Quick multi-service matching and distributing method

Abstract

The invention discloses a quick multi-service matching and distributing method. The method comprises the steps that: (1), various service rules are configured on network flow analysis equipment; the network flow analysis equipment extracts quintuple information from access flow; a service rule matched with various services in the access flow is searched from a rule table according to the quintuple information; and a virtual local area network identifier VLAN ID is calculated according to the service rule matched with the various services; (2), the network flow analysis equipment carries the VLAN ID on each service message in the access flow, and then, forwards each service message to a second-level switch; and (3), the second-level switch copies and forwards the service message to one or more service rear-end servers according to the VLAN ID carried in the received service message, wherein a corresponding copy port combination is set for each VLAN ID on the second-level switch. By means of the quick multi-service matching and distributing method disclosed by the invention, the overall throughput of the system is greatly improved.

Description

Technical field: [0001] The invention belongs to the technical field of INTERNET, and in particular relates to a method for realizing fast matching and distribution of multi-services on a network traffic analysis device and a common layer-2 switch. Background technique: [0002] With the increasing traffic on the network traffic analysis equipment, there are more and more background application services. Each business obtains the specified traffic by issuing rules to the network traffic analysis equipment. The traffic obtained by the business has the same, overlapping and The case of inclusion, that is, the same, intersection, and inclusion cases exist among the delivered rules. [0003] The existing solution is to split and integrate the rules by calculating the intersection of various business rules. However, in a system with a capacity of tens of millions of rules, the amount of calculation is very large, which is obviously not advisable. And match the rules of each serv...

AI Technical Summary

Problems solved by technology

[0003] The existing solution is to split and integrate the rules by calculating the intersection of various business rules. However, in a system with a capacity of tens of millions of rules, the amount of calculation is very large, which is obviously not advisable.

And match the rules of each service one by one, and calculate according to a total of four services. First, the search mode becomes a serial mode, and second, the number of searches will increase. In addition, when outputting after matching, the message needs to be copied Four times, forwarding to four services respectively, has a great impact on the performance of network traffic analysis equipment, so it is not advisable

Images