Method for realizing efficient matching of IP network segments
An IP network and network segment technology, applied in the field of Internet management, can solve the problem of huge memory consumption and achieve the effect of fast mapping
Inactive Publication Date: 2020-06-05
NAT COMP NETWORK & INFORMATION SECURITY MANAGEMENT CENT +1
View PDF5 Cites 5 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
It can be seen that although the traditional solution can quickly realize the rapid correspondence between the IP address and the network segment, operator, and province information, but considering the massive number of IPv4 addresses on the live network, each IP address independently creates a table entry to store the network segment to which it belongs, the operator When the business and province information is used, the memory consumption of this solution is also huge
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0015] A device for realizing efficient IP network segment matching, including a large network segment automatic splitting module, an efficient entry management module, and a traffic source / destination IP matching module.
[0016] The large network segment automatic splitting module can automatically import a CSV file that records a large number of network segment information, extract the range of large network segments in the province where the operator is located by line, and divide the large network segments into 256 segments according to the 24-bit mask IP small network segment, each small network segment corresponds to an entry.
[0017] The second-level table hash management module takes the first 24 network segment IDs as the key value according to the split table items, performs Hash calculation, and hangs them into the conflict chain for management. When the Hash algorithm is suitable, the collision rate is below 1.3, which can realize efficient search.
[0018] Traf...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a device and a method for realizing efficient matching of IP network segments. The method comprises: dividing each operator once in a large network segment of each province, abasic unit after division is a small network segment with 256 IP addresses, and all small network segments of the same large network segment having the same large network segment ID, operator information and province information, so that the memory consumption of a table entry can be reduced to 1 / 256 of that of a traditional scheme; when a message arrives at equipment, taking the first 24 bits ofa source / destination IP address, performing Hash table lookup, and directly finding a corresponding sub-network segment table entry, so that a large network segment ID, an operator, provincial information and the like corresponding to the source / destination IP address are obtained, and meanwhile, memory saving and efficient matching are realized.
Description
technical field [0001] The invention relates to the technical field of Internet management, in particular to a method for realizing efficient matching of IP network segments. Background technique [0002] Customized network equipment is serially connected between routers, or bypassed and connected to the bearer network router line to complete the preliminary analysis of network traffic. In order to complete the one-to-one correspondence between the IP address of the packet in the traffic and the network segment to which the IP belongs, the operator type, and the corresponding province, the traditional solution is to provide an independent Create IP address entries. Each entry stores information such as its network segment, operator, and province. When the packet reaches the first-level device, it will perform a Hash lookup table based on its complete 32-bit source / destination IP address and find Its corresponding IP address entry, so as to obtain the information of the netw...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More IPC IPC(8): H04L12/743
CPCH04L45/7453
Inventor 李高超孙加敏王维晟陈国贺邹昕胡立洵李政孙传明张伟韩伟陈训逊严伟
Owner NAT COMP NETWORK & INFORMATION SECURITY MANAGEMENT CENT