Method and equipment for preventing unknown multicast from attacking CPU (Central Processing Unit)

Abstract

The invention relates to a method and equipment for preventing unknown multicast from attacking a CPU (Central Processing Unit). The method comprises the following steps of: receiving messages by an ASIC (Application Specific Integrated Circuit) chip; transmitting known multicast messages according to transmitting list items issued by the CPU; indentifying the unknown multicast messages in the received messages; checking whether statistical stream list items corresponding to the unknown multicast messages are stored or not according to the flow rate of the unknown multicast messages; if not, establishing the statistical stream list items corresponding to the unknown multicast messages by the ASIC chip, and reporting the unknown multicast messages to the CPU; and receiving the transmitting list items corresponding to the unknown multicast messages issued by the CPU by the ASIC chip. In the invention, whether the statistical stream list items with the flow rate are stored or not is searched according to the flow rate mark of the flow rate of the unknown multicast messages, and times of reporting the messages with the same flow rate of the unknown multicast messages to the CPU are reduced so that the operating efficiency of the CPU can be improved.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and equipment for preventing unknown multicast from attacking the CPU. Background technique [0002] In the existing switch equipment, the multicast forwarding process requires that when the unknown multicast arrives at the device, it needs to copy a copy to the CPU while broadcasting, and the data plane (CPU) forwards the unknown multicast according to this copy. The plane (forwarding hardware) delivers the corresponding multicast entry, and the corresponding multicast packet can realize the corresponding unknown multicast forwarding through the forwarding hardware. For devices whose forwarding hardware is an ASIC (Application Specific Integrated Circuit, application specific integrated circuit) chip, usually the ASIC chip is configured with an ACL (Access Control List, access control list) filtering function, and the received traffic is obtained through the ACL filtering func...

AI Technical Summary

Problems solved by technology

[0003] However, in this process, because the multicast data traffic on the forwarding plane is sometimes very large, a large number of unknown multicast packets will be sent to the CPU before the multicast forwarding table entry is issued, especially for the same unknown multicast traffic. A large number of packets will be repeatedly reported to the CPU before the forwarding table items of the traffic are sent by the CPU, causing the CPU to receive a large number of invalid packets, causing the CPU to be overloaded, and often causing problems such as the CPU not being able to respond to user input commands

Images