Firewall based on DPDK virtualization management system and implementation method thereof

A technology of virtualization management and implementation method, applied in the field of firewalls based on the DPDK virtualization management system, can solve the problems of complex processing flow and high performance overhead, and achieve the effects of improving query efficiency, reducing performance loss, and improving processing performance

Active Publication Date: 2020-07-03
SUZHOU LANGCHAO INTELLIGENT TECH CO LTD
View PDF5 Cites 15 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a firewall based on the DPDK virtualization management system and its implementation method, aiming to solve the problems of complex processing flow and high performance overhead of the firewall in the prior art to realize the improvement of the virtualization management system firewall. Excellent data processing performance, reducing performance consumption

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Firewall based on DPDK virtualization management system and implementation method thereof
  • Firewall based on DPDK virtualization management system and implementation method thereof

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0029] In order to clearly illustrate the technical features of the present solution, the present invention will be described in detail below through specific implementation methods and in conjunction with the accompanying drawings. The following disclosure provides many different embodiments or examples for implementing different structures of the present invention. To simplify the disclosure of the present invention, components and arrangements of specific examples are described below. Furthermore, the present invention may repeat reference numerals and / or letters in different instances. This repetition is for the purpose of simplicity and clarity and does not in itself indicate a relationship between the various embodiments and / or arrangements discussed. It should be noted that components illustrated in the figures are not necessarily drawn to scale. Descriptions of well-known components and processing techniques and processes are omitted herein to avoid unnecessarily lim...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a firewall based on a DPDK virtualization management system and an implementation method thereof. According to the invention, interruption is intercepted by using a DPDK pollingtechnology; according to the working principle that the UIO technology bypasses the kernel protocol stack and the message received by the network card is mapped to the user mode protocol stack f-stack through the UIO technology, the performance consumption during data packet capture is greatly reduced, and the data packet processing performance of the firewall is improved. A quick forwarding pathis added before a data packet enters an f-stack protocol stack; according to the method, session check is carried out on the data packet captured by the DPDK, and the flow of which the session is established is directly forwarded from the recorded port, so that the performance loss of the data packet in the process of passing through the protocol stack is reduced, the packet forwarding rate is improved, and the data processing performance of the firewall of the virtualization management system is further improved.

Description

technical field [0001] The invention relates to the technical field of firewalls, in particular to a firewall based on a DPDK virtualization management system and an implementation method thereof. Background technique [0002] With the development of optical fiber technology, the network bandwidth is rapidly increasing and the system business volume is increasing. The software technology performance is based on the traditional network protocol stack. The firewall has a complex process for data packet processing and high overhead, which cannot meet people's needs for high-performance processing of dense data. Requirements, so the research and development of high-performance firewall is of great significance. Contents of the invention [0003] The purpose of the present invention is to provide a firewall based on the DPDK virtualization management system and its implementation method, aiming to solve the problems of complex processing flow and high performance overhead of th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/0263H04L63/02H04L69/22
Inventor 赵凯
Owner SUZHOU LANGCHAO INTELLIGENT TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products