A high-speed network strategy matching method based on fpga

Abstract

The invention provides an FPGA (Field Programmable Gate Array) based high-speed network strategy matching method. The method realizes utilization of relatively small storage space, and simultaneously is suitable for fast strategy matching processing in hardware, and further enables the performance of strategy matching processing to be irrelevant with the data volume of strategies. The FPGA based high-speed network strategy matching method employs a quintuple, supports accurate matching of the quintuple and IP-port range matching , and is stronger in functions and more diversified in matching conditions and matching modes than the traditional pure hardware manner; the strategy tree of the FPGA based high-speed network strategy matching method is a specific tree structure with a node length fixed at 512 bytes and the height of the tree layer fixed at 13, and aims at FPGA strategy matching; the logic processing of direct address positioning is simple and efficient, so that consumption of lots of time on the logical operation is avoided and the matching efficiency is greatly improved.

Description

technical field [0001] The invention relates to a network matching method, in particular to an FPGA-based high-speed network strategy matching method. Background technique [0002] With the continuous development of the network, the expansion is wider and faster, and the speed is faster and faster; as the tariff becomes cheaper and cheaper, the number of users continues to grow, and the usage of users is also increasing year by year, and the usage of users is getting bigger and bigger . The original firewall or encryption machine is facing more and more pressure on IP network data packets, and the requirements for the processing efficiency of the firewall or encryption machine are getting higher and higher. Most of the current firewalls or encryption machines adopt several methods of policy matching, and data processing at the gigabit level has more or less performance or functional defects. [0003] Software method: business IP data is intercepted by the software side thr...

AI Technical Summary

Problems solved by technology

[0004] Existing hardware method: The existing product strategy is matched with pure hardware implementation. Either the strategy function implemented by it is extremely simple and cannot support complex configuration conditions of multiple groups, or the hardware space is occupied for the pursuit of speed, and the cost is greatly increased. Moreover, in addition to addressing operations in the hardware, there are a large number of logical operations that cause too much complexity, and the efficiency is lower than that of the present invention

Images