Method and system for packet processing according to access control list table

Abstract

The present invention provides a method and system for packet processing according to a access control list table, the method comprising: receiving a packet, wherein the packet includes packet information and match items for matching; providing a mask table for masking the packet information; obtaining a hash key by performing a multiplexing logic operation, wherein the hash key is made by combining a multiplex result of the packet information and the mask table; obtaining a hash value by performing a hash function based on the hash key, wherein the hash value is composed of X+Y, wherein X is a signature table index and Y is a key digest; performing a hash table indexing, based on the signature table index, wherein the signature table index is the index to an address of signature table; performing a pattern match, wherein the signature table contains signature fields, and if any second signature field in the signature table is matched with the digest key, the action table index of the same signature field is then set as an address index of an action table; and applying an action corresponding to the address index to the packet.

Description

technical field [0001] The present invention relates to a method and system for packet grouping processing based on table lookup, more specifically, to a method and system for searching grouping processing based on access control list and then achieving fast pattern matching search, that is, according to access control list Method and system for packet processing. Background technique [0002] In computer security, an access control list (ACL) is a list of permissions associated with a system resource (or object). ACLs specify which users or system processes are granted access to objects, and which operations are allowed on a given object. Each entry in a typical ACL specifies a subject and an action. For example, if a file object has an ACL containing, for example, Alice: read, write; Bob: read, this would grant Alice permission to read and write the file, and only grant permission to Bob to read. [0003] However, traditional ACL-related techniques require expensive ter...

AI Technical Summary

Problems solved by technology

[0004] In addition, there are some disadvantages that it takes a long time to look up the table, the lookup time increases with the lookup of multi-field information, and it is difficult to locate the regular index address in one cycle

Images