基于网络处理器的ICMP快速处理方法  

Fast ICMP processing method based on network processor

作　　者：刘震宇[1,2] 赖粤[2] 王晓红[2] 

机构地区：[1]华南理工大学计算机科学与工程学院,广东广州510640 [2]华南理工大学电子与信息学院,广东广州510640

出　　处：《计算机工程与设计》2010年第7期1424-1428,共5页Computer Engineering and Design

基　　金：教育部科技创新工程重大项目培育基金项目(707047)

摘　　要：针对网络处理器IXP 2XXX对所有数据包均根据TCP/IP协议层的标识逐层进行分析,从而导致ICMP(网际控制报文协议)处理速度慢,抵御ICMP洪水攻击效率低的问题。提出了在网络处理器的微引擎处理中嵌入ICMP处理模块,建立了ICMP模块的处理流程,并通过设置ICMP异常标识进行跳转处理,减少冗余检查的步骤,实现了对异常ICMP的及时处理。仿真实验结果表明,该方法对ICMP数据包的指令周期明显少于原IXP2XXX开发包中的方法,提高了处理ICMP包的性能。To solve the problems of slow processing speed of ICMP packets and inefficiency processing of ICMP flood attack in the net-work processor IXP2XXX which analysis all packets layer by layer based on TCP/IP protocol.ICMP process module is proposed to embed in the procedure of micro engines,the processing steps and the symbols of abnormal ICMP are brought forward to reduce redundant checks steps to achieve the timely processing of abnormal ICMP packets.Simulation experiments in Workbench show that the cycles of this method are less than the method in development kit of IXP2XXX,the processing performance of the ICMP is obviously improved.

关 键 词：网络处理器 ICMP 洪水攻击 微引擎 IXA 

分 类 号：TN918.9[电子电信—通信与信息系统]