Entry regulation method, entry regulation device and switching equipment

Abstract

The invention provides an entry regulation method, an entry regulation device and a piece of switching equipment. The entry regulation method comprises the following steps: acquiring a target IP address of a message to be sent to a CPU (central processing unit); if the target IP (internet protocol) address belongs to a local direct networking section, then determining the rate of the message to be sent to the CPU, wherein the message corresponds to the direct networking section where the target IP address belongs; if the rate of the message to be sent to the CPU is larger than a pre-set rate threshold and a route entry is currently installed on a network route table, then moving the route entry corresponding to the direct networking section where the target IP address belongs from the table to an FFP (fast filter processor) table, and setting the highest sending rate for the message which hits the target of the route entry corresponding to the direct networking section where the target IP address belongs in the FFP table and is to be sent to the CPU. Therefore, the rate of the sent message can be controlled, and the CPU is enabled to bear the rate, so that the analysis performance of an ARP (address resolution protocol) is guaranteed in a wire-speed flow pressure scene.

Description

technical field [0001] The invention relates to network and data communication technologies, in particular to a table item adjustment method, device and switching equipment, belonging to the technical field of communication. Background technique [0002] From the perspective of the forwarding model, the three-layer switch is usually divided into two layers: the control plane and the forwarding plane. The control plane is composed of a central processing unit (Central Processing Unit; It is composed of an application-specific integrated circuit (Application Specific Integrated Circuit; hereinafter referred to as: ASIC) switching chip. Among them, the control plane is responsible for protocol interaction, and the forwarding plane is responsible for wire-speed forwarding of packets. The control plane is a software behavior that requires CPU resources and can analyze and process packets; the forwarding plane is a hardware behavior of the ASIC switching chip that does not occupy...

AI Technical Summary

Problems solved by technology

However, the problem with this solution is that if the range of the network segment is too large, the amount of ARP request packets actively sent will be very large. For example, if the interface IP address is configured as 1.1.1.1 / 8, then the local direct connection The network segment is 1.0.0.0 / 8, and the number of hosts that may exist in this network segment reaches 2 to the 24th power, that is, tens of millions. To send so many ARP requests, it is obviously not worth the candle, and it will cause CPU paralysis

[0020] 2) Suppress a large number of IP packets from being sent to the CPU: As mentioned above, once a large number of IP packets that cannot be processed are sent to the CPU for processing on the forwarding plane, the CPU utilization rate will soar, or even be paralyzed, resulting in a sudden drop in ARP communication performance

However, although this solution protects the CPU, it also discards the IP packets that should be sent to the CPU for processing (that is, prohibiting sending to the CPU), which does not have much effect on ensuring the performance of ARP connectivity.

[0021] To sum up, the existing technical solutions cannot guarantee the performance of ARP opening under the line-speed traffic pressure scenario

Images