高速网络环境下协议还原技术研究  

Research on a Protocol Restoration Technology Based on the High Speed Network Environment

作　　者：许青林[1] 覃国民 姜文超[1] 王志 

机构地区：[1]广东工业大学计算机学院,广州510006 [2]广东怡创科技股份有限公司,广州510006

出　　处：《小型微型计算机系统》2016年第2期207-211,共5页Journal of Chinese Computer Systems

基　　金：广东省自然科学基金项目(S2012040006729)资助;广州市科技计划项目(2014Y2-00204;2014Y2-00154)资助

摘　　要：针对传统网络协议还原技术在高速网络环境下的性能问题,设计了一种高性能协议还原技术.利用零拷贝技术采集网络数据包,动态反馈的一致性哈希算法均衡协议还原中心负载,协议还原中心采用三维立体空间的重组算法和多级双循环无锁缓冲队列技术保证系统的高效并发处理,应用层协议还原模块以插件形式注入系统,确保平台的扩展性、移植性,自适应动态哈希内存池为系统提供了高效的数据缓存支持.实验表明,该技术在数据采集能力、协议还原吞吐量以及性能方面相比Libpcap和Libnids均得到了很大提高.Based on the traditional protocol restoration technology is facing performance problems in the high-speed network environ- ment. We designed a high-performance network protocol restoration technology. It uses zero-copy technology to capture network pack- ets, the load balancer adopts consistent hashing load balancing algorithm with dynamic feedback that adjust loads, the center of protocol restoration ensured concurrent processing efficiently through the three-dimensional space reorganization algorithm and the stage double circular buffer queue. Meanwhile the application layer protocol restoration feature can be injected into the system in plugins, which would ensure the system＇s scalability and portability. In addition, the memory pool with the adaptive dynamic-management and hash algorithm that provided a efficient kind of way for data buffer in the system. Experimental results show that, compared with Libpcap and Libnids,the performance of the technology has been greatly improved.

关 键 词：网络安全 协议分析 入侵检测 报文重组 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]