Network traffic equalization segmentation system and segmentation method

Abstract

The invention provides a balanced splitting system and method for network traffics. The system and the method are mainly used for solving the problem in the prior art that the increasing demand on network bandwidth is hard to meet due to the fact that the load of an initial traffic splitting node is too large and the overall performance is low. The system comprises a splitting unit, a balanced splitting unit and a receiving unit, wherein the splitting unit is used for receiving an original network traffic and carrying out source / destination-address-field-based coarse splitting on the network traffic; the balanced splitting unit is used for receiving coarse-split network traffics and carrying out session-based balanced splitting on the coarse-split network traffics; and the receiving unit is used for receiving finally-split traffics and carrying out further analytical processing on the finally-split traffics according to actual demands. According to the system and the method, the load of the initial traffic splitting node is reduced, the overall performance of the system is improved, and the efficiency of the distributed analysis and processing of the network traffics is favorably increased, so that the system and the method can be applied to the identification and intrusion detection of the network traffics.

Description

technical field [0001] The invention belongs to the field of network technology, relates to the segmentation of network flow, and can be used for network flow identification and intrusion detection. Background technique [0002] With the rapid development of Internet technology and the continuous improvement of business volume, the bandwidth of backbone links continues to increase, and the performance of analysis equipment such as intrusion detection systems and content audit systems cannot meet the requirements of link bandwidth. When the link speed reaches the 1Gbps level, it is difficult for the existing analysis equipment to process such a large flow of packet information alone. [0003] The development of analytical equipment with higher performance requires a longer research and development cycle, and its performance growth still cannot meet the increasing demand for network bandwidth, resulting in a short life cycle of new equipment and low social benefits. On the ba...

AI Technical Summary

Problems solved by technology

Although this method can reduce the load on a single receiving node, the load on the initial traffic splitting node is still very large. When the link speed is too high, it will be difficult for the initial traffic splitting node to quickly process such a large flow of message information, resulting in the entire poor system performance

Images