Message processing method and device and related equipment

Abstract

The application discloses a message processing method. The method comprises the steps of obtaining a to-be-processed message; performing information extraction on the to-be-processed message to obtainmessage transmission information; performing rule matching on the message transmission information through an Xdp thread to obtain a message processing rule; and processing the to-be-processed message by using the message processing rule. According to the message processing method, the message processing efficiency can be more effectively improved, and the high performance and high reliability ofthe system are further ensured. The invention further discloses a message processing device, a message processing system and a computer readable storage medium, which all have the above beneficial effects.

Description

technical field [0001] The present application relates to the technical field of data transmission, in particular to a message processing method, and also to a message processing device, system, and computer-readable storage medium. Background technique [0002] In the packet processing process under linux, the iptable / nftables framework (a packet filtering framework) is generally used to complete the filtering of network data packets. Under the iptable / nftables framework, each filtering condition usually corresponds to an iptables rule. If you want to complete all the filtering, you need to traverse all the rules in turn for matching. Therefore, there is a problem of low efficiency in the existing message processing flow. Furthermore, when the number of rules reaches a certain level, this kind of problem Especially obviously, it will seriously affect the system performance. In addition, when the CPU usage rate for packet filtering is too high, it will also seriously affect ...

AI Technical Summary

Problems solved by technology

[0002] In the packet processing process under linux, the iptable / nftables framework (a packet filtering framework) is generally used to complete the filtering of network data packets. Under the iptable / nftables framework, each filtering condition usually corresponds to an iptables rule. If you want to complete all the filtering, you need to traverse all the rules in turn for matching. Therefore, the existing message processing flow has the problem of low efficiency. Furthermore, when the number of rules reaches a certain level, this kind of problem Especially obvious, it will seriously affect the system performance. In addition, when the CPU usage for packet filtering is too high, it will also seriously affect the efficiency of the CPU for other computing tasks.

Images