Implementation method of high-speed concurrent loading of ACL rules for multiple boards of blocking devices

Abstract

The invention provides a method for implementing high-speed concurrent loading of multi-board-card ACL rules in blocking equipment. The method comprises the following steps: firstly setting a device for implementing the ACL rules in the blocking equipment for hardware loading of the ACL rules, wherein the implementing device in the blocking equipment for hardware loading of the ACL rules comprises a Fabric plane arranged in a system for data transmission, and the Fabric plane is connected with a processor on a main control panel and a processor on a service board. Then by combination with other steps in the method, the problem of a slow speed in loading the CPU software in the prior art is effectively solved; under the situation that due to the current capacity demand for network communication, the capacity of ACL rules in the blocking equipment reaches the ten million level, the speed of CPU software loading in the existing scheme cannot meet the capacity demand for current network communication, which seriously restricts extension of the current blocking equipment.

Description

technical field [0001] The invention relates to the technical field of network blocking, in particular to a method for realizing high-speed concurrent loading of ACL rules of multiple boards of blocking devices. Background technique [0002] At present, the processing method of blocking devices to ACL rules is usually to connect the Base plane for control set in the system with the processor on the main control board and the processor on the service board, and then the main control board The processor on the service board controls the processor on the service board to add ACL rules through the Base plane for control to implement the blocking function. [0003] But the processing method of the existing blocking device to the ACL rule is through the point-to-point communication method, so it has the steps of sending the request data packet and the corresponding response data packet in the communication connection mode, thus generating communication Delay, in the case of a mil...

AI Technical Summary

Problems solved by technology

[0003] But the processing method of the existing blocking device to the ACL rule is through the point-to-point communication method, so it has the steps of sending the request data packet and the corresponding response data packet in the communication connection mode, thus generating communication Delay, in the case of a million-level required capacity in the past, the speed only needs to reach 10,000 entries per second. The processing method of such existing blocking devices for ACL rules can basically meet the needs, but due to the current network communication needs Under the condition that the capacity has reached tens of millions, the previous speed is far from meeting the demand capacity of the existing network communication, which seriously restricts the expansion of the existing blocking equipment; in addition, each service board now has Each is provided with a processor corresponding to it on the service board, so when the number of processors on the service board is more than two, the currently sent data is sent point-to-point sequentially, which increases the speed and cannot satisfy the current situation. The speed of the required capacity of some network communications leads to an increased burden on the hardware

Images