Flow limit system and method thereof based on network processor

Abstract

The invention provides a flow limit system and a method thereof based on a network processor, the system comprises a network processor and a supervisory computer; the network processor is connected with a DRAM memory and a SRAM memory; the network processor is provided with an MSF exchanging structure, a flow sniffing micromodule, a flow filtering micromodule, a learning machine and an Xscale management interface. The high speed performance of the network processor is effectively utilized, a relevant flow limiting policy is made through the self-learning function of the learning machine, different flow limiting policies are carried out according to the state of network packets which are stored in the DRAM memory and a policy table in the SRAM memory, normal network flow is ensured to be unblocked, and the data flow of untrusted users and blacklist users can be quickly and effectively limited, thereby achieving the purpose of protecting the system.

Description

technical field [0001] The invention relates to the field of network information security, in particular to a flow limiting system and method based on a network processor. Background technique [0002] With the rapid development of the network, the problem of network security is becoming more and more serious. From the analysis of most network security incidents, the network traffic will show abnormality when a security threat occurs, so the detection and restriction of network traffic has a very positive significance for ensuring network security. Abnormal network traffic refers to obvious irregular changes in network traffic within a certain period of time. In general, the causes of abnormal network traffic can be roughly divided into two categories: system or network configuration errors that cause network traffic to reach the environmental tolerance limit; malicious network attacks occur. So far, a large number of domestic and foreign researchers have conducted in-dept...

AI Technical Summary

Problems solved by technology

[0003] However, the abnormal traffic restriction technology matched with the abnormal traffic detection technology is relatively lagging behind

At present, traffic limitation is generally associated with load balancing, and traffic limitation is adopted only for the purpose of system load balancing. Although this can ensure system stability, it is difficult to guarantee high-quality QoS (Quality of Service, Quality of Service) )

On the other hand, the TCP / IP protocol itself has congestion control technology related to flow limitation, which has a good control effect on normal flow and can also guarantee the necessary QoS, but when it comes to abnormal flow, it seems powerless , cannot guarantee the necessary QoS

Furthermore, most of the existing traffic limitation methods lack adaptability and intelligence

Images