The invention relates to the technical field of computer networks, and discloses a DPDK-based high-speed data isolation method, which comprises the following steps of: S1, directly taking over a data packet transceiving function of a network card through a DPDK driver, bypassing a kernel
protocol stack of an
operating system, and establishing a user mode
data channel; s2, based on a multi-core
CPU architecture, distributing the received data packets to independent
processing cores according to a preset rule, and binding each
processing core to an exclusive
memory pool to realize physical-
level data isolation; and S3, directly transmitting the isolated data to a target
application module through a
zero copy technology in the user mode, and verifying the
data integrity in real time through a hardware
verification module. According to the method, the network card is directly taken over through the DPDK driver, the
user state data channel is established, an
operating system kernel
protocol stack is bypassed, the
zero copy technology is combined, data does not need to be copied in the whole process from receiving,
processing to transmission, the end-to-end
delay is reduced to 50 microseconds or below, and the method is suitable for a high
throughput scene.