A session entry processing method, device and related products in a multi-core system

Abstract

The embodiment of the present application discloses a session entry processing method and device in a multi-core system. After the forwarding core receives the first handshake message or the second handshake message, when the embodiment of the present application receives the message, First determine whether the message is safe. When the message is an unsafe first handshake message or an unsafe second handshake message, the session timeout item of the message is added to the linked list array, and the linked list array is used to process the session of the message Timeout item, so as to avoid using the timer of the forwarding core to process the session timeout item of the attack message when the received message is an attack message, which not only effectively defends against attacks, but also saves the processing resources of the forwarding core timer, so that the forwarding core It can process security packets normally and improve the overall forwarding performance. In addition, each forwarding core is configured with a linked list array, so as to realize lock-free processing of the multi-core system.

Description

technical field [0001] The present application relates to the field of data processing, in particular to a method, device and related products for processing session entries in a multi-core system. Background technique [0002] For security vendors, after receiving the message, the forwarding core in the firewall queries the session table and forwards the message. If there is no corresponding session table, it builds a session table according to the policy, and finally realizes message forwarding. Since too many session tables will also cause system burden, it is necessary to pay attention to the timeout mechanism of the session table, delete the timed-out session entries in time, and reduce the system load. That is to say, the forwarding core not only needs to process message forwarding, but also needs to process timed-out session entries. However, the forwarding core uses a polling mechanism to process message forwarding and timeout session entries, so that the forwarding...

AI Technical Summary

Problems solved by technology

However, the forwarding core uses a polling mechanism to process message forwarding and timeout session entries, so that the forwarding core cannot process message forwarding and timeout session entries at the same time

[0003] In practical applications, the firewall can maintain a high throughput performance when it does not encounter a distributed denial of service (Distributed Denial of Service, DDoS) attack, but when it encounters a DDos attack, it will generate a large number of timed-out If the timer of the mechanism takes too long to process the timeout session entry, it will inevitably cause the forwarding core to process the message not in time, resulting in packet loss and affecting the overall forwarding performance

Images