Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

A method of fast data packet filtering

A filtering method and data packet technology, applied in data exchange details, data exchange network, digital transmission system, etc., can solve the problems of small number of filtering rules, limited number of domains, unsteady classification processing time, etc. Constant, low-latency effects

Inactive Publication Date: 2004-11-10
ZTE CORP
View PDF0 Cites 31 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0007] The purpose of the present invention is to overcome the disadvantages of the existing packet classification technology that allow the number of filtering rules to be small, the number of domains used by the rules is limited, and the classification processing time is not constant.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method of fast data packet filtering
  • A method of fast data packet filtering
  • A method of fast data packet filtering

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0025] In principle, the rapid packet filtering method of the present invention is mainly composed of two parts: a preprocessing process of filtering rules and a classification matching process. The basic idea is to convert multi-dimensional matching into single-dimensional parallel matching, and obtain a decreasing rule set space after the intersection of the result rule sets of each dimension matching. In order to facilitate the introduction of technical solutions, a few algorithm-related concepts are first defined:

[0026] Meta field Chunk, the first stage of the Chunk directly from the field specified in the filter rule, in order to save memory, generally the width of the Chunk does not exceed 16 bits, that is, the source / destination IP address is usually split into two Chunks of high and low 16 bits , the other Chunk is merged from the previous level Chunk. Other information related to IP packets can also be imported as Chunk, such as router physical port numbers, user ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a fast data package filtering method, including the processing courses: preprocessing all the filtering rules and generating the index tables at all stages; according to a determined recurrence table-look-up route, making operations of inquiry and aggregation on the index tables at all stages to obtain the final data processing mode information, completing classifying data packages. It can meet the filter processing requirement of line speed packages on high-speed routers. When the number of filtering rules increases, it is obviously prior to a linear table-look-up mode, the larger the number is, the more obvious the advantage is; the filter matching time is constant when transmitting packages, and the delay time is short without stability and reliability of the network. It can be applied to firewall, network access server, four-layer exchanger, and other applications in need of fast filtering packages.

Description

technical field [0001] The invention relates to a fast IP packet filtering method adapting to large rule sets and multiple fields, in particular to computer communication and high-speed Internet applications in the field of communication. Background technique [0002] What the Internet currently provides is a "best effort" transmission service, and the Internet in the future will provide users with various value-added services. These services include differentiated services, precise QoS services, QoS routing, policy routing, VPN, distributed firewall, IP security gateway, flow-based billing, NAT, four-layer switching, etc. One of the key technologies for the realization of all these value-added services is fast packet classification / filtering-based on one or more fields in the IP packet header to determine which flow the packet belongs to and adopt different strategies for processing. Usually the filter includes multiple filtering rules, and the packet header fields that ca...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/16H04L12/24H04L29/06H04Q3/00
Inventor 张钢钢白英杰唐珂戴进方军
Owner ZTE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products