Method and apparatus for searching ACL

Abstract

According to an example,a packet to be processed is compared with a rule in a combined access control list (ACL), wherein the combined ACL includes rules corresponding to different service types.

Description

Technical field [0001] The present invention relates to the field of network transmission technology, in particular to a method and device for searching an access control list (ACL, Access Control List). Background technique [0002] With the rapid development of the network, the demand for network equipment has put forward higher requirements in terms of performance and functions. Among them, in terms of performance: the commonly used ports of network equipment have increased from 10M, 100M, 1G, and 10G to the current 40G / 100G, which has increased thousands or tens of thousands of times in the past 10 years. Functional requirements reflect multiple aspects. Typical ones are: Quality of service (QOS) is used to ensure users’ basic bandwidth rights; in order to deal with more and more network threats, the packets transmitted on the network are reported. Security checks such as filter; Policy-based Routing (PBR), the message is not forwarded according to the traditional routing ta...

AI Technical Summary

Problems solved by technology

[0020] Among them, the first method also needs to consume multiple hardware resources. The improvement of hardware resources will lead to a sharp increase in chip costs. At the same time, the maximum specification of chips is limited. After reaching a certain scale, it is impossible to increase the number of searches by increasing chip resources. Therefore, there is also the problem of the contradiction between the table capacity and the number of searches.

The second method is limited by the hardware of the chip frequency, and it is impossible to increase the search frequency by several times according to the simultaneous search requirements of multiple services.

Images