A flow control device and method

Abstract

The present invention provides a flow control device and method. The device includes a programmable device and a memory group; the programmable device is loaded with a rule matching module, a selection module, and a control module; the rule matching module is used for receiving After receiving the read / write instruction, analyze the storage address to be read / written; the selection module is used to determine the target memory matching the storage address and the flow control rule to be read / written according to the self-defined storage rules target address; wherein, the storage rule is used to define the address bit representing the memory identifier and the address bit representing the address of the flow control rule in the storage address, and the number of addresses identified by the memory is determined by the quantity of the memory; the control A module, configured to control the target memory to perform a read / write operation on the target address to be read / written by a flow control rule. The flow control device can effectively expand the rule storage capacity of the flow control device.

Description

A flow control device and method technical field [0001] The present invention relates to the field of Internet communications, and in particular, to a flow control device and method. Background technique [0002] The flow control device can screen out suspicious traffic in the network, thereby ensuring the security of network communication. Before filtering traffic, The flow control device needs to download and store the corresponding filtering rules in its DDR in advance. [0003] In the related art, in order to speed up the flow screening efficiency, a plurality of rule matching modes are usually set in the flow control device. Block, corresponding to multiple DDRs that store the same rules, the traffic entering the device can be divided into multiple rule matching modules Matches are found in parallel, which improves filtering efficiency. But in fact, because each rule matches the rules stored in the DDR in the module It is exactly the same, the storage resources ...

AI Technical Summary

Problems solved by technology

But in fact, because the rules stored in the DDR in each rule matching module are exactly the same, the storage resources of the DDR cannot be effectively and fully utilized, and the number of rules stored in the flow control device is limited, which cannot reach the number of rules required for traffic filtering

Images