Method and device for strengthening safety of protocol message

Abstract

This invention discloses a method and a device for strengthening safety of protocol messages, in which, the device includes a message receiving module, a buffer storage modull, a message despatch module, a message process module, a sorting mapping module and a configuratioin module, first of all, the configuration module sets different priorities for different kinds of messages, and the message needing to be processed mostly has the maximum priority and related receiving queues are set for different priority messages in the buffer stored module, after receiving the message, the mapping module first of all decides the kind of the message, then maps the message to the receiving queue corresponding to the priority of the buffer module then again the message despatch module transmits messages in the receiving queue with higher priorities to the processor according to the despatch algorithm, which can transmit protocol messages to CPU in three-layer network devices.

Description

technical field [0001] The invention relates to message interaction of three-layer network equipment, in particular to a method and device for enhancing protocol message exchange security. Background technique [0002] With the rapid development of information technology, the composition of the network becomes more and more complex, and more and more layer-3 network devices participate in the network. In a network composed of layer-3 network devices, layer-3 network devices often need to exchange protocol packets, such as routing protocols BGP (Border Gateway Protocol), OSPF (Open Shortest Path First), etc., or layer-2 protocols such as STP (Spanning Tree Protocol), LACP (Link Aggregation Control Protocol) protocol, etc. Generally, these protocol packets are transmitted from the underlying hardware to the CPU in the device for processing. Layer 3 network devices rely on protocol packets to determine link status, routing information, etc., so as to ensure normal data forwar...

AI Technical Summary

Problems solved by technology

Due to the limitation of CPU processing capacity, the number of packets that can be sent per second is limited. When a large number of packets need to be sent, some packets are discarded due to the limitation of queue length, which may cause protocol packets to be discarded.

In addition, because the number of protocol packets is relatively small compared with the number of ordinary packets, when they are sent to the processor on a queue, they can only be sent sequentially, so that when the CPU processes the packets, it can only process them sequentially , resulting in a delay in the processing of protocol packets

[0007] The Chinese patent application No. 02131445 discloses "a method for protecting the load of the central processor of network equipment". The technical solution adopted in this application is to use dynamically generated discarded routes to suppress a large number of messages that cannot be processed by the hardware forwarding engine from being handed over to the CPU. , to solve the problem of CPU overload and flooding of control messages. The disadvantage of this patent application is that it may cause protocol messages that need to be processed normally to be discarded, thereby interrupting the protocol

Images