A method and system for forwarding ah message

A forwarding method and forwarding system technology, applied in transmission systems, digital transmission systems, electrical components, etc., can solve the problem of not effectively shortening the overall time of message processing and forwarding, and achieve the effect of shortening the forwarding time

CN104052668BActive Publication Date: 2017-10-10OPZOON TECH
2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2017-10-10

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses a forwarding method and system of an AH message, so as to solve the problem that in the forwarding process of the AH message, it is first necessary to search for PSEC SA and decapsulate the AH message, then search for a fast forwarding table and perform two steps of secondary matching and forwarding Instead, the AH message forwarding time cannot be effectively shortened. The forwarding method comprises: after receiving the AH message, searching whether the fast forwarding table corresponding to the current AH message exists; if it exists, processing and forwarding the current AH message according to the fast forwarding table; if not, A fast forwarding table is created according to the current AH message, and the current AH message is processed and forwarded accordingly. Through the creation of the fast forwarding table, other AH messages corresponding to the AH messages created in the fast forwarding table are directly processed accordingly, thereby eliminating the process of repeated search or secondary matching, and effectively shortening the time required for the AH message. forwarding time.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the field of computer network communication technology leadership, and specifically relates to an AH message forwarding method and system. Background technique

[0002] Internet Protocol Security (IPSEC) is an open standard security framework based on the Internet Engineering Task Force, which defends against network attacks through packet filtering and implementation of trusted communications. IPSEC data packets are divided into AH (Authentication Header) packets and ESP (Encapsulating Security Payload) packets. Among them, the AH message only authenticates and encapsulates the message without encryption, and the inner IP header of the AH message can be seen during the forwarding process.

[0003] Currently, multi-core network devices usually use fast forwarding tables to forward packets, so as to reduce search time for packet forwarding paths and conversion time for service matching. In the forwarding process of the AH mess...

Examples

Embodiment Construction

[0026] In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in combination with specific embodiments and with reference to the accompanying drawings. It should be understood that these descriptions are exemplary only, and are not intended to limit the scope of the present invention. Also, in the following description, descriptions of well-known structures and techniques are omitted to avoid unnecessarily obscuring the concept of the present invention.

[0027] figure 1 It is a schematic diagram of the principle of AH message forwarding in the preferred embodiment of the present invention.

[0028] Such as figure 1 As shown, the message structure of the AH message includes: a Mac header, a first-layer IP header, an AH protocol header, a second-layer IP header, and DATA data. Wherein src represents the source IP address of the IP packet, and dst represents the destinati...