Router hardware acceleration module and data packet processing method and system thereof

Abstract

The invention relates to the technical field of communication, and discloses a router hardware acceleration module and a data packet processing method thereof, and the method comprises the steps: receiving a data packet of a network through a physical layer interface of router hardware, and recognizing the data packet priority of the data packet; calculating risk control coefficients of the data packets by using a data packet risk control algorithm of router hardware, and screening target data packet queues in the priority data packet queues; marking a data packet next hop of the target data packet queue by using a routing table of router hardware, defining a data packet forwarding path of the target data packet queue, and establishing a forwarding waiting queue of the target data packet queue; a queue forwarding module of the router hardware is used for sequentially forwarding data packets corresponding to the forwarding waiting queue, calculating a forwarding abnormal coefficient of forwarding flow, adjusting forwarding parameters of the queue forwarding module, obtaining optimized forwarding parameters, and executing efficient forwarding of the data packets corresponding to the forwarding waiting queue based on the optimized forwarding parameters. The stability of the network can be improved.

Description

Technical Field

[0001] The invention relates to a router hardware acceleration module and a data packet processing method and system thereof, belonging to the technical field of communication. Background Art

[0002] Router hardware acceleration modules and their use in packet processing refer to the use of specialized hardware components in network routers to accelerate the processing of data packets. Router hardware acceleration modules and their use in packet processing are intended to improve the processing capabilities of network devices and ensure efficient and stable operation of the network.

[0003] In traditional packet processing, all these tasks are handled by the router's central processing unit (CPU), which results in limited processing speed and excessive CPU load, which may cause network delays and performance bottlenecks. Compared with traditional CPU processing, hardware acceleration solutions significantly improve processing speed and efficiency, reduce delays, and reduce CPU load by performing these tasks on dedicated hardware, thereby improving network stability. Summary of the invention

[0004] The present invention provides a router hardware acceleration module and a data packet processing method and system thereof, the main purpose of which is to improve the stability of the network.

[0005] To achieve the above object, the present invention provides a router hardware acceleration module and a data packet processing method thereof, comprising: Receive a data packet from the network using the physical layer interface of the router hardware, mark the header of the data packet using the physical layer analysis interface of the router hardware, determine the network layer and transport layer protocol of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type; Constructing a priority model for the data packet, and identifying the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information; Determine a priority data packet queue of the data packet according to the data packet priority, calculate a risk control coefficient of the data packet using a data packet risk control algorithm of the router hardware, and screen a target data packet queue in the priority data packet queue based on the risk control coefficient; Using the routing table of the router hardware, marking the next hop of the data packet of the target data packet queue, defining the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establishing the forwarding waiting queue of the target data packet queue according to the data packet forwarding path; Based on the data packet forwarding path, the queue forwarding module of the router hardware is used to sequentially forward the data packets corresponding to the forwarding waiting queue, and the forwarding traffic of the corresponding data packets during the sequential forwarding is collected, and the forwarding anomaly coefficient of the forwarding traffic is calculated. According to the forwarding anomaly coefficient, the forwarding parameters of the queue forwarding module are adjusted to obtain optimized forwarding parameters. Based on the optimized forwarding parameters, efficient forwarding of the data packets corresponding to the forwarding waiting queue is performed.

[0006] Optionally, receiving a network data packet by using a physical layer interface of router hardware includes: Identifying a network medium of the network, and analyzing a connection stability coefficient between the network medium and the physical layer interface; When the connection stability coefficient meets a preset stability threshold, capturing a frame signal of the network medium using the physical layer interface; Converting the frame signal into a digital frame signal; and performing frame synchronization on the digital frame signal to obtain a synchronous frame signal, wherein the frame synchronization includes clock synchronization and frame synchronization; The CRC value of the synchronization frame signal is calculated, and according to the CRC value, the frame header and the frame tail of the synchronization frame signal are removed to obtain the data packet of the network.

[0007] Optionally, calculating the CRC value of the synchronization frame signal includes: Defining a generating polynomial of the synchronization frame signal; Mark the number of times the generator polynomial is generated; Based on the generator polynomial and the number of times of generation, the CRC value of the synchronization frame signal is calculated using the following formula: in, Indicates the CRC value of the synchronization frame signal, Indicates the synchronization frame signal, Indicates the number of zeros added after the synchronization frame signal. represents the generating polynomial, Indicates the number of times it is generated. Represents the modulo operation.

[0008] Optionally, constructing the priority model of the data packet includes: Defining key applications of the network corresponding to the data packet; Based on the key application, defining a data packet type of the data packet; analyzing performance requirements of the packet type; Marking the priority impact weight of the performance requirement; Defining a priority algorithm for the data packet type by using the performance requirement and the priority impact weight; Based on the priority algorithm of the data packet type, a priority model of the data packet is constructed.

[0009] Optionally, defining the priority algorithm of the data packet type by using the performance requirement and the priority impact weight includes: Determine a linear rule for the requirement score of the performance requirement; According to the demand score linear rule, a linear function of the data packet type is defined; wherein the linear function: Based on the linear function, the performance requirement and the priority impact weight, the priority algorithm of the data packet type is constructed using the following formula, wherein the priority algorithm is:

[0010] in, The packet priority indicating the packet type, represents the number of performance requirements, Indicates Packet type for The priority of each performance requirement affects the weight. represents a linear function, Indicates The actual index value of the performance requirement, Indicates Packet type for The target value of the performance requirement

[0011] Optionally, the calculating the risk control coefficient of the data packet by using the data packet risk control algorithm of the router hardware includes: Configuring risk control algorithm parameters of the data packet risk control algorithm; defining a risk indicator for the data packet; Extracting risk features related to the risk indicators based on the network layer, transport layer protocol and key information corresponding to the data packet; Using the trained feature anomaly recognition model to identify feature anomalies of the risk feature; According to the characteristic anomaly and the risk control algorithm parameters, the risk control coefficient of the data packet is calculated using the data packet risk control algorithm.

[0012] Optionally, defining a data packet forwarding path of the target data packet queue based on the next hop of the data packet includes: Marking the forwarding path starting point and the forwarding path end point of the data packet corresponding to the target data packet queue; Identifying a neighbor coefficient of a next hop of the data packet; Constructing a set of adjacent routers corresponding to the data packet of the target data packet queue through the adjacent coefficient, the starting point of the forwarding path and the end point of the forwarding path; Recording forwarding path information of routers corresponding to the adjacent router set; The data packet forwarding path of the target data packet queue is constructed using the forwarding path information.

[0013] Optionally, the calculating the forwarding anomaly coefficient of the forwarded traffic includes: Establishing a baseline model of the forwarding traffic; According to the baseline model, defining normal traffic characteristics and dynamic abnormal thresholds of the forwarding traffic; Based on the normal traffic characteristics, identifying an abnormal pattern of the forwarded traffic; Calculating an abnormality index of the abnormal pattern; A forwarding anomaly coefficient of the forwarded traffic is calculated according to the anomaly indicator and the dynamic anomaly threshold.

[0014] Optionally, establishing the baseline model of the forwarding traffic includes: Collecting historical forwarding data of the forwarded traffic; Preprocessing the historical forwarding data to obtain preprocessed forwarding data; Analyzing the time trend item and the lagged difference item of the preprocessed forwarding data; Based on the time trend term and the lagged difference term, the time series function of the preprocessed forwarding data is constructed using the following formula, wherein the time series function is: in, represents the observed value of the preprocessed forwarding data in period t, represents the first-order difference of the preprocessed forwarding data in period t, represents the intercept term, represents the coefficient of the time trend term, represents the coefficient of the first-order lag term, Indicates The coefficient of the lagged difference term, represents the observed value of the preprocessed forwarding data in period t-1, represents the first-order difference of the preprocessed forwarding data in period t-1, represents the error term, represents the number of lagged difference terms; A baseline model of the forwarding traffic is established through the time series function.

[0015] In order to solve the above problems, the present invention also provides a router hardware acceleration module and a data packet processing system thereof, the system comprising: A data packet acquisition module, used to receive a data packet from the network using the physical layer interface of the router hardware, mark the header of the data packet using the physical layer analysis interface of the router hardware, determine the network layer and transport layer protocol of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type; A priority calculation module, used to construct a priority model for the data packet, and identify the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information; A data packet queue construction module, used to determine the priority data packet queue of the data packet according to the data packet priority, calculate the risk control coefficient of the data packet using the data packet risk control algorithm of the router hardware, and screen the target data packet queue in the priority data packet queue based on the risk control coefficient; A forwarding path establishing module, used to mark the next hop of the data packet of the target data packet queue by using the routing table of the router hardware, define the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establish the forwarding waiting queue of the target data packet queue according to the data packet forwarding path; The data packet forwarding module is used to sequentially forward the data packets corresponding to the forwarding waiting queue based on the data packet forwarding path by using the queue forwarding module of the router hardware, collect the forwarding traffic of the corresponding data packets in the sequential forwarding, calculate the forwarding anomaly coefficient of the forwarding traffic, adjust the forwarding parameters of the queue forwarding module according to the forwarding anomaly coefficient, obtain the optimized forwarding parameters, and perform efficient forwarding of the data packets corresponding to the forwarding waiting queue based on the optimized forwarding parameters.

[0016] In order to solve the above problem, the present invention further provides an electronic device, the electronic device comprising: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to implement the above-mentioned router hardware acceleration module and its data packet processing method.

[0017] In order to solve the above problems, the present invention also provides a computer-readable storage medium, in which at least one instruction is stored. The at least one instruction is executed by a processor in an electronic device to implement the above-mentioned router hardware acceleration module and its data packet processing method.

[0018] Compared with the problems described in the background technology, the present invention introduces advanced physical layer interface and data parsing technology, so that the system can efficiently receive and parse network data packets, accurately identify key source IP address, destination IP address, port number and protocol type and other information, which provides a solid foundation for the subsequent priority model construction. Secondly, by building an accurate priority model, the system can flexibly assign corresponding priorities to various types of data packets according to different network requirements and business characteristics, which not only ensures the smooth operation of important businesses, but also optimizes the allocation and use efficiency of network resources, and reduces the occurrence of unnecessary delays and congestion. In addition, the solution also adopts Advanced risk control algorithms analyze the historical behavior of data packets and identify potential abnormal traffic patterns in real time. Once an abnormality is found, the system will immediately trigger corresponding risk control measures, such as limiting or blocking the spread of suspicious data packets, thereby effectively preventing network attacks and malicious activities and ensuring the security of the network. Finally, the solution also focuses on the simplicity and flexibility of network management. Through automated forwarding path management and intelligent parameter adjustment mechanisms, network administrators can easily maintain and manage the network without frequent manual intervention. At the same time, the openness and scalability of the solution also reserve space for future network upgrades and optimizations, enabling it to better adapt to the ever-changing network environment. Therefore, the present invention can improve the stability of the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 A schematic diagram of a router hardware acceleration module and a method for processing data packets provided in accordance with an embodiment of the present invention; Figure 2 A diagram of a router hardware acceleration module and its functional module in a data packet processing system provided by an embodiment of the present invention; Figure 3 A schematic diagram of the structure of a router hardware acceleration module and an electronic device in a data packet processing system provided by an embodiment of the present invention; The purpose, features and advantages of the present invention will be further described with reference to the accompanying drawings in conjunction with the embodiments. DETAILED DESCRIPTION

[0020] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0021] The embodiment of the present application provides a router hardware acceleration module and a method for processing data packets therein. The execution subject of the router hardware acceleration module and the method for processing data packets therein includes but is not limited to at least one of the electronic devices such as a server and a terminal that can be configured to execute the method provided by the embodiment of the present application. In other words, the router hardware acceleration module and the method for processing data packets therein can be executed by software or hardware installed in a terminal device or a server device. The server includes but is not limited to: a single server, a server cluster, a cloud server or a cloud server cluster, etc.

[0022] Embodiment 1: Reference Figure 1 FIG. 1 is a flow chart of a router hardware acceleration module and a packet processing method thereof provided in an embodiment of the present invention. In this embodiment, the router hardware acceleration module and the packet processing method thereof include: S1. Receive network data packets using the physical layer interface of router hardware, mark the header of the data packet using the physical layer resolution interface of the router hardware, determine the network layer and transport layer protocols of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type.

[0023] It should be explained that the router hardware refers to the physical components that make up the network router, including but not limited to processors, memory, storage devices, and network interface cards (NICs). The physical layer interface is the physical connection point between the router and the network. It is responsible for sending and receiving raw bit streams. The network refers to the medium for data packet transmission, which can be a local area network (LAN), a wide area network (WAN), a metropolitan area network (MAN), or the Internet. The data packet refers to the basic unit of network communication, which contains a group of ordered bytes, which are organized into two parts: a header and data.

[0024] In detail, the method of receiving a network data packet by using a physical layer interface of router hardware includes: Identifying a network medium of the network, and analyzing a connection stability coefficient between the network medium and the physical layer interface; When the connection stability coefficient meets a preset stability threshold, capturing a frame signal of the network medium using the physical layer interface; Converting the frame signal into a digital frame signal; and performing frame synchronization on the digital frame signal to obtain a synchronous frame signal, wherein the frame synchronization includes clock synchronization and frame synchronization; The CRC value of the synchronization frame signal is calculated, and according to the CRC value, the frame header and the frame tail of the synchronization frame signal are removed to obtain the data packet of the network.

[0025] Among them, the network medium refers to the physical transmission medium used to transmit data signals, such as twisted pair, coaxial cable, optical fiber or radio wave. The connection stability coefficient refers to an indicator to measure the stability of the network connection, usually a value between 0 and 1, where 1 means completely stable and 0 means completely unstable. The stability threshold refers to a preset value of the connection stability coefficient, which is used as a benchmark for judging whether the network connection is sufficiently stable. The frame signal refers to the original signal transmitted through the network medium. The digital frame signal refers to the frame signal processed into a signal that can be processed by the digital circuit of the router. The synchronous frame signal refers to the frame signal after frame synchronization processing. The clock synchronization refers to ensuring the clock synchronization of the sender and the receiver. The frame synchronization ensures that the receiver can identify the beginning and end of the frame, which is usually achieved through a specific bit pattern (such as a preamble and a frame delimiter). The CRC value refers to a parameter value used to detect whether an error occurs in the data during transmission. The CRC standard value refers to a preset or standardized CRC value, which is used to compare with the CRC value of the received frame to determine whether the data is complete and correct. The frame header refers to the beginning part of the data frame, which contains control information such as frame type and length. The frame trailer refers to the end part of the data frame, which usually contains error detection information such as a CRC value.

[0026] Further, the calculating the CRC value of the synchronization frame signal includes: Defining a generating polynomial of the synchronization frame signal; Mark the number of times the generator polynomial is generated; Based on the generator polynomial and the number of times of generation, the CRC value of the synchronization frame signal is calculated using the following formula: in, Indicates the CRC value of the synchronization frame signal, Indicates the synchronization frame signal, Indicates the number of zeros added after the synchronization frame signal. represents the generating polynomial, Indicates the number of times it is generated. Represents the modulo operation.

[0027] The generator polynomial refers to a predefined polynomial for calculating a CRC value, the number of times of generation refers to the highest power of the generator polynomial plus 1, and the modulo operation refers to performing modulo 2 division.

[0028] The present invention marks the header of the data packet by using the physical analysis interface of the router hardware, determines the network layer and transport layer protocol of the header, and extracts the key information of the data packet, including: source IP address, destination IP address, port number and protocol type to provide a basis for the subsequent data packet processing. Among them, the header refers to a part of the data packet, which contains control information and is used to guide the transmission of the data packet in the network. The network layer refers to a layer in the computer network model (such as the OSI model or the TCP / IP model), which is responsible for the routing and forwarding of the data packet in the network. The transport layer protocol refers to the responsibility for providing end-to-end communication services between two endpoints in the network. The source IP address refers to the IP address of the sender of the data packet, which identifies the origin of the data packet. The destination IP address refers to the IP address of the expected recipient of the data packet, which identifies the destination to which the data packet is to go. The port number refers to the digital identifier used in the transport layer protocol to distinguish different network services. The protocol type refers to the type of network protocol used by the data packet, such as TCP, UDP, ICMP and other protocols. The physical analysis interface refers to the component or function in the router hardware used to parse the physical layer signal and extract the network layer data packet therefrom.

[0029] S2. Construct a priority model for the data packet, and identify the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information.

[0030] Constructing the priority model of the data packets can ensure that the processing order of the data packets can effectively meet the performance requirements of different applications in the network while maintaining the stability and efficiency of the network.

[0031] In detail, the constructing of the priority model of the data packet includes: Defining key applications of the network corresponding to the data packet; Based on the key application, defining a data packet type of the data packet; analyzing performance requirements of the packet type; Marking the priority impact weight of the performance requirement; Defining a priority algorithm for the data packet type by using the performance requirement and the priority impact weight; Based on the priority algorithm of the data packet type, a priority model of the data packet is constructed.

[0032] Among them, the critical application refers to the data flow or service transmitted in the network that is critical to business operations. For example, VoIP calls, video conferencing, emergency alarm systems, financial transactions, etc. The data packet type refers to the classification of data packets according to the content and purpose of the data packet. For example, real-time traffic, bulk data transmission, control signaling and other categories, the performance requirement refers to the network performance standard that the data packet type must meet in order to ensure the normal operation of critical applications, the priority impact weight refers to the relative importance assigned to different performance requirements, the priority algorithm refers to a calculation method for determining the priority of a data packet, and the priority model refers to a model for calculating the priority of a data packet.

[0033] Further, the priority algorithm of defining the data packet type by the performance requirement and the priority impact weight includes: Determine a linear rule for the requirement score of the performance requirement; According to the demand score linear rule, a linear function of the data packet type is defined; wherein the linear function: Based on the linear function, the performance requirement and the priority impact weight, the priority algorithm of the data packet type is constructed using the following formula, wherein the priority algorithm is: in, The packet priority indicating the packet type, represents the number of performance requirements, Indicates Packet type for The priority of each performance requirement affects the weight. represents a linear function, Indicates The actual index value of the performance requirement, Indicates Packet type for The target value of a performance requirement.

[0034] Among them, the demand score linear rule refers to a set of rules for converting the actual indicator value of the performance requirement into a score, the linear function refers to a function that maps the actual indicator value of the performance requirement to a score in a linear manner, the actual indicator value refers to the performance requirement value actually measured in the network, such as the actual bandwidth, delay or packet loss rate, and the target value refers to the target level of performance requirement set for a specific data packet type.

[0035] The present invention is based on the network layer, the transport layer protocol and the key information, and uses the priority model to identify the packet priority of the data packet, which can effectively identify and process data packets of different priorities, ensuring that key applications obtain the required network resources, thereby improving the overall network performance and user experience. In detail, based on the network layer, the transport layer protocol and the key information, the priority model is used to identify the packet priority of the data packet, which can analyze the actual index value of the data packet through the network layer, the transport layer protocol and the key information, and identify the packet priority of the data packet through the actual index value. Among them, the packet priority refers to the degree of priority processing of the data packet.

[0036] S3. Determine a priority data packet queue for the data packet according to the data packet priority, calculate a risk control coefficient for the data packet using the data packet risk control algorithm of the router hardware, and screen a target data packet queue in the priority data packet queue based on the risk control coefficient.

[0037] It should be explained that the priority data packet queue refers to a data packet queue arranged in order of priority.

[0038] The present invention uses the data packet risk control algorithm of the router hardware to calculate the risk control coefficient of the data packet, which can effectively calculate the risk control coefficient of the data packet, and take corresponding risk control measures accordingly to protect the network from malicious traffic.

[0039] In detail, the calculating the risk control coefficient of the data packet using the data packet risk control algorithm of the router hardware includes: Configuring risk control algorithm parameters of the data packet risk control algorithm; defining a risk indicator for the data packet; Extracting risk features related to the risk indicators based on the network layer, transport layer protocol and key information corresponding to the data packet; Using the trained feature anomaly recognition model to identify feature anomalies of the risk feature; According to the characteristic anomaly and the risk control algorithm parameters, the risk control coefficient of the data packet is calculated using the data packet risk control algorithm.

[0040] The risk control algorithm parameters are used to guide the configuration values ​​of how the risk control algorithm evaluates and processes data packets. These parameters include but are not limited to thresholds, weight factors, historical data records, parameters of anomaly detection models, etc. The risk index refers to a specific metric used to measure the potential risk of a data packet. The risk feature refers to a specific attribute or behavior related to a data packet that can be used to assess its risk. The feature anomaly refers to a significant deviation of one or some risk features of a data packet from the normal behavior pattern. The risk control coefficient refers to the level at which a data packet is assessed to be risky. The feature anomaly recognition model refers to a machine learning model used to detect abnormal behavior in data packet features.

[0041] Optionally, the feature anomaly recognition model is obtained by training an initial feature anomaly recognition model through historical anomaly features of data packets, such as statistical features (such as data packet size, arrival time interval), protocol features (such as TCP flag bits), and traffic features (such as traffic direction and rate).

[0042] S4. Using the routing table of the router hardware, mark the next hop of the data packet of the target data packet queue, define the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establish the forwarding waiting queue of the target data packet queue according to the data packet forwarding path.

[0043] It should be explained that the routing table refers to a table stored in the router memory, which contains the forwarding information of each target address in the network, and the next hop of the data packet refers to the address of the next router that the data packet must pass before reaching the final destination.

[0044] The present invention defines the data packet forwarding path of the target data packet queue based on the next hop of the data packet, can build a forwarding path from the source to the destination, and ensure that the data packet is correctly forwarded along the path.

[0045] In detail, defining the packet forwarding path of the target packet queue based on the next hop of the packet includes: Marking the forwarding path starting point and the forwarding path end point of the data packet corresponding to the target data packet queue; Identifying a neighbor coefficient of a next hop of the data packet; Constructing a set of adjacent routers corresponding to the data packet of the target data packet queue through the adjacent coefficient, the starting point of the forwarding path and the end point of the forwarding path; Recording forwarding path information of routers corresponding to the adjacent router set; The data packet forwarding path of the target data packet queue is constructed using the forwarding path information.

[0046] Among them, the forwarding path starting point refers to the network device where the data packet starts its forwarding process, the forwarding path end point refers to the final destination network device where the data packet is expected to arrive, the adjacent coefficient refers to the parameter used to describe the relationship between the current router and the next-hop router during the forwarding process of the data packet, the adjacent router set refers to the set of all routers directly adjacent to the data packet on the forwarding path, the forwarding path information refers to the detailed information of each router passed by the data packet during the forwarding process, including the router's identification, outbound interface, next-hop address, etc., and the data packet forwarding path refers to the sequence of a series of routers and links that the data packet needs to pass through from the forwarding path starting point to the forwarding path end point.

[0047] Optionally, the data packet forwarding path of the target data packet queue is constructed through the forwarding path information by utilizing the recorded forwarding path information, starting from the forwarding path starting point, passing through each adjacent router in turn until reaching the forwarding path end point, thereby constructing a complete data packet forwarding path.

[0048] S5. Based on the data packet forwarding path, the queue forwarding module of the router hardware is used to sequentially forward the data packets corresponding to the forwarding waiting queue, and the forwarding traffic of the corresponding data packets during the sequential forwarding is collected, and the forwarding anomaly coefficient of the forwarding traffic is calculated. According to the forwarding anomaly coefficient, the forwarding parameters of the queue forwarding module are adjusted to obtain optimized forwarding parameters. Based on the optimized forwarding parameters, efficient forwarding of the data packets corresponding to the forwarding waiting queue is performed.

[0049] The present invention is based on the packet forwarding path, utilizes the queue forwarding module of the router hardware to sequentially forward the packets corresponding to the forwarding waiting queue, and collects the forwarding flow of the corresponding packets in the sequential forwarding, which can effectively forward the packets in the queue, and collects the flow data in the forwarding process, providing a basis for network performance monitoring, troubleshooting and resource optimization. Among them, the queue forwarding module refers to a component in the router hardware, which is responsible for managing and controlling the forwarding process of the packet, and the forwarding flow refers to the number and rate of the packets forwarded by the router in the network.

[0050] Optionally, the present invention calculates the forwarding anomaly coefficient of the forwarding traffic and can effectively monitor and calculate the forwarding anomaly coefficient of the forwarding traffic, thereby protecting the network from potential security threats and performance issues.

[0051] In detail, the calculating of the forwarding anomaly coefficient of the forwarding traffic includes: Establishing a baseline model of the forwarding traffic; According to the baseline model, defining normal traffic characteristics and dynamic abnormal thresholds of the forwarding traffic; Based on the normal traffic characteristics, identifying an abnormal pattern of the forwarded traffic; Calculating an abnormality index of the abnormal pattern; A forwarding anomaly coefficient of the forwarded traffic is calculated according to the anomaly indicator and the dynamic anomaly threshold.

[0052] Among them, the baseline model refers to a mathematical description or statistical model of the traffic characteristics of the network under normal operating conditions. It includes historical data of key indicators such as the average rate of network traffic, data packet size distribution, traffic type, and traffic direction. The normal traffic characteristics refer to the regularity and stability of the traffic when there is no abnormality in the network. These characteristics can be extracted from the baseline model, including the average value, standard deviation, peak period, etc. of the traffic. The dynamic abnormal threshold refers to the traffic indicator threshold dynamically set according to the baseline model and normal traffic characteristics. The abnormal pattern refers to the pattern or behavior in the traffic data that does not conform to the normal traffic characteristics. The abnormal index refers to the parameter that quantifies the abnormal pattern, such as the proportion, frequency, and duration of abnormal traffic. The forwarding abnormal coefficient refers to the combination of the abnormal index and the dynamic abnormal threshold, which is used to quantify the abnormal degree of forwarding traffic.

[0053] Furthermore, the establishing of the baseline model of the forwarding traffic includes: Collecting historical forwarding data of the forwarded traffic; Preprocessing the historical forwarding data to obtain preprocessed forwarding data; Analyzing the time trend item and the lagged difference item of the preprocessed forwarding data; Based on the time trend term and the lagged difference term, the time series function of the preprocessed forwarding data is constructed using the following formula, wherein the time series function is: in, represents the observed value of the preprocessed forwarding data in period t, represents the first-order difference of the preprocessed forwarding data in period t, represents the intercept term, represents the coefficient of the time trend term, represents the coefficient of the first-order lag term, Indicates The coefficient of the lagged difference term, represents the observed value of the preprocessed forwarding data in period t-1, represents the first-order difference of the preprocessed forwarding data in period t-1, represents the error term, represents the number of lagged difference terms; A baseline model of the forwarding traffic is established through the time series function.

[0054] Among them, the historical forwarding data refers to the data set of network data packet forwarding activities recorded in the past period of time. These data usually include the number of data packets or the size of traffic in each time interval (such as per second, per minute, per hour), the preprocessed forwarding data refers to the historical forwarding data after processing steps such as cleaning, conversion and aggregation, the time trend term refers to the long-term trend of data changes over time, the lagged difference term refers to the difference between the current value of the data and its past value (lagged term), the time series function refers to the function used to describe the law of data point changes over time, the observed value refers to the data value collected at the actual time point, the first-order difference refers to the difference between the observed values ​​of two consecutive time points, the coefficient of the time trend term refers to the parameter representing the influence of the time variable in the time series function, the coefficient of the lagged difference term refers to the parameter representing the influence of the difference of the past data point on the current data point in the time series function, and the error term refers to the random variable representing the difference between the model prediction value and the actual observation value in the time series function.

[0055] Optionally, the present invention can adjust the forwarding state of the data packet in real time by adjusting the forwarding parameters of the queue forwarding module according to the forwarding anomaly coefficient, thereby improving the forwarding efficiency of the data packet. The forwarding parameters include but are not limited to queue length, priority queue, scheduling algorithm, congestion control mechanism, traffic shaping and packet loss strategy.

[0056] Compared with the problems described in the background technology, the present invention introduces advanced physical layer interface and data parsing technology, so that the system can efficiently receive and parse network data packets, accurately identify key source IP address, destination IP address, port number and protocol type and other information, which provides a solid foundation for the subsequent priority model construction. Secondly, by building an accurate priority model, the system can flexibly assign corresponding priorities to various types of data packets according to different network requirements and business characteristics, which not only ensures the smooth operation of important businesses, but also optimizes the allocation and use efficiency of network resources, and reduces the occurrence of unnecessary delays and congestion. In addition, the solution also adopts Advanced risk control algorithms analyze the historical behavior of data packets and identify potential abnormal traffic patterns in real time. Once an abnormality is found, the system will immediately trigger corresponding risk control measures, such as limiting or blocking the spread of suspicious data packets, thereby effectively preventing network attacks and malicious activities and ensuring the security of the network. Finally, the solution also focuses on the simplicity and flexibility of network management. Through automated forwarding path management and intelligent parameter adjustment mechanisms, network administrators can easily maintain and manage the network without frequent manual intervention. At the same time, the openness and scalability of the solution also reserve space for future network upgrades and optimizations, enabling it to better adapt to the ever-changing network environment. Therefore, the present invention can improve the stability of the network.

[0057] Embodiment 2: like Figure 2 , which is a diagram of a router hardware acceleration module and its functional modules in a data packet processing system provided by an embodiment of the present invention.

[0058] The router hardware acceleration module and the data packet processing system 200 of the present invention can be installed in an electronic device. According to the functions to be implemented, the router hardware acceleration module and the data packet processing system 200 can include a data packet acquisition module 201, a priority calculation module 202, a data packet queue construction module 203, a forwarding path establishment module 204 and a data packet forwarding module 205. The module of the present invention can also be called a unit, which refers to a series of computer program segments that can be executed by an electronic device processor and can complete fixed functions, which are stored in the memory of the electronic device.

[0059] In this embodiment, the functions of each module / unit are as follows: The data packet acquisition module 201 is used to receive a data packet from the network using the physical layer interface of the router hardware, mark the header of the data packet using the physical layer analysis interface of the router hardware, determine the network layer and transport layer protocol of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type; The priority calculation module 202 is used to construct a priority model for the data packet, and identify the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information; The data packet queue construction module 203 is used to determine the priority data packet queue of the data packet according to the data packet priority, calculate the risk control coefficient of the data packet using the data packet risk control algorithm of the router hardware, and screen the target data packet queue in the priority data packet queue based on the risk control coefficient; The forwarding path establishing module 204 is used to mark the next hop of the data packet of the target data packet queue by using the routing table of the router hardware, define the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establish the forwarding waiting queue of the target data packet queue according to the data packet forwarding path; The data packet forwarding module 205 is used to forward the data packets corresponding to the forwarding waiting queue in sequence based on the data packet forwarding path by using the queue forwarding module of the router hardware, collect the forwarding traffic of the corresponding data packets during the sequential forwarding, calculate the forwarding anomaly coefficient of the forwarding traffic, adjust the forwarding parameters of the queue forwarding module according to the forwarding anomaly coefficient, obtain optimized forwarding parameters, and perform efficient forwarding of the data packets corresponding to the forwarding waiting queue based on the optimized forwarding parameters.

[0060] In detail, the router hardware acceleration module and its modules in the data packet processing system 200 described in the embodiment of the present invention adopt the same technical means as the router hardware acceleration module and its data packet processing method described in the accompanying drawings when used, and can produce the same technical effects, which will not be repeated here.

[0061] An embodiment of the present invention provides an electronic device for implementing a router hardware acceleration module and a method for processing data packets thereof.

[0062] See also Figure 3 As shown, the electronic device may include a processor 30, a memory 31, a communication bus 32 and a communication interface 33, and may also include a computer program stored in the memory 31 and executable on the processor 30, such as a router hardware acceleration module and a data packet processing method program thereof.

[0063] In some embodiments, the processor may be composed of an integrated circuit, for example, a single packaged integrated circuit, or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and combinations of various control chips, etc. The processor is the control core (Control Unit) of the electronic device, and uses various interfaces and lines to connect various components of the entire electronic device, and executes various functions of the electronic device and processes data by running or executing programs or modules stored in the memory (for example, executing a router hardware acceleration module and its data packet processing program, etc.), and calling data stored in the memory.

[0064] The memory includes at least one type of readable storage medium, and the readable storage medium includes flash memory, mobile hard disk, multimedia card, card-type memory (for example: SD or DX memory, etc.), magnetic memory, disk, optical disk, etc. In some embodiments, the memory may be an internal storage unit of an electronic device, such as a mobile hard disk of the electronic device. In other embodiments, the memory may also be an external storage device of an electronic device, such as a plug-in mobile hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device. Further, the memory may also include both an internal storage unit of the electronic device and an external storage device. The memory can be used not only to store application software and various types of data installed in the electronic device, such as a router hardware acceleration module and its code in a data packet processing program, but also to temporarily store data that has been output or is to be output.

[0065] The communication bus may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The bus is configured to realize connection and communication between the memory and at least one processor, etc.

[0066] The communication interface is used for communication between the above-mentioned electronic device and other devices, including a network interface and a user interface. Optionally, the network interface may include a wired interface and / or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which is generally used to establish a communication connection between the electronic device and other electronic devices. The user interface may be a display (Display), an input unit (such as a keyboard (Keyboard)), and optionally, the user interface may also be a standard wired interface, a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, and an OLED (Organic Light-Emitting Diode, organic light-emitting diode) touch device, etc. Among them, the display may also be appropriately referred to as a display screen or a display unit, which is used to display information processed in the electronic device and to display a visual user interface.

[0067] For example, although not shown, the electronic device may also include a power source (such as a battery) for supplying power to various components. Preferably, the power source may be logically connected to the at least one processor through a power management system, so that the power management system can realize functions such as charging management, discharging management, and power consumption management. The power source may also include any components such as one or more DC or AC power sources, recharging systems, power failure detection circuits, power converters or inverters, and power status indicators. The electronic device may also include a variety of sensors, Bluetooth modules, Wi-Fi modules, etc., which will not be repeated here.

[0068] It should be understood that the embodiment is for illustration only and the scope of the patent application is not limited to this structure.

[0069] The router hardware acceleration module stored in the memory of the electronic device and its data packet processing program are a combination of multiple instructions, which can achieve the following when running in the processor: Receive a data packet from the network using the physical layer interface of the router hardware, mark the header of the data packet using the physical layer analysis interface of the router hardware, determine the network layer and transport layer protocol of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type; Constructing a priority model for the data packet, and identifying the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information; Determine a priority data packet queue of the data packet according to the data packet priority, calculate a risk control coefficient of the data packet using a data packet risk control algorithm of the router hardware, and screen a target data packet queue in the priority data packet queue based on the risk control coefficient; Using the routing table of the router hardware, marking the next hop of the data packet of the target data packet queue, defining the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establishing the forwarding waiting queue of the target data packet queue according to the data packet forwarding path; Based on the data packet forwarding path, the queue forwarding module of the router hardware is used to sequentially forward the data packets corresponding to the forwarding waiting queue, and the forwarding traffic of the corresponding data packets during the sequential forwarding is collected, and the forwarding anomaly coefficient of the forwarding traffic is calculated. According to the forwarding anomaly coefficient, the forwarding parameters of the queue forwarding module are adjusted to obtain optimized forwarding parameters. Based on the optimized forwarding parameters, efficient forwarding of the data packets corresponding to the forwarding waiting queue is performed.

[0070] Specifically, the specific implementation method of the processor for the above instructions can refer to the description of the relevant steps in the corresponding embodiment of the accompanying drawings, which will not be repeated here.

[0071] Furthermore, if the module / unit integrated in the electronic device is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. The computer-readable storage medium can be volatile or non-volatile. For example, the computer-readable medium can include: any entity or system that can carry the computer program code, a recording medium, a USB flash drive, a mobile hard disk, a magnetic disk, an optical disk, a computer memory, and a read-only memory (ROM).

[0072] The present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor of an electronic device, the computer program can implement: Receive a data packet from the network using the physical layer interface of the router hardware, mark the header of the data packet using the physical layer analysis interface of the router hardware, determine the network layer and transport layer protocol of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type; Constructing a priority model for the data packet, and identifying the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information; Determine a priority data packet queue of the data packet according to the data packet priority, calculate a risk control coefficient of the data packet using a data packet risk control algorithm of the router hardware, and screen a target data packet queue in the priority data packet queue based on the risk control coefficient; Using the routing table of the router hardware, marking the next hop of the data packet of the target data packet queue, defining the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establishing the forwarding waiting queue of the target data packet queue according to the data packet forwarding path; Based on the data packet forwarding path, the queue forwarding module of the router hardware is used to sequentially forward the data packets corresponding to the forwarding waiting queue, and the forwarding traffic of the corresponding data packets during the sequential forwarding is collected, and the forwarding anomaly coefficient of the forwarding traffic is calculated. According to the forwarding anomaly coefficient, the forwarding parameters of the queue forwarding module are adjusted to obtain optimized forwarding parameters. Based on the optimized forwarding parameters, efficient forwarding of the data packets corresponding to the forwarding waiting queue is performed.

[0073] In the several embodiments provided by the present invention, it should be understood that the disclosed devices, systems and methods can be implemented in other ways. For example, the system embodiments described above are only schematic, for example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation.

[0074] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0075] In addition, each functional module in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional modules.

[0076] It is obvious to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and that the present invention can be implemented in other specific forms without departing from the spirit or essential characteristics of the present invention.

[0077] Therefore, no matter from which point of view, the embodiments should be regarded as illustrative and non-restrictive, and the scope of the present invention is limited by the appended claims rather than the above description, so it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims are included in the present invention. Any attached figure mark in the claims should not be regarded as limiting the claims involved.

[0078] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Artificial Intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0079] In addition, it is clear that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or systems stated in a system claim can also be implemented by one unit or system through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any particular order.

Claims

1. A router hardware acceleration module and a method for processing data packets therein, characterized in that: The method comprises: Receive a data packet from the network using the physical layer interface of the router hardware, mark the header of the data packet using the physical layer analysis interface of the router hardware, determine the network layer and transport layer protocol of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type; Constructing a priority model for the data packet, and identifying the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information; Determine a priority data packet queue of the data packet according to the data packet priority, calculate a risk control coefficient of the data packet using a data packet risk control algorithm of the router hardware, and screen a target data packet queue in the priority data packet queue based on the risk control coefficient; Using the routing table of the router hardware, marking the next hop of the data packet of the target data packet queue, defining the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establishing the forwarding waiting queue of the target data packet queue according to the data packet forwarding path; Based on the data packet forwarding path, the queue forwarding module of the router hardware is used to sequentially forward the data packets corresponding to the forwarding waiting queue, and the forwarding traffic of the corresponding data packets during the sequential forwarding is collected, and the forwarding anomaly coefficient of the forwarding traffic is calculated. According to the forwarding anomaly coefficient, the forwarding parameters of the queue forwarding module are adjusted to obtain optimized forwarding parameters. Based on the optimized forwarding parameters, efficient forwarding of the data packets corresponding to the forwarding waiting queue is performed.

2. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 1, characterized in that: The method of receiving a network data packet by using a physical layer interface of router hardware includes: Identifying a network medium of the network, and analyzing a connection stability coefficient between the network medium and the physical layer interface; When the connection stability coefficient meets a preset stability threshold, capturing a frame signal of the network medium using the physical layer interface; Converting the frame signal into a digital frame signal; and performing frame synchronization on the digital frame signal to obtain a synchronous frame signal, wherein the frame synchronization includes clock synchronization and frame synchronization; The CRC value of the synchronization frame signal is calculated, and according to the CRC value, the frame header and the frame tail of the synchronization frame signal are removed to obtain the data packet of the network.

3. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 2, characterized in that: The calculating the CRC value of the synchronization frame signal comprises: Defining a generating polynomial of the synchronization frame signal; Mark the number of times the generator polynomial is generated; Based on the generator polynomial and the number of times of generation, the CRC value of the synchronization frame signal is calculated using the following formula: in, Indicates the CRC value of the synchronization frame signal, Indicates the synchronization frame signal, Indicates the number of zeros added after the synchronization frame signal. represents the generating polynomial, Indicates the number of times it is generated. Represents the modulo operation.

4. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 3, characterized in that: The constructing the priority model of the data packet comprises: Defining key applications of the network corresponding to the data packet; Based on the key application, defining a data packet type of the data packet; analyzing performance requirements of the packet type; Marking the priority impact weight of the performance requirement; Defining a priority algorithm for the data packet type by using the performance requirement and the priority impact weight; Based on the priority algorithm of the data packet type, a priority model of the data packet is constructed.

5. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 4, characterized in that: The priority algorithm for defining the data packet type according to the performance requirement and the priority impact weight includes: Determine a linear rule for the requirement score of the performance requirement; According to the demand score linear rule, a linear function of the data packet type is defined; wherein the linear function: Based on the linear function, the performance requirement and the priority impact weight, the priority algorithm of the data packet type is constructed using the following formula, wherein the priority algorithm is: in, The packet priority indicating the packet type, represents the number of performance requirements, Indicates Packet type for The priority of each performance requirement affects the weight. represents a linear function, Indicates The actual index value of the performance requirement, Indicates Packet type for The target value of a performance requirement.

6. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 5, characterized in that: The calculating the risk control coefficient of the data packet by using the data packet risk control algorithm of the router hardware includes: Configuring risk control algorithm parameters of the data packet risk control algorithm; defining a risk indicator for the data packet; Extracting risk features related to the risk indicators based on the network layer, transport layer protocol and key information corresponding to the data packet; Using the trained feature anomaly recognition model to identify feature anomalies of the risk feature; According to the characteristic anomaly and the risk control algorithm parameters, the risk control coefficient of the data packet is calculated using the data packet risk control algorithm.

7. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 6, characterized in that: The step of defining a data packet forwarding path of the target data packet queue based on the next hop of the data packet includes: Marking the forwarding path starting point and the forwarding path end point of the data packet corresponding to the target data packet queue; Identifying a neighbor coefficient of a next hop of the data packet; Constructing a set of adjacent routers corresponding to the data packet of the target data packet queue through the adjacent coefficient, the starting point of the forwarding path and the end point of the forwarding path; Recording forwarding path information of routers corresponding to the adjacent router set; The data packet forwarding path of the target data packet queue is constructed using the forwarding path information.

8. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 7, characterized in that: The calculating the forwarding anomaly coefficient of the forwarding traffic includes: Establishing a baseline model of the forwarding traffic; According to the baseline model, defining normal traffic characteristics and dynamic abnormal thresholds of the forwarding traffic; Based on the normal traffic characteristics, identifying an abnormal pattern of the forwarded traffic; Calculating an abnormality index of the abnormal pattern; A forwarding anomaly coefficient of the forwarded traffic is calculated according to the anomaly indicator and the dynamic anomaly threshold.

9. The router hardware acceleration module and the data packet processing method thereof as claimed in claim 8, characterized in that: The establishing of the baseline model of the forwarding traffic includes: Collecting historical forwarding data of the forwarded traffic; Preprocessing the historical forwarding data to obtain preprocessed forwarding data; Analyzing the time trend item and the lagged difference item of the preprocessed forwarding data; Based on the time trend term and the lagged difference term, the time series function of the preprocessed forwarding data is constructed using the following formula, wherein the time series function is: in, represents the observed value of the preprocessed forwarding data in period t, represents the first-order difference of the preprocessed forwarding data in period t, represents the intercept term, represents the coefficient of the time trend term, represents the coefficient of the first-order lag term, Indicates The coefficient of the lagged difference term, represents the observed value of the preprocessed forwarding data in period t-1, represents the first-order difference of the preprocessed forwarding data in period t-1, represents the error term, represents the number of lagged difference terms; A baseline model of the forwarding traffic is established through the time series function.

10. A router hardware acceleration module and its use in a data packet processing system, characterized in that: The system is used to execute the router hardware acceleration module and the data packet processing method thereof as described in any one of claims 1 to 9, and comprises: A data packet acquisition module, used to receive a data packet from the network using the physical layer interface of the router hardware, mark the header of the data packet using the physical layer analysis interface of the router hardware, determine the network layer and transport layer protocol of the header, and extract key information of the data packet, wherein the key information includes: source IP address, destination IP address, port number and protocol type; A priority calculation module, used to construct a priority model for the data packet, and identify the data packet priority of the data packet using the priority model based on the network layer, the transport layer protocol and the key information; A data packet queue construction module, used to determine the priority data packet queue of the data packet according to the data packet priority, calculate the risk control coefficient of the data packet using the data packet risk control algorithm of the router hardware, and screen the target data packet queue in the priority data packet queue based on the risk control coefficient; A forwarding path establishing module, used to mark the next hop of the data packet of the target data packet queue by using the routing table of the router hardware, define the data packet forwarding path of the target data packet queue based on the next hop of the data packet, and establish the forwarding waiting queue of the target data packet queue according to the data packet forwarding path; The data packet forwarding module is used to sequentially forward the data packets corresponding to the forwarding waiting queue based on the data packet forwarding path by using the queue forwarding module of the router hardware, collect the forwarding traffic of the corresponding data packets in the sequential forwarding, calculate the forwarding anomaly coefficient of the forwarding traffic, adjust the forwarding parameters of the queue forwarding module according to the forwarding anomaly coefficient, obtain the optimized forwarding parameters, and perform efficient forwarding of the data packets corresponding to the forwarding waiting queue based on the optimized forwarding parameters.

Images