Unlock instant, AI-driven research and patent intelligence for your innovation.

Hardware implementation method for matching IP address with IP range strategy

An IP address and hardware-implemented technology, applied in the field of network security, can solve problems such as reduced efficiency and high system overhead, and achieve the effects of improving efficiency, reducing system overhead, and simple subtraction operations

Inactive Publication Date: 2014-12-03
INSPUR GROUP CO LTD
View PDF6 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0002] In some firewalls or gatekeeper devices, IP address filtering or policy matching operations are required, which are mostly implemented by software at present, which makes the system overhead large and the efficiency low

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Hardware implementation method for matching IP address with IP range strategy

Examples

Experimental program
Comparison scheme
Effect test

Embodiment

[0017] The advantages and design content of the hardware implementation method of the IP address matching IP range policy of the present invention will be described in detail below through an embodiment.

[0018] The hardware implementation method of the IP address matching IP range strategy described in this embodiment, the (IP range) strategy includes two forms, namely: IP start address and IP end address form, such as 192.168.0.1-

[0019] 192.168.0.100; and the IP address and mask form, such as 192.168.1.0 / 255.255.255.0. The IP address and mask form will be converted by hardware into the first form, namely the start address and end address form, such as 192.168.1.0-192.168.1.255.

[0020] attached figure 1 A block diagram of the hardware implementation method for matching the IP range strategy for the IP address, as attached figure 1 As shown, the IP address of the extracted IP packet is assumed to be X, the starting IP address of the policy is assumed to be Y, and the I...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a hardware implementation method for matching an IP address with an IP range strategy, and relates to the field of network safety. The method includes the steps of firstly, extracting the IP address of an IP message, conducting subtraction on the IP address and the strategy IP initial address to obtain a result 1, conducting subtraction on the strategy IP range and the result 1 to obtain a result 2, and judging whether the extracted IP address hits the strategy or not according to the result 1 and the result 2. Simple subtraction is achieved through hardware, whether the IP address hits the IP strategy or not is judged within two clock periods, and compared with a traditional software implementation mode, system expenses are obviously reduced, and efficiency for matching the IP address with the IP range strategy is improved.

Description

technical field [0001] The invention relates to the field of network security, in particular to a hardware implementation method of IP address matching IP range policy. Background technique [0002] In some firewalls or network gate devices, it is necessary to perform filtering or policy matching operations on IP addresses, which are mostly implemented by software at present, which causes high system overhead and reduces efficiency. Therefore, considering how to use the hardware method to match the strategy has become a new attempt to solve the IP address matching IP range strategy. Contents of the invention [0003] Aiming at the deficiencies in the prior art, the present invention provides a hardware implementation method of IP address matching IP range policy. [0004] The hardware implementation method of the IP address matching IP scope strategy of the present invention, the technical scheme that solves the above-mentioned technical problem adopts is as follows: firs...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
Inventor 姜凯毕研山耿介
Owner INSPUR GROUP CO LTD