何怀文, 张绮雯, 傅瑜. 一种高性能内容过滤网关的设计与实现[J]. 微电子学与计算机, 2014, 31(8): 76-79,84.
引用本文: 何怀文, 张绮雯, 傅瑜. 一种高性能内容过滤网关的设计与实现[J]. 微电子学与计算机, 2014, 31(8): 76-79,84.
HE Huai-wen, ZHANG Qi-wen, FU Yu. Design and Implementation of a High Performance Content Filtering Gateway[J]. Microelectronics & Computer, 2014, 31(8): 76-79,84.
Citation: HE Huai-wen, ZHANG Qi-wen, FU Yu. Design and Implementation of a High Performance Content Filtering Gateway[J]. Microelectronics & Computer, 2014, 31(8): 76-79,84.

一种高性能内容过滤网关的设计与实现

Design and Implementation of a High Performance Content Filtering Gateway

  • 摘要: 采用NetGraph内核组件,基于UNIX的V流思想,设计实现了一个高性能的内容过滤网关.网关的数据包捕获框架是由一系列NetGraph节点连接而成的有向图,数据包沿着边可以在不同的节点间进行流动,通过零拷贝技术完成在系统内核空间的报文捕获.内容检查模块采用了改进的AC多模式匹配算法,提高了数据包关键词的检查速度和系统的性能.

     

    Abstract: By using NetGraph kernel components and based on Unix v-flow design concept,a high-performance content filtering gateway was developed.Gateway packet capture frame is a directed graph which composed a series of NetGraph nodes connected together,packet can flow between different nodes along the graph edge,packet capture was accomplished through zero-copy technology in kernel space.Meanwhile an improved AC multi-pattern matching algorithm is used to accelerate the speed of keyword inspection and system performance in content inspection module.

     

/

返回文章
返回