Control strategy generation method and device

Abstract

The invention provides a control strategy generation method and a control strategy generation device. The method comprises the steps of generating at least a forwarding control strategy which is used for finding a corresponding output port in a pre-stored routing forwarding table entries according to the message information of a data message, and judging whether the output port is configured with safety business after a forwarding chip of an interface board receives the data message, if yes, determining that the data message is the message to be sent to a business board for implementing business treatment, and sending the data message to the corresponding business board by the forwarding chip according to the output port; and issuing the forwarding control strategy to the forwarding chip, thus after the interface board receives the data message, processing the data message by the forwarding chip according to the forwarding control strategy. According to the method, the business treatment pressure of the business boards is reduced, the forwarding efficiency of the data message is improved, the quantity of the deployed business boards is decreased, and the cost is saved for the user.

Description

technical field [0001] The present invention relates to the field of communication technologies, and in particular to a method and device for generating a control strategy. Background technique [0002] Distributed network devices include main control boards, interface boards, and various service boards. The main control board can send control policies to the service board and the forwarding chip of the interface board by sending the configuration to control the forwarding chip to divert different data packets to different service boards, and the service board performs business on the messages deal with. [0003] In the existing technical solutions, since distributed network devices are often deployed at the access ports of the network, all data packets that need to go to the external network need to enter the network device for security services, so as to prevent external unsafe data packets from entering the internal The internet. Moreover, the distributed network equip...

AI Technical Summary

Problems solved by technology

[0004] However, the data packets for internal mutual access are generally large and basically safe, and do not require a large amount of security services. Therefore, if the packets received from the interface board (including intranet mutual access data packets and The data packets for accessing the external network) are all sent to the service board, which will cause the data packet of the service board to be too large, thereby increasing the pressure on the service board and reducing the performance of the service board

Images