MIAO Li-ren, HU Hong-chao, HUO Shu-min, et al. The Design and Implementation of a Vector Packet Processing Accelerating Dynamic Protection System[J]. Acta Electronica Sinica, 2019, 47(8): 1724-1730.
MIAO Li-ren, HU Hong-chao, HUO Shu-min, et al. The Design and Implementation of a Vector Packet Processing Accelerating Dynamic Protection System[J]. Acta Electronica Sinica, 2019, 47(8): 1724-1730. DOI: 10.3969/j.issn.0372-2112.2019.08.016.
IP address dynamic protection techniques will introduce additional overhead. Therefore
the performance of normal network transmission decreases. A dynamic protection system of IP address accelerated by Vector Packet Processing (VPP) is designed and implemented for the first time
which can hide the real IP address and enhance the system's data Processing ability. Firstly
fast forwarding logic and slow forwarding logic are designed respectively for different logic of control plane and data plane processing
so as to minimize the number of copies in data message processing. Secondly
facing the frequent mapping between real IP and virtual IP
an efficient dynamic IP address transformation mechanism of Shared memory is proposed. Thirdly
the optimization algorithm is used to formulate the IP hopping strategy
and the hashing chain algorithm is used to formulate the efficient virtual IP address pre-allocation mechanism. Minimize system performance losses. Finally
the experimental results show that the system can effectively resist DoS attacks and control the potential detection attack hit rate below 16%
which is significantly improved in data processing performance.