Linux system efficient packet receiving and sending method suitable for industrial control environment

Abstract

The invention discloses a linux system efficient packet receiving and sending method suitable for an industrial control environment, and the method comprises the following steps: S1, enabling a linuxsystem to carry out the caching of an original data packet when the linux system carries out the packet receiving operation; s2, receiving the message to a user state through an AF _ PACKET socket; s3, enabling the kernel mode and the user mode to share a ring buffer, andcompleting packet receiving operation; s4, when the linux system carries out packet sending operation, directly sending the original data message, and S5, sending the data message through the kernel protocol stack to complete the packet sending operation. According to the invention, the advantages of an AF _ PACKET packet receiving scheme and the advantages of an NFQUEUE packet sending scheme are combined, and packet receiving and sending can be carried out efficiently. A kernel packet forwarding function is fully utilized, and packet sending processing is carried out at a data packet forwarding point of a kernel, so that the processing time delay of a network data packet is effectively reduced, and the real-time requirement of an industrial control system is met.

Description

technical field [0001] The invention relates to the field of computer networks, in particular to a method for efficiently sending and receiving packets in a Linux system suitable for industrial control environments. Background technique [0002] With the development of information technology, industrial control systems are gradually becoming networked. Many industrial control protocols gradually run on industrial Ethernet, and attacks against industrial control systems are more common. [0003] With the country's emphasis on security, various security products have been widely used in industrial control environments, such as industrial firewalls, industrial audit products, etc. In the industrial control environment, the network traffic is not very large, but the delay requirement is relatively high. At present, most security products are developed based on Linux or BSD, so the research on the technology of efficient sending and receiving packets based on Linux system can e...

AI Technical Summary

Problems solved by technology

[0004] Commonly used packet sending and receiving technical schemes in the prior art include the AFP sending and receiving packet scheme based on Linux system and the NFQUEUE sending and receiving packet scheme based on Linux system, wherein, the packet sending process of the AFP sending and receiving packet scheme needs to copy data between the user state and the kernel, The efficiency of packet sending is low, and the network interface for packet sending needs to be specified, so it cannot be applied well; while the NFQUEUE packet sending and receiving scheme must copy packets between the kernel and user mode when receiving packets, the packet receiving efficiency is low, and the delay is large , and when it runs in transparent mode, it must go through three layers of analysis before it can be sent to the user mode. At present, industrial protection products mostly run in transparent mode, which increases the processing delay and cannot meet people's needs.

Images