Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

A dpdk-based alg implementation method and system

An implementation method and user-mode technology, applied in the field of Internet communication, can solve problems such as single access control function and limited throughput, and achieve the effect of avoiding limited throughput

Active Publication Date: 2022-04-08
ZHENGZHOU XINDA JIEAN INFORMATION TECH
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a DPDK-based ALG implementation method and system for solving the problem that the existing Linux kernel-based ALG has a single access control function during processing and its throughput is limited during data packet processing. Stateful protocol stack + Nginx program technology to realize the ALG function. The Nginx program serves as a reverse proxy to terminate the connection, analyze the control connection data packet, and then realize ALG rewriting, device authentication, access control and other functions, and open up multi-channel protocol services. At the same time, DPDK Using lock-free technology, large page memory reduction, cache-miss multi-core combined with network card multi-queue optimization, so combined with user mode protocol stack can meet ALG high concurrency and large throughput application scenarios

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A dpdk-based alg implementation method and system
  • A dpdk-based alg implementation method and system
  • A dpdk-based alg implementation method and system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0046] Such as figure 1 As shown, a DPDK-based ALG implementation method provided by an embodiment of the present invention includes the following steps:

[0047] Step 1: Configure a control reverse proxy in the user mode Nginx program, and proxy to the server;

[0048] Step 2: use the control reverse proxy as the static control connection listening address, and access the static control connection listening address through the client;

[0049] Step 3: the user state Nginx program disconnects from the client, and establishes a connection with the server, and the user state Nginx program is used to forward the control connection data packet between the client and the server;

[0050] Step 4: The user state Nginx program is based on the DPDK+FreeBSD+Nginx architecture, and performs protocol analysis and rewriting and related control actions on the control connection data packet;

[0051] Step 5: The server pushes the stream to the user state Nginx program dynamic media connect...

Embodiment 2

[0055] On the basis of the above-mentioned embodiment 1, the difference between the embodiment of the present invention and the above-mentioned embodiment is that step 4 is optimized, and when the client communicates with the server, the user state Nginx program is connected to the media in the data packet The receiving port is rewritten, and the reverse proxy configuration is made correspondingly, so as to ensure the normal transmission of the media stream, specifically:

[0056] When the user-mode Nginx program receives the SETUP command sent from the client to the server, it rewrites the media receiving port in the control connection packet as the dynamic media connection listening port, and at the same time, the user-mode Nginx program sends the dynamic media reverse proxy configuration;

[0057] When the user-mode Nginx program receives the SETUP Reply command sent from the server to the client, it rewrites the media sending port in the control connection packet as the loc...

Embodiment 3

[0059] In order to avoid the limitation of ALG throughput, the embodiment of the present invention also provides a DPDK-based ALG implementation method, which is different from the above-mentioned embodiments in that the DPDK+FreeBSD+Nginx architecture described in step 4 includes the user-mode Nginx program , FreeBSD user mode protocol stack, a plurality of CPU cores and a plurality of network cards, each of which includes a plurality of network card queues;

[0060] A worker process of the user state Nginx program is correspondingly bound to a CPU core, and is responsible for processing the control connection packets on the corresponding network card queues of all network cards;

[0061] The FreeBSD user state protocol stack forwards the control connection data packet taken out from the network card queue through the protocol stack routing, and transmits to the user state Nginx program.

[0062] In this example, if figure 2 As shown, the worker process labels are worker0~w...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention relates to a kind of ALG realization method and system based on DPDK, and the method includes configuring a control reverse proxy in the user mode Nginx program, proxying to the server; using the control reverse proxy as a static control connection listening address, and through The client accesses the static control connection listening address; the user state Nginx program disconnects from the client and establishes a connection with the server, and the user state Nginx program is used to forward the control connection data packet between the client and the server; the user state Nginx The program is based on the DPDK+FreeBSD+Nginx architecture, and performs protocol analysis and rewriting on the control connection data packet and related control actions; the server pushes the stream to the dynamic media connection listening address of the user-mode Nginx program, and the user-mode Nginx program uses the local media port to send streaming to the client. The present invention can realize the ALG function based on the DPDK user mode protocol stack layer, open up the business of multi-channel protocol, and satisfy the application scenario of high concurrency and large throughput of ALG.

Description

technical field [0001] The present invention relates to the technical field of Internet communication, in particular to a DPDK-based ALG implementation method and system. Background technique [0002] Ordinary NAT realizes the IP address and port translation function in the TCP or UDP message header, but it is powerless to the fields in the application layer data load. In many application layer protocols, such as multi-SIP, RTSP, FTP, etc., TCP / UDP The payload contains address or port information, which cannot be effectively translated by NAT, which may lead to service failure. The NATALG technology can convert the address in the application layer message, so as to ensure the correctness of the application layer communication. [0003] The traditional Linux kernel ALG can solve the ALG conversion of the address in the control connection data packet of SIP, RTSP, FTP and other protocols passing through the nat device, but because it is implemented based on the Linux kernel m...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L69/163H04L69/22H04L61/25H04L65/60H04L9/40
CPCH04L69/163H04L69/22H04L61/25H04L65/60H04L63/0876
Inventor 雷宇龙王兵权王博珏李昭熹王平王超
Owner ZHENGZHOU XINDA JIEAN INFORMATION TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products