Integrated hardware implementing method for multi-layer amalgamation and parallel processing network access equipment

Abstract

The invention relates to a network access device integration hardware realization method which inosculates multi-layer parallel processing and comprises four processing modules, namely a combining input module, a layer preprocessing module, a layer result inosculating module and a shunting output module. The combining input module processes to combine data packets input by a plurality of interfaces of an access device, and then single-channel inputs the packet to the layer preprocessing module; the layer preprocessing module processes unpacking operation for the input data packet according to packet structure of TCP / IP network five-layer protocol model, and each field obtained after the packet is decomposed is taken away by corresponding two-layer preprocessing channel, three-layer preprocessing channel, three to four layer processing channel and five-layer preprocessing channel according to the belonged layer; the layer result inosculating module receives processing result of layer parallel preprocessing of the four channels, and processes to inosculate for the preprocessing result of all the channels; the shunting output module processes to shunt for the input data packet according to the intention output interfaces thereof, and outputs the packet to a corresponding export. The invention provides an integration circuit realization method supporting two-layer switching, three-layer routing and multi-layer network security function.

Description

technical field [0001] The invention relates to the technical fields of network communication, network security and networking, in particular to a network access fusion method and equipment. Background technique [0002] With the high-speed development of the Internet, more and more individuals and enterprises join in it, and the subsequent network security issues are getting more and more attention. Currently, cyber threats present two main characteristics: [0003] 1) The network bandwidth is getting bigger and bigger, and the optical fiber transmission capacity is developing at the speed of Moore's Law, which doubles the transmission bandwidth every 7 months. Now the enterprise-level access bandwidth has reached the gigabit level. Rapidly increasing network bandwidth provides more space for cyber threats. [0004] 2) In recent years, there have been more and more types of network threats, covering all levels of Internet protocols. Common threats on the link layer and n...

AI Technical Summary

Problems solved by technology

[0005] Compared with the rapid development of network threats, traditional network security equipment can no longer meet the requirements

Specifically, traditional network security devices mainly have the following two shortcomings: low performance and single function

Using NP implementation requires dedicated development tools, special development library support, and a unique programming model, and performance and stability cannot be guaranteed.

In addition, the traditional equipment has a single function, and it is necessary to purchase multiple network equipment to complete the access function, including firewalls, routers and switches, etc.

Images