The application relates to the technical field of network traffic
processing, and discloses a cross-message HTTP
domain name matching method and
system on a network distribution device. The method comprises the following steps: receiving and analyzing a TCP segment message, obtaining
payload data and quintuple information, and then performing first
domain name retrieval through preset head and
tail anchor points. If the head and
tail anchor points are simultaneously identified in a single message, the
domain name information is directly extracted to complete matching. If only one of the anchor points is identified, the message is marked as a to-be-recombined message and is sent to a TCP segment recombination step. During recombination, the recombination table item of the FPGA integrated HBM is accessed based on the quintuple hash value, the
payload data is written into the corresponding position, the recombined
payload data is output when a preset output condition is met, and finally, second domain name retrieval is performed on the recombined data. After the head and
tail anchor points are identified, the domain name is extracted to complete matching. The method realizes accurate matching of cross-message domain names under a 400G large bandwidth, takes into account single-message line-speed
processing performance, solves the problem of cross-message domain name missing matching, and is suitable for network environments in which multiple websites share an IP.