Router Forwarding Consistency Verification via Action Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Inconsistent forwarding behaviors in router data processing can lead to network failures and security issues, necessitating a method to verify normalcy in forwarding behaviors effectively.
Innovation Solution
A verifying method and device that utilize action codes and condition codes, combined with Trie and Huffman coding, to detect abnormal behaviors by constructing a Trie tree and comparing action and condition sequences, ensuring network security without impacting router performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional forwarding behavior verification methods are used, then network security can be maintained, but abnormal behaviors cannot be detected effectively and router performance is affected
Solution Approach 1:
The patent segments the forwarding behavior verification by dividing it into action sequences and condition sequences. Each functional module's behavior is broken down into discrete action codes (forwarding, dropping, modifying packets) and corresponding condition codes (packet matching rules, routing table lookups). This segmentation allows independent verification of each module's behavior without blocking the entire forwarding pipeline, thus maintaining router performance while ensuring network security through comprehensive monitoring.
2Reliability
If comprehensive forwarding behavior monitoring is implemented, then abnormal behaviors can be detected, but the complexity of the verification system increases
Solution Approach 1:
The patent creates a virtual copy of the forwarding plane's behavior through action codes and condition codes. Instead of implementing complex monitoring hardware or software that directly interferes with the forwarding path, the system copies the essential behavioral characteristics into a verification model (Trie tree structure). This copying approach enables comprehensive abnormal behavior detection while keeping the actual verification system relatively simple and lightweight.
Solution Approach 2:
The patent introduces action codes and condition codes as intermediary elements between the forwarding plane and the verification mechanism. These codes serve as a standardized interface that translates complex router behaviors into verifiable sequences without requiring direct integration between monitoring and forwarding systems. This intermediary layer simplifies the overall system architecture by decoupling the verification complexity from the forwarding path.
3Measurement precision
If action codes and condition codes are configured for all functional modules, then forwarding consistency can be verified, but the configuration and maintenance overhead increases
Solution Approach 1:
The patent performs preliminary configuration by pre-defining action codes for all possible forwarding actions (forwarding, dropping, modifying) and pre-defining condition codes for all possible matching conditions (packet headers, routing rules). These code definitions are established beforehand and stored in a standardized format. When verifying forwarding consistency, the system only needs to match observed behaviors against these pre-defined codes rather than creating verification rules from scratch, significantly reducing configuration overhead while maintaining precise verification capability.
Data Source
AI summary
The present disclosure provides a verifying method and device for consistency of forwarding behaviors of router data based on action codes. The verifying method includes following steps of: determining related functions for a number of functional modules of a router; configuring action codes for the function modules of the router, each functional module sending configured action code to control layer after executing the related function; configuring condition codes for the functional modules of the router; combining parts or all of the functional modules according to a preset combination way; constructing a Trie tree, nodes of the Trie tree storing the action codes of the functional modules; detecting whether there is abnormal forwarding behavior in forwarding process of received data packet according to the Trie tree and the received data packet.