Method for chip internal link list supporting policy routing

Abstract

The invention discloses a method for leading a connection table in a chip to support policy routing, which pertains to the field of network safety and comprises the steps of the application of programmable gate array chips based on field and the connection with a CPU (central processing unit). The method also comprises the following steps: the chip receives messages; resolution is carried out to obtain the quintuple content of input messages; the quintuple is taken out according to the resolution result and a connection table is searched; if the target is hit, information is taken out and a forwarding outlet is recorded; if the target is not hit, the CPU is submitted; a safety strategy table is searched, and a corresponding strategy routing table is used according to a safety strategy rule, the forwarding outlet is determined and the connection information is written into the connection table in the chip and then to the forwarding outlet. The messages are sent out from the specified forwarding outlet. The method reduces the demand of the system on CPU and PCI bus bandwidth, saves CPU resources and improves the performance of the whole system and the high speed processing capacity in the network environment.

Description

technical field [0001] The invention belongs to the technical field of network security and networking, and in particular relates to a method for supporting policy routing in a chip internal connection table in a network security device. Background technique [0002] With the continuous development of network technology, the network has become an indispensable tool in social life, from small soho (home office) to large enterprises with tens of thousands of people, have established their own networks. The topological structure of the network is becoming more and more complex, the traffic of the network is also increasing, and the needs of users are becoming more and more detailed and diverse. Strategic routing, such as using different routes for different users, using different routes for different time periods, and using different routes according to firewall rules. [0003] Routers can also implement simple policy routing, such as the most common policy routing based on so...

AI Technical Summary

Problems solved by technology

[0013] The technical problem to be solved by the present invention is that the implementation of policy routing in the prior art still has many deficiencies such as low performance and inability to meet the needs of complex applications. In order to overcome these deficiencies in the prior art, Just need to propose a kind of innovative scheme again, the purpose of the present invention is to provide a kind of method that the internal connection table of a chip supports strategy routing, this method can improve the system performance of the network equipment, meet the demand of comparatively complicated application, can reduce system cost

Images