Method, device and apparatus for message forwarding of firewall equipment, and storage medium

Abstract

The embodiment of the invention provides a method, a device, and an apparatus for message forwarding of firewall equipment, and a storage medium. The method comprises the following steps: obtaining ato-be-forwarded message which comprises quintuple data; calculating a hash value of the quintuple data; querying whether a simplified session table item matched with the to-be-forwarded message existsin a simplified session array hash table previously built in the current CPU or not according to the hash value; obtaining a corresponding session table item template according to a template sessionaddress in the matched simplified session table item if the simplified session table item matched with the to-be-forwarded message exists in the simplified session array hash table; and forwarding theto-be-forwarded message according to the session table item template. According to the method, the device, and the apparatus for message forwarding of firewall equipment, and the storage medium, a large amount of memory space can be saved during the whole forwarding process; the problem that cache access failure probability is increased when a session table item is large due to large memory spaceoccupation can be avoided; and the stability of the overall forwarding performance of the firewall device can be improved.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of network security, and in particular to a message forwarding method, device, device and storage medium of a firewall device. Background technique [0002] A firewall is a network security system located between an internal network and an external network, which allows or restricts the transmission of data according to specific rules. [0003] The robustness and high performance of the firewall's forwarding system have become important indicators to promote the development of the firewall. Especially with the development of science and technology, the performance of the network card has been upgraded to 10G level, and the replacement of the CPU is still unable to adapt to the performance improvement of the network card. If you want to match such a high-performance network card, you need to buy an expensive CPU to achieve the forwarding performance of the firewall. promote. Even i...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a packet forwarding method, device, device, and storage medium for a firewall device to solve the problem of constructing session entries in a memory pool in advance in an existing firewall device and consuming a large amount of memory in advance space, which leads to an increase in the probability of cache access failure when there are many session entries, which greatly reduces the overall forwarding performance of the firewall device

Images