Firewall multi-core architecture intelligent detection method

Abstract

The invention discloses a firewall multi-core architecture intelligent detection method, and belongs to the technical field of multi-core architecture intelligent detection methods. The intelligent detection method comprises the following steps: (1) according to hardware configuration of a system, retrieving the number of support cores, the number of network card queues and a memory of the system to obtain the maximum number of start monitoring processes SNUM; (2) setting a network card monitoring queue number according to the maximum start monitoring process number SNUM obtained in the step (1), and interrupting CPU binding; (3) binding the started process with a CPU (Central Processing Unit), and starting an intelligent detection engine; and (4) optimizing the scheduling condition among the process services by utilizing a CPU isolation technology, and detecting concurrent data packets among the plurality of network cards. According to the method and the device, the scheduling condition among the process services is optimized, so that a multi-network-card concurrent data packet detection process with higher performance is finally realized.

Description

technical field [0001] The invention belongs to the technical field of multi-core architecture intelligent detection and detection methods, and in particular relates to a multi-core architecture intelligent detection method for firewalls. Background technique [0002] With more and more network applications, the demand for bandwidth is also rising, which poses a challenge to the actual software and hardware solutions for security auditing, how to realize the security of enterprise applications without sacrificing performance or paying less performance costs. Auditing is the focus of successful design. [0003] The technology of intelligent detection mainly combines the technology of application state detection firewall and the technology of application layer data flow identification to efficiently identify various applications on the network, and realize the detection of network application level through the detection of application flow data. Functional requirements such a...

AI Technical Summary

Problems solved by technology

[0012] In response to these problems, technologies such as ASIC chips, network processors, and multi-core processors have emerged one after another, and have more or less solved the above problems from different levels and angles. However, with the rapid improvement of network performance and the rapid enrichment of business functions Compared with the growth rate, these architectures have not been popularized rapidly, and there is still a large gap between excellent chip capabilities and mature application products. This distance restricts the popularity and popularization of the above-mentioned proprietary hardware architectures in the field of security gateways.

Images