IP address ownership information indexing and fast querying method

Abstract

The invention discloses an IP address ownership information indexing and fast querying method. The method includes the first step that an ownership information configuration file is selected or built; the second step that CIDR block records in the configuration file are read and each record is built as a new node of a query tree; if a block belongs to an IPV4 address block or an IPV6 address block, and a head node corresponding to a query sub-tree of the IPV4 or a query sub-tree of the IPV6 is empty, then the new node is used as the head node, or the corresponding head nodes are selected to carry out transversal on the query sub-tree until conditions are met (the transversal is carried out to reach leaf nodes, or comparing bits of current nodes are larger than the new node and comprises CIDR block information), and joint network prefix length L of the current nodes and the new node is calculated, if the L is larger than the comparing bits of the current nodes, the L will return to father nodes and the father nodes are set as the current nodes; the insertion position of the new node is determined according to the L value and the current nodes and the ownership information of the L value is associated to the new node. The IP address ownership information indexing and fast querying method has higher querying efficiency.

Description

technical field [0001] The invention relates to the field of computer network and communication field, in particular to a fast query method of IP address attribution information based on Patricia query tree. Background technique [0002] At present, IP address-based services (such as weather forecast, etc.), network management systems and security software provided on the Internet all need to use IP address attribution information, such as country information, city information, organization information, AS information, latitude and longitude information, etc. By querying the attribution information corresponding to an IP address, the weather forecast service can return the weather information of the city corresponding to the IP host; the network management system can monitor the traffic and other related information of a given monitoring object (country, institution, etc.); Security software can also specify corresponding security policies to clean specified traffic, such as...

AI Technical Summary

Problems solved by technology

The second query method is highly flexible. Developers can extract the required relevant information from GeoIP or QQ IP database files in csv format (or text format) according to their own needs, organize them into IP CIDR block attribution information, and can Add custom IP CIDR attribution information, and then import it into the database (such as MySQL database), but this query method needs to access the database every time and execute SQL query statement operations, so it will increase the query time and affect the query speed

However, with the widespread use of IPV6 addresses, it is necessary to provide corresponding attribution information query services for more and more IPV6 addresses. Since IPV6 addresses have 2 128 address space, the number of CIDR blocks corresponding to IPV6 addresses will also increase, and with further refinement, the number of CIDR blocks of IPV6 will be extremely large, so this method of querying the database is faced with the number of CIDR blocks The astonishing IPV6 address query will have a great delay, especially for the backbone network of operators, the network traffic monitoring system they use often requires millisecond-level real-time network flow processing delay, which cannot be met

Images