and determining the rule applied on the IP packet. The SRAM storage rule can be adopted to support the large rule set with the size of more than 100K and the real-time updating of the rule set; besides, the packet-classification method and the implementation device based on the Bloom Filter have extensibility and reduce the average storage accessing time to less than once and process the IP packet flow with the speed of 10Gbps or even higher speed through line-speed processing under certain conditions.

Description

technical field [0001] The present invention relates to the technical field of network identification, and more specifically, the present invention relates to an IP packet classification method and equipment. Background technique [0002] IP packet classification (packet classification) technology is widely used in various network environments and devices. For example, in routers, packet classification can be used to determine which port a packet is output from; in firewalls, packet classification can determine whether a packet should be is filtered. [0003] The most commonly used packet classification method is based on the five-tuple in the IP header: source IP address (SIP), destination IP address (DIP), source port (SP), destination port (DP) and protocol (PRO). After receiving the IP packet, the network device extracts the quintuple, determines whether the quintuple matches the stored rule, and then performs corresponding operations on the IP packet. [0004] The pac...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/56H04L12/743
Inventor 刘兴奎刘新春曹政杨卫兵王达伟窦晓光王文迪
Owner INST OF COMPUTING TECH CHINESE ACAD OF SCI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products