基于Intel DPDK的高性能网络安全审计方案设计

High-Performance Network Security Audit Program based on Intel DPDK

目前移动互联网流量正呈现高速增长的态势,这为网络安全审计带来挑战的同时也大大滋生了网络安全隐患。为了应对网络审计系统中传统数据采集机制无法匹配现有带宽的现状,本文提出了一种基于Intel DPDK的网络审计系统设计方案。系统在Linux多核环境,基于多进程并行处理机制实现。实际应用表明,该方案具有良好的稳定性,较传统Libpcap方案在处理性能上有较大提升。

Mobile Internet traffic is showing a trend of increasing rapid growth,which not only brings challenges for network security audit,but also greatly bred network security risks.Thus,a network audit system design based on Intel DPDK is proposed in this paper in response to the mismatch between traditional packet capture mechanism and bandwidth.Multi-core and multi-process mechanism is adopted in this design. Lastly,the considerable improvement in processing performance compared with Libpcap and favorable stability of the system are presented in practical application.