Patent ID: 8316432
Filing Date: 2012-11-20
Classification: H04L

Abstract:
1. A method for implementing security-related processing on packet, comprising: receiving an initial packet of a stream, implementing security-related processing on the initial packet according to security-related configuration information, recording information of the security-related processing implemented on the initial packet, establishing a relationship between stream attribute information of the initial packet and the security-related processing information recorded which comprises a security-related processing operation; receiving a succeeding packet of the stream, acquiring the security-related processing operation according to the relationship and stream attribute information of the succeeding packet, and implementing the security-related processing operation on the succeeding packet, wherein implementing security-related processing on the initial packet according to security-related configuration information comprises (i) searching a forwarding information base (FIB) table for a FIB entry which matches the stream attribute information of the initial packet, (ii) searching the security-related configuration information for at least one security information entry matching the FIB entry, and (iii) implementing security-related processing on the initial packet according to the at least one security information entry; associating the FIB entry with the relationship; and when the FIB entry is updated, setting a flag indicating invalid in the relationship associated to the FIB entry, wherein acquiring the security-related processing information and implementing security-related processing on the succeeding packet comprise (i) judging whether the flag in the relationship indicates invalid, (ii) if the flag indicates invalid, implementing security-related processing on the succeeding packet according to the security-related configuration information, recording information of the security-related processing implemented, updating the security-related processing information in the relationship with the security-related processing information recorded, and setting the flag in the relationship to indicate valid, and (iii) if the flag indicates valid, acquiring the security-related processing information according to the relationship and stream attribute information of the succeeding packet, and implementing security-related processing on the succeeding packet based on the security-related processing information.