Data processing method and data processing system

Abstract

A service logic layer module receives an application message forwarded by a network device, classifies and identifies an application type of the application message, and determines a first processing operation to be performed to the application message based on an identification result. The service logic layer module receives a processing result returned from a data processing layer module, and determines a second processing operation based on the processing result. When the processing operation is an I / O processing operation for a single task, the data processing layer module controls I / O concurrency processing of the single task and returns a final processing result to the service logic layer module. When the processing operation is a data searching operation, the data processing layer module performs the data searching operation to obtain a final searching result, and returns the final searching result to the service logic layer module.

Description

technical field [0001] This application relates to network communication technology, in particular to a data processing method and a data processing system. Background technique [0002] With the explosive growth of network data, at present, for most network devices, in the process of business processing, due to the increase of network data, there will be insufficient network resources, such as insufficient CPU resources and storage resources. situation, which will lead to slow processing speed of network equipment, and even cause network equipment failure and so on. [0003] In the following, a network device applied in an intrusion prevention system is taken as an example to describe the situation of insufficient network resources. [0004] Usually the intrusion prevention system is deployed as an online (Inline) working mode. In the path of data transmission, any message must pass through the network device for detection. Once the network device finds worms, viruses, bac...

AI Technical Summary

Problems solved by technology

[0005] exist figure 1 In the processing flow shown, the two processing operations of application identification (UAAE) and in-depth inspection (OCIF) occupy a large amount of CPU resources of the network device. Through the test data, it is found that UAAE and OCIF occupy almost all the CPU resources of the network device during operation. , in the case of a large amount of data calculated in the current intrusion prevention system, the network device will have insufficient CPU resources, which cannot meet the needs of intrusion prevention, and will also affect the execution of the network device. figure 1 Other processing operations shown

Images