System and method for implementing ACLs using multiple hash-trie-key tables
    2.
    发明申请
    System and method for implementing ACLs using multiple hash-trie-key tables 审中-公开
    使用多个哈希三键表来实现ACL的系统和方法

    公开(公告)号:US20070201458A1

    公开(公告)日:2007-08-30

    申请号:US11364634

    申请日:2006-02-28

    IPC分类号: H04L12/56

    CPC分类号: H04L47/10 H04L45/745

    摘要: A method, data processing system, and computer program product are provided for searching for access rules included in access control lists (ACLs), such as those rules used to accept or deny packets received at a router. An incoming packet that includes several fields is received. An original key is formed from some of these fields. The original key is masked using predefined masks with each predefined mask corresponding to a different hash table. The masking of the original key results in masked keys where each of the masked keys corresponds to a different hash table. One or more hash tables are searched using the masked keys. The searching results in one or more possible rules. Each of the possible rules has a priority value. The possible rule that has the highest (best) priority is selected, and the selected rule is applied to the incoming packet.

    摘要翻译: 提供了一种方法,数据处理系统和计算机程序产品,用于搜索包括在访问控制列表(ACL)中的访问规则,例如用于接受或拒绝在路由器接收的分组的那些规则。 收到包含多个字段的传入数据包。 一些原始密钥由这些字段组成。 使用预定义掩码对原始密钥进行掩码,每个预定义掩码对应于不同的哈希表。 原始密钥的掩蔽产生掩码的密钥,其中每个掩码的密钥对应于不同的哈希表。 使用屏蔽的键搜索一个或多个哈希表。 搜索导致一个或多个可能的规则。 每个可能的规则都有一个优先级值。 选择具有最高(最佳)优先级的可能规则,并将所选规则应用于传入数据包。