Session table entry processing method and device in multi-core system and related product

Abstract

The embodiment of the invention discloses a session table entry processing method and device in a multi-core system. Whether a message is safe or not is firstly determined after a forwarding core receives a first handshake message or a second handshake message when the forwarding core receives the message. When the message is an unsafe first handshake message or an unsafe second handshake message,the session timeout item of the message is added into the link table list array; and the session timeout item of the message is processed by utilizing the link table list array; therefore, the situation that when the received message is the attack message, the timer of the forwarding core is used for processing the session timeout item of the attack message is avoided, attacks are effectively defended, processing resources of the timer of the forwarding core can be saved, the forwarding core can normally process the security message, and the overall forwarding performance is improved. In addition, each forwarding core is configured with a linked list array, so that lock-free processing of the multi-core system is realized.

Description

technical field [0001] The present application relates to the field of data processing, in particular to a method, device and related products for processing session entries in a multi-core system. Background technique [0002] For security vendors, after receiving the message, the forwarding core in the firewall queries the session table and forwards the message. If there is no corresponding session table, it builds a session table according to the policy, and finally realizes message forwarding. Since too many session tables will also cause system burden, it is necessary to pay attention to the timeout mechanism of the session table, delete the timed-out session entries in time, and reduce the system load. That is to say, the forwarding core not only needs to process message forwarding, but also needs to process timed-out session entries. However, the forwarding core uses a polling mechanism to process message forwarding and timeout session entries, so that the forwarding...

AI Technical Summary

Problems solved by technology

However, the forwarding core uses a polling mechanism to process message forwarding and timeout session entries, so that the forwarding core cannot process message forwarding and timeout session entries at the same time

[0003] In practical applications, the firewall can maintain a high throughput performance when it does not encounter a distributed denial of service (Distributed Denial of Service, DDoS) attack, but when it encounters a DDos attack, it will generate a large number of timed-out If the timer of the mechanism takes too long to process the timeout session entry, it will inevitably cause the forwarding core to process the message not in time, resulting in packet loss and affecting the overall forwarding performance

Images