流式应用层协议载荷封装交付算法优化  

Optimal Streaming Application Payload Encapsulation and Delivery Algorithm

作　　者：张润滋[1,2] 王劲林 陈晓[1] 叶晓舟[1] ZHANG Run-zi;WANG Jin-lin;CHEN Xiao;YE Xiao-zhou(National Network New Media Engineering Research Center, Institute of Acoustics, Chinese Academy of Sciences, Beijing 100190, China;University of Chinese Academy of Sciences, Beijing 100190, China)

机构地区：[1]中国科学院声学研究所国家网络新媒体工程技术研究中心,北京100190 [2]中国科学院大学,北京100190

出　　处：《小型微型计算机系统》2019年第1期89-92,共4页Journal of Chinese Computer Systems

基　　金：中国科学院声学研究所率先行动计划项目(SXJH201609)资助

摘　　要：在网络安全、网络管理环节,提取流量应用层数据载荷生成数字证据或管理策略有着重要的意义.不同于传统的网络转发处理设备,随着协议处理由低层到高层,所需要的计算资源、内存资源都逐步提升,因此面向应用的网络设备对性能有着更高的要求.本文针对在网络流量的协议解析后,载荷的封装交付任务,提出一种优化的流式协议载荷字段封装交付算法.该算法以实时任务处理为目标,减少应用层载荷在封装过程中的缓存占用,同时优化了字段日志交付的传输效率.在多核网络处理器上的实验表明,该算法能够有效提升系统的性能.Deep packet inspection into application layer contents plays an important role in getting digital evidence of intrusion and information for management strategies. Different from traditional network forwarding equipments,high-level processing calls for more computing and memory resources to cope with application level tasks. In this paper,we present the Streaming Field Encapsulation and Delivery Algorithm( SFED),aiming at realizing protocol fields encapsulation and delivery in real-time. SFED successfully gets rid of buffering ’ elephant’ fields,and delivering ’ mice’ fields aggregately. Experiments showthat the proposed algorithm achieves high throughput and CPS( Connections per Second) performance in the network auditor system on a multi-core system.

关 键 词：载荷封装交付 内存拷贝优化 流式应用 多核网络处理器 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]