FPGA based high-speed network strategy matching method

Abstract

The invention provides an FPGA (Field Programmable Gate Array) based high-speed network strategy matching method. The method realizes utilization of relatively small storage space, and simultaneously is suitable for fast strategy matching processing in hardware, and further enables the performance of strategy matching processing to be irrelevant with the data volume of strategies. The FPGA based high-speed network strategy matching method employs a quintuple, supports accurate matching of the quintuple and IP-port range matching , and is stronger in functions and more diversified in matching conditions and matching modes than the traditional pure hardware manner; the strategy tree of the FPGA based high-speed network strategy matching method is a specific tree structure with a node length fixed at 512 bytes and the height of the tree layer fixed at 13, and aims at FPGA strategy matching; the logic processing of direct address positioning is simple and efficient, so that consumption of lots of time on the logical operation is avoided and the matching efficiency is greatly improved.

Description

technical field [0001] The invention relates to a network matching method, in particular to a high-speed network strategy matching method based on FPGA. Background technique [0002] With the continuous development of the network, the expansion is getting wider and wider, and the speed is getting faster and faster. . The original firewall or encryption machine is under increasing pressure to deal with more and more IP network data packets, and the requirements for the processing efficiency of the firewall or encryption machine are getting higher and higher. Most of the current firewalls or encryption machines employ policies that match several ways, and data processing at the gigabit level is more or less deficient in performance or functionality. [0003] Software method: The business IP data is intercepted by the software side through the network card driver, and then policy matching and subsequent work are performed in the software, so that the processing function may m...

AI Technical Summary

Problems solved by technology

[0004] Existing hardware method: The existing product strategy is matched with pure hardware implementation. Either the strategy function implemented by it is extremely simple and cannot support complex configuration conditions of multiple groups, or the hardware space is occupied for the pursuit of speed, and the cost is greatly increased. Moreover, in addition to addressing operations in the hardware, there are a large number of logical operations that cause too much complexity, and the efficiency is lower than that of the present invention

Images