Integrated message flow searching and updating method

Abstract

The invention belongs to the field of high-speed network message flow information management and relates to an integrated message flow searching and updating method. The method comprises the steps of (1) carrying out FPGA (field programmable gate array) analysis and extracting quintuple information and payload data of a message; (2) according to the quintuple information, calculating DDR (double data rate) address and reading message flow node information stored in the address; (3) comparing the message flow node information with the quintuple information, if being consistent, generating the hit message flow node information, or else, further carrying out deep message detection matching on the payload data, and if matching, generating newly established message flow node information; (4) by FPGA, updating data to CPU (central processing unit) through PCI-E; (5) analyzing the received data by CPU to obtain the message flow node information, and generating updated message flow node information after CPU finishes message flow node information management stored in memory, and packaging the updated message flow node information into TLP (thread-level parallelism) data format to be issued to FPGA; and (6) analyzing the received updated message flow information by FPGA and writing the updated message flow information into DDR. According to the invention, the integrated message flow searching and updating method adopts an integrated implementation manner, is simple in process is simple and is high in access speed.

Description

technical field [0001] The invention belongs to the field of high-speed network message flow management, and in particular relates to an integrated message flow search and update method. Background technique [0002] The packet flow search and update function plays a fundamental role in various network aggregation and distribution devices, especially for devices with Deep Packet Inspection (DPI) function, which directly determines the performance of its detection and matching. Packet flow refers to continuous packets passing through network nodes within a certain period of time. These packets need to contain the same flow information such as source IP, destination IP, source PORT (port number), destination PORT (port number) and protocol number. . There are upstream and downstream packet flows. The packet flow sent by the initiator is called downstream flow, and the packet flow sent by the receiver is called upstream flow. Packet flow search and update are mainly based on ...

AI Technical Summary

Problems solved by technology

[0005] The deficiencies in the existing packet flow search and update methods: 1. Using parallel mechanisms such as multi-core, multi-thread and multi-channel to achieve, requires a large memory

In addition, the channel interface cannot meet the needs of high-speed networks.

2. FPGA (Field-Programmable Gate Array, Field Programmable Gate Array) finds and updates large-scale message streams, which is very complicated and difficult to implement

Images