A method of fast data packet filtering

A filtering method and data packet technology, applied in data exchange details, data exchange network, digital transmission system, etc., can solve the problems of small number of filtering rules, limited number of domains, unsteady classification processing time, etc. Constant, low-latency effects

Inactive Publication Date: 2004-11-10
ZTE CORP
View PDF0 Cites 31 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0007] The purpose of the present invention is to overcome the disadvantages of the existing packet classification technology that allow the nu

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method of fast data packet filtering
  • A method of fast data packet filtering
  • A method of fast data packet filtering

Examples

Experimental program
Comparison scheme
Effect test

Example Embodiment

[0025] In principle, the fast packet filtering method of the present invention is mainly composed of two parts: the preprocessing process of the filtering rules and the classification matching process. The basic idea is to transform multi-dimensional matching into single-dimensional parallel matching, and the result rule set of each dimension matching is taken to obtain a decreasing rule set space after the intersection. In order to facilitate the introduction of technical solutions, first define several algorithm-related concepts:

[0026] Meta-field Chunk, the Chunk in the first stage comes directly from the field specified in the filtering rules. In order to save memory, the width of the Chunk generally does not exceed 16 bits, that is, the source / destination IP address is usually split into high and low 16 bits. , The other Chunks are merged from the upper level Chunk. Other information related to IP packets can also be introduced as Chunk, such as router physical port number,...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a fast data package filtering method, including the processing courses: preprocessing all the filtering rules and generating the index tables at all stages; according to a determined recurrence table-look-up route, making operations of inquiry and aggregation on the index tables at all stages to obtain the final data processing mode information, completing classifying data packages. It can meet the filter processing requirement of line speed packages on high-speed routers. When the number of filtering rules increases, it is obviously prior to a linear table-look-up mode, the larger the number is, the more obvious the advantage is; the filter matching time is constant when transmitting packages, and the delay time is short without stability and reliability of the network. It can be applied to firewall, network access server, four-layer exchanger, and other applications in need of fast filtering packages.

Description

technical field [0001] The invention relates to a fast IP packet filtering method adapting to large rule sets and multiple fields, in particular to computer communication and high-speed Internet applications in the field of communication. Background technique [0002] What the Internet currently provides is a "best effort" transmission service, and the Internet in the future will provide users with various value-added services. These services include differentiated services, precise QoS services, QoS routing, policy routing, VPN, distributed firewall, IP security gateway, flow-based billing, NAT, four-layer switching, etc. One of the key technologies for the realization of all these value-added services is fast packet classification / filtering-based on one or more fields in the IP packet header to determine which flow the packet belongs to and adopt different strategies for processing. Usually the filter includes multiple filtering rules, and the packet header fields that ca...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L12/16H04L12/24H04L29/06H04Q3/00
Inventor 张钢钢白英杰唐珂戴进方军
Owner ZTE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products