一种高性能内容过滤网关的设计与实现  

Design and Implementation of a High Performance Content Filtering Gateway

作　　者：何怀文[1,2] 张绮雯[1,3] 傅瑜 

机构地区：[1]电子科技大学中山学院计算机学院,广东中山528402 [2]中山大学信息科学与技术学院,广东广州510275 [3]江门海事局,广东江门529040

出　　处：《微电子学与计算机》2014年第8期76-79,84,共5页Microelectronics & Computer

基　　金：国家自然科学基金项目(61300095);广东省自然科学基金(S2012040011123)

摘　　要：采用NetGraph内核组件,基于UNIX的V流思想,设计实现了一个高性能的内容过滤网关.网关的数据包捕获框架是由一系列NetGraph节点连接而成的有向图,数据包沿着边可以在不同的节点间进行流动,通过零拷贝技术完成在系统内核空间的报文捕获.内容检查模块采用了改进的AC多模式匹配算法,提高了数据包关键词的检查速度和系统的性能.By using NetGraph kernel components and based on Unix v-flow design concept ,a high-performance content filtering gateway was developed .Gateway packet capture frame is a directed graph which composed a series of NetGraph nodes connected together ,packet can flow between different nodes along the graph edge ,packet capture was accomplished through zero-copy technology in kernel space .Meanwhile an improved AC multi-pattern matching algorithm is used to accelerate the speed of keyword inspection and system performance in content inspection module .

关 键 词：NetGraph 内容过滤 多模式匹配 内核空间 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]