Attack message defense method, multi-core forwarding system and related products

Abstract

The embodiment of the invention discloses an attack message defense method, a multi-core forwarding system and related products, and the method comprises the steps: enabling a forwarding core to judgewhether a received first message is an attack message or not after the forwarding core receives the first message; and if the received first message is judged to be the attack message, updating attack information corresponding to the destination address of the first message in the global array hash table. The forwarding core determines a destination address corresponding to the attack informationmeeting a first preset condition in the global array hash table as a target destination address, and sends a notification message comprising the target destination address to the special core, so that the special core writes a filtering condition for the target destination address into the network card after receiving the notification message, and the network card sends a second message with thetarget destination address to the special core. The special core receives, analyzes and processes the massive attack messages, the normal message forwarding performance is prevented from being reduceddue to the fact that the forwarding core analyzes and processes the massive attack messages, and the overall forwarding performance of the multi-core forwarding system is improved.

Description

technical field [0001] This application relates to the field of network security, in particular to a defense method for attack messages, a multi-core forwarding system and related products. Background technique [0002] The robustness of the firewall forwarding system has become the top priority of every security vendor in product development, because once the firewall encounters a network attack, it will largely affect the forwarding function of the firewall, resulting in the failure of normal traffic to be forwarded. Therefore, for network attacks The defense function of a firewall is one of the important functions of a firewall. [0003] In the existing technology, the firewall forwarding system is generally a multi-core forwarding system. Each forwarding core needs to defend against attack packets. When a large number of attack packets arrive, the forwarding core may affect the overall forwarding performance when processing attack packets. . Contents of the invention ...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiment of the present application provides a defense method for attack messages, a multi-core forwarding system and related products, so as to solve the technical problem in the prior art that processing attack messages may affect forwarding performance

Images