Routing computation unit and network node equipment

Abstract

The invention provides a routing computation unit and network node equipment. The routing computation method comprises a multi-core processor, and an input interface and an output interface respectively connected with the multi-core processor; the input interface is used for receiving protocol control data; the multi-core processor is used for performing computation processing on the protocol control data by operating multiple sets of preset heterogeneous protocol stack software so as to obtain multiple computation results, and determining the routing data according to multiple computation results; the output interface is used for outputting the routing data. The network node equipment comprises at least one above routing computation unit. Through the routing computation method provided bythe invention, the attack for the routing computation unit can be effectively defended, the defense way is reliable and practical, thereby improving the security of the network node equipment.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a routing calculation unit and a network node device. Background technique [0002] The network forwarding node equipment, network links and network terminal nodes constitute the entire information network; among them, the network forwarding node equipment is responsible for receiving network packets, calculating routes, and forwarding network packets according to the routing table. The security of network forwarding nodes is of great value to the security of the entire information network, and the routing security as the basis for node forwarding messages is the key to the security of network nodes. [0003] At present, the hidden dangers of routing nodes cannot be ignored. Malicious backdoor implantation, loopholes in system design and implementation, and trapdoors unintentionally introduced by using open source code are inevitable; attackers generally obtain routing node ...

AI Technical Summary

Problems solved by technology

[0006] The technology of increasing network resilience to solve defense problems often replaces the attacked node by adding network nodes, which improves the survivability of the network as a whole, but it is difficult to guarantee the security of the network nodes themselves

Once the second or more rounds of attacks break through the remaining network nodes, the network will be immediately paralyzed and the reliability is poor

[0007] The moving target defense technology defends against unknown vulnerabilities and backdoors by adding dynamics locally in the software. The dynamics in this technology significantly increase system operating overhead

At the same time, the increase in dynamics requires a relatively large modification of the original software, from design (modification) to debugging, the cost of deployment is high, and the practicability is poor

Images