Network communication data real-time mirroring device

Abstract

The invention discloses a network communication data real-time mirroring device which is simple and reasonable in structure and convenient to install and use, network communication can be monitored in real time, meanwhile, data can be traced and played back, in the playback data transmission process, the data can only be checked by an upper computer and cannot be stored, the secrecy performance of data transmission is greatly improved, and the data transmission efficiency is improved. And meanwhile, the fault analysis capability is improved. And large-area popularization and application are worthy.

Description

Technical Field

[0001] The present invention relates to the technical field of network fault analysis, and in particular to a real-time mirroring device for network communication data. Background Art

[0002] Network failures are mainly divided into two categories: physical failures and logical failures. Physical failures, also known as hardware failures, involve hardware devices in the network architecture, such as network cards, network cables, routers, switches, modems, etc. This type of failure is usually caused by hardware problems, line damage, connection device failures, etc. Logical failures involve configuration errors of network devices, shutdown of important processes or ports leading to excessive system load, and protocol failures. In addition, software problems are also a common cause of network failures, including software defects, network operating system defects, etc.

[0003] In the process of analyzing network faults, network data needs to be stored and replayed. Since network fault analysis based on replayed network data requires the help of a host computer, traditional network data storage and playback methods are prone to data leakage during the data transmission process, which greatly affects network security. Summary of the invention

[0004] In view of the above problems, the present invention provides a real-time mirroring device for network communication data for overcoming the above problems or at least partially solving the above problems.

[0005] The present invention provides the following scheme:

[0006] A real-time mirroring device for network communication data, comprising:

[0007] An FPGA device, an NVMe hard disk, and several network interfaces, wherein the NVMe hard disk and the several network interfaces are connected to the FPGA device;

[0008] The FPGA device is used to implement the network switching function and the network switching function and the mirroring function;

[0009] The NVMe hard disk is used to realize the storage function of network data;

[0010] When it is determined that data storage is required, the FPGA device performs cross-interface mirror transmission of the data internally, encrypts the data using a target encryption algorithm and stores it in the NVMe hard disk, and the target encryption algorithm and encryption structure are configured and obtained through the serial port;

[0011] When it is determined that data playback is required, the NVMe hard disk is read through the network interface and read into the host computer for data viewing; the host computer does not store data by default, and the NVMe hard disk has a data destruction function to achieve data confidentiality.

[0012] Preferably: the network switching function includes switching MAC0 to MAC1 or MACn; the network switching function and mirroring function include switching MAC0 to MAC1 or MACn, and mirroring to ports other than the switching port.

[0013] Preferably: the FPGA device is also used to realize real-time storage of network data using the NVMe hard disk through a PCIe interface.

[0014] Preferably: the FPGA device is also used to read configuration parameters through a configuration serial port.

[0015] Preferably, the configuration parameters include mirrored port data, mirroring port data, and storage port data.

[0016] Preferably: the FPGA device implements the hard disk data reading function through the UDP protocol.

[0017] Preferably: the network interface includes a PHY chip and a network transformer.

[0018] According to the specific embodiments provided by the present invention, the present invention discloses the following technical effects:

[0019] The embodiment of the present application provides a real-time mirroring device for network communication data, which has a simple and reasonable structure, is easy to install and use, can monitor network communication in real time, and can trace and replay data. During the playback of data transmission, the data can only be viewed by the host computer and cannot be stored, which greatly improves the confidentiality of data transmission and the fault analysis capability. It is worth promoting and using on a large scale.

[0020] Of course, any product implementing the present invention does not necessarily need to achieve all of the advantages described above at the same time. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0022] Figure 1 The invention discloses a connection block diagram of a real-time network communication data mirroring device provided by an embodiment of the invention. DETAILED DESCRIPTION

[0023] The technical scheme in the embodiment of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiment of the present invention. Obviously, the described embodiment is only a part of the embodiment of the present invention, not all of the embodiments. Based on the embodiment of the present invention, all other embodiments obtained by ordinary technicians in this field belong to the scope of protection of the present invention.

[0024] See also Figure 1 , a real-time mirroring device for network communication data provided by an embodiment of the present invention, such as Figure 1 As shown, the device may include an FPGA device, an NVMe hard disk, and several network interfaces, and the NVMe hard disk and the several network interfaces are connected to the FPGA device;

[0025] The FPGA device is used to implement the network switching function and the network switching function and the mirroring function; in the specific implementation, the embodiment of the present application can provide that the network switching function includes MAC0 switching to MAC1 or MACn; the network switching function and the mirroring function include MAC0 switching to MAC1 or MACn, and mirroring to ports other than the switching port.

[0026] Furthermore, the FPGA device is also used to implement real-time storage of network data using the NVMe hard disk through a PCIe interface. The configuration parameters include mirrored port data, mirrored port data, and storage port data. The FPGA device implements a hard disk data reading function through a UDP protocol.

[0027] The FPGA mainly implements network switching functions, network mirroring functions, data conversion, etc. When the device is powered on, the FPGA reads the FPGA configuration parameters from the parameter configuration interface, and the FPGA completes the port configuration function according to the configuration. For example, function 1: network switching function, MAC0 is switched to MAC1 or MACn;

[0028] Function 2: Network switching and mirroring functions, MAC0 is switched to MAC1 or MACn, and mirrored to ports other than the switching port;

[0029] Function 3: In addition to the above functions 1 and 2, the network data can be stored in real time through the PCIe interface.

[0030] The FPGA device is also used to read configuration parameters through the configuration serial port. The configuration serial port is mainly used to configure the network port. When working, the FPGA can be configured through the universal serial port. The configurable parameters include mirrored port, mirror port, storage port and other functions. After the parameters are configured, they can be configured as static configuration, stored in the ROM of the configuration parameters, and take effect after power off and restart. It can also be configured as dynamic configuration, and the configuration will take effect.

[0031] The NVMe hard disk is used to realize the storage function of network data;

[0032] When it is determined that data storage is required, the FPGA device performs cross-interface mirror transmission of the data internally, encrypts the data using a target encryption algorithm and stores it in the NVMe hard disk, and the target encryption algorithm and encryption structure are configured and obtained through the serial port;

[0033] When it is determined that data playback is required, the NVMe hard disk is read through the network interface and read into the host computer for data viewing; the host computer does not store data by default, and the NVMe hard disk has a data destruction function to achieve data confidentiality.

[0034] The NVMe hard disk provided in the embodiment of the present application mainly realizes the storage function of network data. When data storage is required, the FPGA device transmits data across interfaces in a mirrored manner, and encrypts the data with a specific encryption algorithm and stores it in the hard disk. The encryption algorithm and encryption structure can be configured through the serial port. If data playback is required, the NVMe hard disk is read through the network interface, read into the host computer, and the data is viewed. The device defaults to not storing data. At the same time, the NVMe hard disk has a data destruction function to ensure the confidentiality of data in multiple dimensions. Data storage adopts an overlay algorithm, with the number of device startups and startup time as prefixes, followed by data information, and stored in the hard disk.

[0035] In specific implementation, the embodiment of the present application can provide that the network interface includes a PHY chip and a network transformer. The PHY and the network transformer mainly implement a standard network electrical characteristic interface for network communication. The network switching and network mirroring functions implemented have a network delay of no more than 50ns, and a network data storage throughput of no less than 350MB / s.

[0036] In summary, the network communication data real-time mirroring device provided by the present application has a simple and reasonable structure, is easy to install and use, can monitor network communication in real time, and can trace and replay data. During the playback of data transmission, the data can only be viewed by the host computer and cannot be stored, which greatly improves the confidentiality of data transmission and the fault analysis capability. It is worth promoting and using on a large scale.

[0037] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0038] It can be known from the description of the above implementation methods that those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general hardware platform. Based on such an understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product can be stored in a storage medium such as ROM / RAM, a magnetic disk, an optical disk, etc., and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in the various embodiments of the present application or certain parts of the embodiments.

[0039] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can refer to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can refer to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without creative work.

[0040] The above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. A real-time mirroring device for network communication data, characterized in that: It includes an FPGA device, an NVMe hard disk and several network interfaces, wherein the NVMe hard disk and the several network interfaces are connected to the FPGA device; The FPGA device is used to implement the network switching function and the network switching function and the mirroring function; The NVMe hard disk is used to realize the storage function of network data; When it is determined that data storage is required, the FPGA device performs cross-interface mirror transmission of the data internally, encrypts the data using a target encryption algorithm and stores it in the NVMe hard disk, and the target encryption algorithm and encryption structure are configured and obtained through the serial port; When it is determined that data playback is required, the NVMe hard disk is read through the network interface and read into the host computer for data viewing; the host computer does not store data by default, and the NVMe hard disk has a data destruction function to achieve data confidentiality.

2. The network communication data real-time mirroring device according to claim 1, characterized in that: The network switching function includes switching MAC0 to MAC1 or MACn; the network switching function and mirroring function include switching MAC0 to MAC1 or MACn, and mirroring to ports other than the switching port.

3. The network communication data real-time mirroring device according to claim 1, characterized in that: The FPGA device is also used to implement real-time storage of network data using the NVMe hard disk through a PCIe interface.

4. The real-time mirroring device for network communication data according to claim 1, characterized in that: The FPGA device is also used to read configuration parameters through the configuration serial port.

5. The real-time mirroring device for network communication data according to claim 4, characterized in that: The configuration parameters include mirrored port data, mirroring port data, and storage port data.

6. The real-time mirroring device for network communication data according to claim 1, characterized in that: The FPGA device implements the hard disk data reading function through the UDP protocol.

7. The network communication data real-time mirroring device according to claim 1, characterized in that: The network interface includes a PHY chip and a network transformer.

Images