A defense method for attacking messages, a multi-core forwarding system and related products

Abstract

The embodiment of the present application discloses an attack message defense method, a multi-core forwarding system and related products, wherein, after receiving the first message, the forwarding core judges whether the received first message is an attack message. If it is determined that the received first packet is an attack packet, update the attack information corresponding to the destination address of the first packet in the global array hash table. The forwarding core determines the destination address corresponding to the attack information satisfying the first preset condition in the global array hash table as the target destination address, and sends a notification message including the target destination address to the dedicated core, so that the dedicated core receives the notification message Afterwards, a filter condition for the target destination address is written in the network card, so that the network card sends the second message with the target destination address to the dedicated core. In this way, the dedicated core receives, analyzes and processes massive attack messages, avoiding the degradation of normal message forwarding performance caused by the analysis and processing of massive attack messages by the forwarding core, and improving the overall forwarding performance of the multi-core forwarding system.

Description

technical field [0001] This application relates to the field of network security, in particular to a defense method for attack messages, a multi-core forwarding system and related products. Background technique [0002] The robustness of the firewall forwarding system has become the top priority of every security vendor in product development, because once the firewall encounters a network attack, it will largely affect the forwarding function of the firewall, resulting in the failure of normal traffic to be forwarded. Therefore, for network attacks The defense function of a firewall is one of the important functions of a firewall. [0003] In the existing technology, the firewall forwarding system is generally a multi-core forwarding system. Each forwarding core needs to defend against attack packets. When a large number of attack packets arrive, the forwarding core may affect the overall forwarding performance when processing attack packets. . Contents of the invention ...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiment of the present application provides a defense method for attack messages, a multi-core forwarding system and related products, so as to solve the technical problem in the prior art that processing attack messages may affect forwarding performance

Images