Message matching method and device

Abstract

The embodiment of the present invention provides a message matching method and device, which are applied to network equipment. The method includes: when the effective time of the ACL entry in the ACL starts, the ACL entry stored in the TCAM The corresponding state information is identified as effective; when the expiration time of the ACL entry begins, the state information corresponding to the ACL entry stored in the TCAM is marked as invalid; when the message is received, according to the The state information corresponding to each ACL table item stored in the TCAM determines that the state information in the ACL table item stored in the TCAM is the effective first ACL table item; the message is compared with the first ACL table item match. In this embodiment, when an ACL entry becomes effective or invalid, it is only necessary to modify the state information of the ACL entry without adding or deleting the ACL entry. When a message is received, the message can be Matching the ACL entries in effect in the TCAM can reduce the probability of incorrect matching between packets and ACL entries.

Description

technical field [0001] The invention relates to the technical field of communications, in particular to a message matching method and device. Background technique [0002] An access control list (Access Control List, ACL) is a collection of one or more rules for identifying packet flows. The rule here refers to the judgment statement describing the matching condition of the packet. The matching condition can be the source address, destination address, port number, etc. of the packet. ACL is saved in the network device, and when a packet is received, it can determine how to process the packet according to the rules saved in the ACL. [0003] Specifically, in the network device, ACL entries may be added to TCAM (Ternary Content Addressable Memory), so as to search large-scale ACL entries through the TCAM lookup technology. [0004] TCAM is a three-state content addressable memory, which is mainly used to quickly look up entries such as ACL and routing. The TCAM lookup techn...

AI Technical Summary

Problems solved by technology

[0006] It can be seen that in the prior art, each time an ACL entry takes effect, the ACL entry will be saved in the corresponding position in the TCAM according to the priority of the ACL entry, and the arrangement of the entries stored in the TCAM will also be changed. Moreover, every time an ACL entry becomes invalid, the ACL entry in the TCAM will be deleted, which involves recycling of TCAM hardware entry resources. Probability that a file does not match an ACL entry

Images