摘要： 通过对IP数据包转发机制研究,针对网络安全设备对数据包转发的特殊需求,提出了一种基于(IFPLUT+TCAM)的IP数据包转发机制。该机制将查找表根据输出端口分割为若干个小查找表,并允许查找引擎对每个小查找表进行并行处理,有效地将寻找“最长前缀匹配”的复杂问题简化为“第一前缀匹配”问题。

关键词: 并行转发, IFPLUT+TCAM, 第一前缀匹配

Abstract: By studying IP packet transmutation technologies, this paper proposes an efficient IP packet transmutation methodology based on IFPLUT and TCAM to meet network security requirements. This methodology partitions the lookup table into several smaller tables and allows a transmutation engine to process them in parallel. This effectively simplifies the complex problem of finding “the longest prefix match” to a simpler “first prefix match”。

中图分类号: 

• TP393.08