Configuration method and device for access control lists

Abstract

The invention provides a configuration method and device for access control lists (ACLs). The method includes the steps that identical ACL rules in multiple ACLs serve as ACL shared segments to be loaded independently; first skip rules used for skip to the ACL shared segments are preset at quoted positions of the ACL shared segments in the ACLs respectively; a second skip rule used for skip to father ACLs searched by a current ACL is preset at the least significant end of the ACL shared segments; when ACL lookup is carried out on any father ACL in the ACLs by service, the ACL shared segments are skipped for ACL lookup according to the first skip rules, after ACL lookup carried out on the ACL shared segments is finished, the father ACLs are skipped according to the second skip rule, and ACL lookup for the father ACLs continues to be completed. According to the method and device, occupation of memory space can be reduced, and reading performance of the ACLs is improved.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to an ACL configuration method and device. Background technique [0002] ACL (Access Control List, Access Control List) can be applied in many fields, the most basic application is to use ACL to filter packets; in addition, ACL can also be applied to such as routing, security, QoS (Quality of Service, quality of service) Waiting for business. [0003] The so-called ACL refers to a collection of one or more rules, which are used to identify packet flows. The rule refers to the judgment statement describing the matching condition of the message. The matching condition can be the source address, destination address, port number, etc. of the message. The network device identifies the specific message according to these rules, and according to the preset policy to process the message. [0004] Each rule in an ACL has its own number, which is unique within that ACL. Whe...

AI Technical Summary

Problems solved by technology

[0006] However, since the ACL is resident in memory after the device is started, and as the ACL is widely used in various services such as security, QoS,

Images