Method and network equipment for implementing inspection of reversal path of unicast

Abstract

The key technology of the invention is: setting URFP (unicast reverse path forwarding) label in the routing list item in the network device routing list; according the routing list item carrying URPF label, making relevant URPF for the relevant message; in case of on need to make URDF for all messages forwarded by the interface, the invention avoids the search process for stream classifying list item.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method for realizing unicast reverse path inspection and network equipment. Background technique [0002] The IP network that emerged at the end of the 20th century has created a miracle in the history of human science and technology. The biggest advantage of the IP network is its openness and maximum support for terminal intelligence. This enables the existence of various services and applications in the IP network. But at the same time, the openness of IP networks and the intelligence of terminals also make IP networks face unprecedented security threats. [0003] IP source address spoofing is a common attack method in IP networks. The so-called IP source address spoofing means that the attacker uses the method of changing the source IP address to reach the purpose of the attack packet. [0004] In order to prevent attackers from maliciously attacking on the IP networ...

AI Technical Summary

Problems solved by technology

This not only increases the workload of network equipment maintenance, but also increases the complexity of network equipment forwarding packets, which also causes the decline of network equipment forwarding performance.

[0014] To sum up, the current methods for implementing URPF cannot simply and effectively implement URPF for packets, resulting in a decline in the forwarding performance of network devices.

Images