Message diversion processing method and device

Abstract

The invention discloses a message diversion processing method which is applied to a message diversion processing system comprising polycaryon network equipment. The method comprises the following steps: the polycaryon network equipment fetches quintuple information of a message; the polycaryon network equipment judges whether the message is a fragment message or not according to the fragment information of the message; if so, the Hash algorithm is carried out according to the source IP address, the destination IP address and the contents of the protocol of the message so as to acquire a virtual central processing unit (VCPU) corresponding to the message; if not, the Hash algorithm is carried out according to the source port, the destination port, the source IP address, the destination IP address and the contents of the protocol of the message so as to acquire the VCPU corresponding to the message; and the polycaryon network equipment processes the message through the acquired VCPU. Themethod enhances the message processing speed and efficiency of the polycaryon network equipment. The invention also discloses a device using the method.

Description

technical field [0001] The present invention relates to the technical field of communications, and in particular to a method and device for packet distribution processing. Background technique [0002] With the development of modern network technology and the expansion of network influence, more and more network devices, such as security gateways, edge routers, and core routers, need to support fast and accurate packet distribution. The development trend of the future network needs to provide users with better service quality, and mechanisms to improve service quality, such as firewalls, differentiated services, virtual private networks, policy-based routing, and high-level switching, are all based on efficient packet distribution technology. Using packet distribution technology, it can effectively detect and block viruses, attacks and abuse hidden in massive network traffic in real time, and can also effectively manage various traffic distributed in the network, so as to re...

AI Technical Summary

Problems solved by technology

[0008] However, for the three-tuple flow classification and fragmented message processing scheme, because many local area networks currently use NAT (Network Address Translation) technology to solve the current situation of insufficient global IP addresses, there are a large number of networks with the same IP but different ports. Data packets, and packets with the same IP address but different ports must be processed on the same VCPU. Therefore, it will cause unbalanced packet distribution, that is, some VCPUs lose packets due to congestion, while other VCPUs are at idle state

[0009] For the five-tuple flow classification and fragmented message processing scheme, the cache processing of fragmented messages will occupy memory space and reduce the classification speed. Searching the Hash linked list will bring a lot of overhead to the system. At the same time, fragmentation exists in the network. Storm attack, that is, intentionally sending some IP fragments instead of all IP fragments, will make the target host always in the state of waiting for fragmented packets, consuming and occupying system resources

Images