Firewall multi-core architecture intelligent detection method

A technology of intelligent detection and firewall, applied in the field of intelligent detection and detection of multi-core architecture, can solve the problem of not crossing the distance, restricting the popularity and popularization of proprietary hardware architecture, etc., to achieve the effect of optimizing the scheduling situation

Pending Publication Date: 2022-05-24
HANGZHOU GUYI NETWORK TECH CO LTD
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0012] In response to these problems, technologies such as ASIC chips, network processors, and multi-core processors have emerged one after another, and have more or less solved the above problems from different levels and angles. However, with the rapid improvement of network performance and the rapid enrichment of business functions Compared with the growth rate, these architectures have not been popularized rapidly, and there is still a large gap between excellent chip capabilities and mature application products. This distance restricts the popularity and popularization of the above-mentioned proprietary hardware architectures in the field of security gateways.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Firewall multi-core architecture intelligent detection method
  • Firewall multi-core architecture intelligent detection method
  • Firewall multi-core architecture intelligent detection method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0059] The present invention will be further described below with reference to specific embodiments.

[0060]The channel through which the server interacts with the outside world is the network, and the final result is fed back to the requesting object through the network, regardless of the complex work performed by the server. In a sense, the network card is the "fortress" for external communication and communication of the server. The performance of the network card determines the overall performance of the server to a certain extent. The fast-growing cloud server is inseparable from high-performance network support. Multi-queue network card is a technology, which was originally used to solve the problem of network IO QOS (quality of service). Later, with the continuous improvement of network IO bandwidth, single-core CPU cannot fully meet the needs of network cards. The most obvious manifestation is The single-core CPU cannot handle a large number of data packet requests (s...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a firewall multi-core architecture intelligent detection method, and belongs to the technical field of multi-core architecture intelligent detection methods. The intelligent detection method comprises the following steps: (1) according to hardware configuration of a system, retrieving the number of support cores, the number of network card queues and a memory of the system to obtain the maximum number of start monitoring processes SNUM; (2) setting a network card monitoring queue number according to the maximum start monitoring process number SNUM obtained in the step (1), and interrupting CPU binding; (3) binding the started process with a CPU (Central Processing Unit), and starting an intelligent detection engine; and (4) optimizing the scheduling condition among the process services by utilizing a CPU isolation technology, and detecting concurrent data packets among the plurality of network cards. According to the method and the device, the scheduling condition among the process services is optimized, so that a multi-network-card concurrent data packet detection process with higher performance is finally realized.

Description

technical field [0001] The invention belongs to the technical field of multi-core architecture intelligent detection and detection methods, and in particular relates to a multi-core architecture intelligent detection method for firewalls. Background technique [0002] With more and more network applications, the demand for bandwidth is also rising, which poses a challenge to the actual software and hardware solutions for security auditing, how to realize the security of enterprise applications without sacrificing performance or paying less performance costs. Auditing is the focus of successful design. [0003] The technology of intelligent detection mainly combines the technology of application state detection firewall and the technology of application layer data flow identification to efficiently identify various applications on the network, and realize the detection of network application level through the detection of application flow data. Functional requirements such a...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/40G06F9/50
CPCH04L63/1408H04L63/02G06F9/5027
Inventor 李建北毛庆威陈英辉胡江
Owner HANGZHOU GUYI NETWORK TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products