Method for optimizing connection tracking under netfilter frame

Abstract

The invention provides a method for optimizing connection tracking under a netfilter frame. The method comprises a step of defining and initializing a present connection tracking number M, a maximum connection tracking number Mmax, a present applied connection tracking number N and a maximum applied connection tracking number Nmax, wherein Nmax is larger than Mmax, and a step of adding 1 to N when new connection tracking is applied and judging whether M is larger than Mmax or not. If M is larger than Mmax, an aging treatment is carried out, and then new connection tracking is built. If M is not larger than Mmax, whether N is larger than Nmax or not is judged. If N is larger than Nmax, an error is returned. If N is not larger than Nmax, the new connection tacking is built. After the new applied connection tracking is confirmed, M plus 1 is carried out, and the result is added into a confirmed connection tracking chain table. According to the method for optimizing the connection tracking, the number of valid connection tracking is guaranteed, exception handling is optimized, the responsibilities of the connection tracking at the stage of alloc initialization and the stage of confirm are defined, normal surfing on the internet is guaranteed, and resources with a good rate in the process of downloading are well kept.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to an optimization method for connection tracking under the netfilter framework. Background technique [0002] At present, the code architecture of most network CPE (customer terminal equipment) in China is based on Linux, and netfilter is also a standard network core processing layer. However, as the current users' requirements for the speed and quality of the network increase, the code of netfilter itself begins to show problems. Regarding connection tracking, the main manifestations are: [0003] 1) When multi-user BT downloads, users cannot access the Internet normally; [0004] 2) When multi-user BT downloads, the quality of services such as voice and video for users is significantly reduced or disconnected; [0005] 3) When multi-user BT downloads, users or bureaus cannot manage CPE normally through the network; [0006] 4) It is difficult for network CPE deve...

AI Technical Summary

Problems solved by technology

[0003] 1) When multi-user BT downloads, users cannot access the Internet normally;

[0004] 2) When multi-user BT downloads, the quality of services such as voice and video for users is significantly reduced or disconnected;

[0005] 3) When multi-user BT downloads, users or bureaus cannot manage CPE normally through the network;

[0006] 4) It is difficult for network CPE development users to deal with a large number of abnormal problems initiating new connections under the netfilter architecture

This random selection release method is no longer suitable for the current actual environment where BT downloads are becoming more and more common, especially the promotion of multi-network integration. The signal quality is poor and the flow is cut off; ③Normal Internet access cannot respond, and resources with good download speed are not well reserved

Images