A firewall based on dpdk virtualization management system and its implementation method

A technology of virtualization management and implementation method, which is applied in the field of firewall based on DPDK virtualization management system, can solve problems such as high performance overhead and complex processing process, and achieve the effects of reducing performance loss, improving query efficiency, and increasing packet forwarding rate

Active Publication Date: 2022-05-10
INSPUR SUZHOU INTELLIGENT TECH CO LTD
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a firewall based on the DPDK virtualization management system and its implementation method, aiming to solve the problems of complex processing flow and high performance overhead of the firewall in the prior art to realize the improvement of the virtualization management system firewall. Excellent data processing performance, reducing performance consumption

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A firewall based on dpdk virtualization management system and its implementation method
  • A firewall based on dpdk virtualization management system and its implementation method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0029] In order to clearly illustrate the technical features of the present solution, the present invention will be described in detail below through specific implementation methods and in conjunction with the accompanying drawings. The following disclosure provides many different embodiments or examples for implementing different structures of the present invention. To simplify the disclosure of the present invention, components and arrangements of specific examples are described below. Furthermore, the present invention may repeat reference numerals and / or letters in different instances. This repetition is for the purpose of simplicity and clarity and does not in itself indicate a relationship between the various embodiments and / or arrangements discussed. It should be noted that components illustrated in the figures are not necessarily drawn to scale. Descriptions of well-known components and processing techniques and processes are omitted herein to avoid unnecessarily lim...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention provides a firewall based on the DPDK virtualization management system and its implementation method. The present invention utilizes the polling technology of DPDK to intercept interrupts, solves the loss problem caused by interrupt processing, and utilizes UIO technology to bypass the kernel protocol stack, through UIO technology maps the packets received by the network card to the working principle of f-stack, the user mode protocol stack, which greatly reduces the performance consumption when capturing data packets, and improves the performance of the firewall in processing data packets. A fast forwarding path is added before the data packet enters the f-stack protocol stack, and the session check is performed on the data packet captured by DPDK. The performance loss caused by the process of the protocol stack increases the packet forwarding rate, thereby improving the data processing performance of the firewall of the virtualization management system.

Description

technical field [0001] The invention relates to the technical field of firewalls, in particular to a firewall based on a DPDK virtualization management system and an implementation method thereof. Background technique [0002] With the development of optical fiber technology, the network bandwidth is rapidly increasing and the system business volume is increasing. The software technology performance is based on the traditional network protocol stack. The firewall has a complex process for data packet processing and high overhead, which cannot meet people's needs for high-performance processing of dense data. Requirements, so the research and development of high-performance firewall is of great significance. Contents of the invention [0003] The purpose of the present invention is to provide a firewall based on the DPDK virtualization management system and its implementation method, aiming to solve the problems of complex processing flow and high performance overhead of th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L9/40H04L69/22
CPCH04L63/0263H04L63/02H04L69/22
Inventor 赵凯
Owner INSPUR SUZHOU INTELLIGENT TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products