PROCESSING METHOD FOR ACCELERATING PACKET FILTERING

• US 20100138893A1
• Filed: 12/02/2008
• Published: 06/03/2010
• Est. Priority Date: 12/02/2008
• Status: Abandoned Application

• Current Assignee: Inventec Corporation
• Original Assignee: Inventec Corporation
• Inventors: Li, Yan, Chen, Tom
• Application Number:
  US12/326,151
• Publication Number:
  US 20100138893A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A processing method for accelerating packet filtering is used for accelerating the filtering process of packet data in a computer. The processing method accelerating packet filtering includes the steps. A plurality of packet filtering policies is loaded. Feature values of each packet filtering policy are resolved. A grouping procedure is performed on the packet filtering policies according to the feature values, so as to add the packet filtering policies meeting a threshold value to corresponding policy groups. A performing sequence of the packet filtering policies in the policy groups is determined according to a performing sequence of the packet filtering policies. A performing sequence of the policy groups is determined according to a producing sequence of the policy groups. A plurality of packet data is received. When the packets don'"'"'t match the policy groups, the default policy is processed according to protocol information of the packets.

Claims

1. A processing method for accelerating packet filtering, applicable to a packet processing flow in a computer device, comprising:

loading a rule chain comprising a plurality of packet filtering policies;

receiving a plurality of packet data;

performing a grouping procedure on the packet filtering policies according to feature values of the packet filtering policies, wherein the packet filtering policies meeting a threshold value are set as at least one policy group;

filtering the packet data by using the policy groups respectively;

determining whether the packet data matches the policy groups or not;

performing a packet filtering process by using each of the packet filtering policies in the policy groups if the packet data matches the policy groups; and

processing the packet data according to a preset processing policy if the packet data does not match the packet filtering policies in the policy groups.

2. The processing method for accelerating packet filtering according to claim 1, wherein the grouping procedure further comprises:

determining a performing sequence of the packet filtering policies in the policy group according to a performing sequence of the packet filtering policies.

3. The processing method for accelerating packet filtering according to claim 1, wherein the grouping procedure further comprises:

determining a performing sequence of the policy groups according to a producing sequence of the policy groups.

4. The processing method for accelerating packet filtering according to claim 1, wherein the step of filtering the packet data by using the policy groups respectively further comprises:

adding a new policy group dynamically according to protocol information of the packets if the packets do not match any of the filtering policies.