Hierarchical parallel high-speed network transmission control protocol (TCP) flow recombination method based on field programmable gate array (FPGA)

Abstract

The invention discloses a hierarchical parallel high-speed network transmission control protocol (TCP) flow recombination method based on a field programmable gate array (FPGA). The hierarchical parallel high-speed network TCP flow recombination method includes that a hierarchical parallel structure based on the FPGA is adopted, master nodes serving as the first grade achieve load balancing scheduling for a captured network data packet, and high speed network data flow is instantly and evenly scheduled to slave nodes serving as the second grade under the premise of ensuring flow granularity; the slave nodes concurrently access a translation lookaside buffer and a hash-based two-way circular linked list, the process that the hash two-way circular linked list seeks a flow record is finished if the flow record is found in the process of translation lookaside buffer accessing, otherwise the hash two-way circular linked list seeks the result, accordingly the state of a TCP flow is determined, then whether a data packet of the accessed TCP flow record is in order is judged, storage spaces are distributed for the out-of-order data packet, and a static linked list is used for maintaining the out-of-order data packet in the flow to achieve TCP flow local recombination. Therefore, the data packet of the TCP flow is led to be integrally in order under the premise of ensuring that the data packet of the TCP flow is locally in order.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to an FPGA-based hierarchical parallel high-speed network TCP stream recombination method. Background technique [0002] With the increasing complexity and diversification of cybercrime methods, traditional methods cannot detect some special new intrusion behaviors. If sensitive information is fragmented into several different data packets, the characteristics of the data packets will disappear and cannot be detected. Malicious behavior cannot meet the actual needs of network security protection and combating cybercrime. [0003] In order to improve the accuracy of malicious data flow detection, we cannot just use packet-level processing, but must reassemble all the data packets of each TCP flow into a complete session flow for application-level analysis. Since the TCP flow is divided into multiple IP fragments for transmission at the IP layer, there may be out-of-order, repea...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is the deficiencies of the existing TCP flow reassembly method with large delay and low efficiency, and provides a hierarchical parallel high-speed network TCP flow reassembly method based on FPGA

Images