A method for quickly carrying out equivalence partition in packet classification

Abstract

The disclosed fast equipotent division method in ACL comprises: initiating all structures in matching range as a set with only one line segment, and setting the equivalent ID value of the line segment as the initial value; when adding rule, from the initial line segment of every set, comparing in turn the cover range and line range, and recording or re-allocating equivalent ID value according to comparison result; then, re-allocating the initial values or equivalent ID value with line segment not complete recorded, storing ID values covered by rule, and setting into one on relative position of equivalent bit image. This invention can increase in-effect speed for rule.

Description

technical field [0001] The invention relates to a method for dividing flow classification of packets by a router, in particular to a method for quickly dividing equivalence classes in flow classification. Background technique [0002] In ordinary routers, traffic classification is an important basic function. The setting of traffic classification can be done through ACL (Access Control List). ACLs provide network managers with updated and flexible management methods. ACLs are widely used in packet filtering, NAT (Network Address Translation), QoS (Quality of Service), Policy Routing, uRPF (Unicast Reverse Path Forwarding) and other applications. [0003] Among the ACL matching algorithms implemented by software, the RFC (Recursive Flow Classification) algorithm is widely used and has better performance. As shown in Figure 1, the RFC algorithm constructs multiple equivalent ACL rules by recursively classifying the ACL rule set. Class and multi-level index table, through th...

AI Technical Summary

Problems solved by technology

[0004] Using this method is more efficient for the process of searching and positioning, but there is a problem of low efficiency when dividing equivalence classes. All rules must be collected together, and CLASS BITMAP (CBM) (equivalence class bit Figure) to divide the equivalence classes

If the number of rules is huge, the number of BITMAP (bitmap) digits required will also increase accordingly, and a large number of logical "and" and "comparison" work will be required, and the memory will be read and written multiple times, and each time an ACL rule is added / deleted, Both need to be recalculated, which is not suitable for practical applications, which require the rapid generation of equivalence classes to make the rules take effect quickly

Images