A fast flow table lookup method and system in a high-concurrency network environment

Abstract

The invention relates to a fast flow table search method and system in a high concurrent network environment. The method comprises: 1) counting the traffic entering the network interface, and setting the buffer window of the buffer according to the current traffic condition of the statistics; 2) according to the size of the buffer window set, utilizing quintuple information to process 3) Schedule each cached group according to the preset scheduling strategy, and send each group to the connection management module in turn; 4) The connection management module extracts the quintuple information of each group and performs flow table search process, find the corresponding flow entry, and use the data packets in the group to update the information of the flow entry. The invention is mainly applicable to the high-speed network flow processing system of the backbone link, can optimize the access cost of the connection management module under the high-speed network environment, and improve the access efficiency of the flow table.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a fast flow table search method and system for a high-concurrency network environment. Background technique [0002] In a high-speed network environment, efficient connection management has become a key module of existing network traffic processing systems (such as intrusion detection, traffic accounting, etc. systems). Usually, the traffic processing system architecture is mainly divided into three modules: traffic acquisition, Connection management, business processing. Connection management provides flow traceability for business processing, including three operations: search, update, and delete. In order to accurately record each connection, the connection management module must maintain a connection table (or session table), wherein each connection table item traces a connection in the network, and is responsible for recording the identification ID, sta...

AI Technical Summary

Problems solved by technology

[0007] In terms of optimizing the search operation with the help of network locality, using FPGA and SRAM to realize the high-speed cache of the flow table can speed up the access speed. Limited by the circuit complexity of the FPGA and the capacity limitation of the SRAM, the size of the flow table is limited by the storage capacity. In a high-concurrency network environment, affected by traffic fluctuations and burst traffic, a large number of active connections will be forced to be replaced, resulting in missed detection by the system

Images