Strategy hit result storage and query method and device, equipment and medium
A policy and hit technology, which is applied in the field of network security, can solve the problems of complex operation of counting packet filter policy hits, and achieve the effect of reducing security risks and performance loss
Inactive Publication Date: 2019-05-03
HANGZHOU DPTECH TECH
View PDF5 Cites 1 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0006] In view of this, the embodiment of the present application provides a storage and query method and device, device, and medium for policy matching results, so as to solve the problem of recording the hits of each data packet to each packet filtering policy through a packet filtering log or a session log in related technologies, resulting in Complicated operation of counting hits of packet filtering policies
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0055] Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with aspects of the present application as recited in the appended claims.
[0056] The terminology used in this application is for the purpose of describing particular embodiments only, and is not intended to limit the application. As used in this application and the appended claims, the singular forms "a", "the", and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It should also be understood that the term...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention provides a strategy hit result storage and query method and device, equipment and a medium, and the method comprises the steps: obtaining the source address of a data packet and the identification information of a packet filtering strategy when the data packet hits the packet filtering strategy; Mapping a storage node corresponding to the packet filtering strategy in a predeterminedfirst storage structure according to the identification information, Wherein the storage node is also a first node of a predetermined second storage structure, and a pointing object pointing to a nextstorage node of the second storage structure is stored in a data field of the storage node; Inquiring whether a storage node corresponding to the source address exists in a second storage structure or not according to the pointing object and the source address; And if the hit count exists, updating the hit count in the storage node corresponding to the source address. By implementing the method and the device, the hit condition of the data packet sent by each source address to each packet filtering strategy can be quickly and effectively stored, and based on the hit condition, the hit condition can be directly and quickly queried subsequently without querying statistical hit records item by item, so that the operation is simple and efficient.
Description
technical field [0001] The present application relates to the technical field of network security, and in particular to a storage and query method and device, equipment and media for policy matching results. Background technique [0002] In the field of network security, for the safety of devices in the LAN, relevant technical personnel will configure packet filtering firewalls for the LAN. After the packet filtering firewall is configured, if a device in the LAN sends a data packet to the external network, it needs to pass the packet filtering of the packet filtering firewall and allow the sending before sending to the external network. [0003] Packet filtering refers to intercepting network data packets at the network layer, and analyzing and selecting data packets according to the configured packet filtering policy. For specific analysis and selection, compare the configured packet filtering policy with one of the source address (such as source IP address), destination ...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06G06F16/901G06F16/903
Inventor 杨佳磊钱雪彪
Owner HANGZHOU DPTECH TECH