摘要
针对传统网络协议还原技术在高速网络环境下的性能问题,设计了一种高性能协议还原技术.利用零拷贝技术采集网络数据包,动态反馈的一致性哈希算法均衡协议还原中心负载,协议还原中心采用三维立体空间的重组算法和多级双循环无锁缓冲队列技术保证系统的高效并发处理,应用层协议还原模块以插件形式注入系统,确保平台的扩展性、移植性,自适应动态哈希内存池为系统提供了高效的数据缓存支持.实验表明,该技术在数据采集能力、协议还原吞吐量以及性能方面相比Libpcap和Libnids均得到了很大提高.
Based on the traditional protocol restoration technology is facing performance problems in the high-speed network environ- ment. We designed a high-performance network protocol restoration technology. It uses zero-copy technology to capture network pack- ets, the load balancer adopts consistent hashing load balancing algorithm with dynamic feedback that adjust loads, the center of protocol restoration ensured concurrent processing efficiently through the three-dimensional space reorganization algorithm and the stage double circular buffer queue. Meanwhile the application layer protocol restoration feature can be injected into the system in plugins, which would ensure the system's scalability and portability. In addition, the memory pool with the adaptive dynamic-management and hash algorithm that provided a efficient kind of way for data buffer in the system. Experimental results show that, compared with Libpcap and Libnids,the performance of the technology has been greatly improved.
出处
《小型微型计算机系统》
CSCD
北大核心
2016年第2期207-211,共5页
Journal of Chinese Computer Systems
基金
广东省自然科学基金项目(S2012040006729)资助
广州市科技计划项目(2014Y2-00204
2014Y2-00154)资助
关键词
网络安全
协议分析
入侵检测
报文重组
network security
protocol analysis
intrusion detection
message restoration