Method and device for processing data

Abstract

The invention discloses a method for processing data, comprising the steps of: traversing rules in an ageing time list according to a predetermined traverse way and marking the rules with a length of a built-up time in the ageing time list being greater than a predetermined time threshold during the traversing process as invalid rules, wherein the predetermined traversing way is to traverse in the way from a short length to a long length of the built-up time; marking the rules corresponding to the rules marked as invalid rules in the ageing time list in a hash table as invalid rules as well; traversing the rules in the hash table, carrying out a rule matching on data heads received in traversing process and deleting the rules marked as invalid rules in the hash table; deleting the rules corresponding to the rules deleted in the hash table in the ageing time list. According to the method and the device disclosed by the invention, the data read-write conflict of the rule matching task and the rule ageing task can be avoided, the concurrent processing on the rule matching task and the rule ageing task is realized without locking, the password expenditures are reduced and the system performance is improved.

Description

technical field [0001] The present invention relates to the field of message processing, and in particular, to a data processing method and device. Background technique [0002] In the field of network security, network security filtering equipment needs to analyze each data packet on the network, so as to achieve transparent transmission of normal traffic, forwarding of suspicious traffic, and discarding of illegal traffic. These flows are classified, and the classification process is the matching process of data (that is, packets) and rules. [0003] like figure 1 As shown, when filtering traffic, three functional modules are generally required, namely a protocol identification module, a rule matching module and a data processing module, so as to realize the transparent transmission of normal traffic, the forwarding of suspicious traffic, and the discarding of illegal traffic. Among them, When identifying the protocol, the protocol identification module mainly analyzes t...

AI Technical Summary

Problems solved by technology

[0006] It can be seen from the above specific description that for the existing technology, the solution to resolve rule read-write conflicts by locking the hash flow table of the operation is essentially a task serialization process, so in the present In some computer environments, especially on multi-core systems, forced serialization will inevitably lead to a decrease in system performance, and the process of locking often means an increase in password overhead. Therefore, whether it is a lock implemented by the kernel or implemented in user mode All locks are a very time-consuming process. In addition, since the processing time for rule aging is very short (that is, at the millisecond level), it is obvious that the process of adding and unlocking is very frequent, which will obviously reduce system performance, and even degrade system performance to an unacceptable level

[0007] For the above-mentioned problems in related technologies, no effective solution has been proposed yet

Images