Multi-tuple filtering method, system and device for IP message and storage medium
A technology of IP message and filtering method, which is applied in the field of network security, can solve the problems of low utilization rate of SRAM/TCAM, and achieve the effects of resource saving, precise distribution, and improvement of resource utilization rate
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0063] figure 1 and figure 2 Fig. 1 shows a flow chart of steps of a method for filtering tuples of IP packets according to an embodiment of the present application.
[0064] Such as figure 1 , 2 As shown, the multigroup filtering method of the IP message of the present embodiment specifically includes the following steps:
[0065] S101: According to the source IP address of the packet flow, obtain the first diversion action and the source IP number mapped to the source IP address through the first filtering rule; obtain the second diversion action through the second filtering rule according to the destination IP address of the packet flow and the destination IP number mapped to the destination IP address.
[0066] S102: According to the source IP number and the destination IP number of the packet flow, obtain the third distribution action and the first combination number mapped to the combination of the source IP number and the destination IP number through the third fil...
other Embodiment approach
[0072] In other implementation manners, S1033 further includes: obtaining a seventh distribution action through a seventh filtering rule according to the second combination number and the source and destination port numbers of the packet flow.
[0073] Specifically, when the above diversion actions are obtained according to the above steps, the diversion actions with higher priority will cover the diversion actions with lower priority. Finally, the diversion action with the highest priority is determined to be executed. The text flow is filtered and split.
[0074] In this embodiment, the priorities of the diversion actions from high to low are: the sixth / seventh diversion action, the fifth diversion action, the fourth diversion action, the third diversion action, and the first / second diversion action.
[0075] Wherein, it may be specifically set that: the priority of the first diversion action is higher than that of the second diversion action, or the priority of the second d...
Embodiment 2
[0120] This embodiment provides a multigroup filtering system for IP messages. For details not disclosed in the multigroup filtering system for IP messages in this embodiment, please refer to the multigroup filtering methods for IP messages in other embodiments. specific implementation content.
[0121] Figure 5 A schematic structural diagram of a system for filtering tuples of IP packets according to an embodiment of the present application is shown in .
[0122] Such as Figure 5 As shown, the multigroup filtering system of IP packets specifically includes:
[0123] The first filtering module 10: provided with a first filtering rule and a first diversion action; used to obtain the first diversion action and the source IP number mapped to the source IP address through the first filtering rule according to the source IP address of the packet flow; The destination IP address of the message flow is obtained through the second filtering rule to obtain the second diversion act...
PUM
Abstract
Description
Claims
Application Information
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com