dpi system strategy processing method and device

Abstract

The invention belongs to the technical field of communications, and in particular relates to a DPI system policy processing method and device. The method includes: starting a policy receiving thread, communicating with a policy sending platform of a DPI system, and storing a policy message sent by the policy sending platform in a data receiving cache queue; starting a plurality of policy processing threads, and cyclically traversing and analyzing the data receiving cache queue store the parsed policy instruction information in the data sending cache queue, and clear the parsed policy message in the data receiving cache queue; start multiple policy sending threads to communicate with the execution unit of the DPI system, according to the According to the policy requirements of the execution unit, the matched policy instruction information is sent to the execution unit, and the sent policy instruction information is emptied in the data transmission buffer queue. By constructing a thread pool, the method realizes the parallelization of receiving, processing and responding to multiple strategies, and improves the processing capability of the overall DPI system.

Description

technical field [0001] The invention belongs to the technical field of communications, and in particular relates to a DPI system policy processing method and device. Background technique [0002] The DPI (Deep Packet Inspection) device detects and analyzes the traffic and packet content at key points of the network, and can filter and control the detected traffic according to the pre-defined policies, and can complete the refined identification of services on the link and the traffic flow. Flow direction analysis, business traffic proportion statistics, business proportion shaping, application layer denial of service attacks, filtering of viruses and Trojans, and control of abuse of P2P, etc. [0003] According to the "China Telecom Unified DPI Data Standard and Interface Specification", the unified external data interface is deployed in the MAN egress, IDC egress (including Internet dedicated lines) and backbone network scenarios. This interface realizes the data connectio...

AI Technical Summary

Problems solved by technology

This method solves the problem of accuracy, but in the scenario where a lot of policy data is processed, the receiving and processing policy processes are linearly arranged, and there will be a large delay in receiving the policy by the DPI device, and the waiting time of the CU platform and the shared layer platform is long. The overall policy processing is slow. In the case of a backlog of policies, due to the socket sending and receiving mechanism of the operating system, packet loss may even occur.

Images