FPGA-BASED MASK MATCHING METHOD AND SYSTEM

원문 (중국어)

A FPGA-based mask matching method is disclosed. A mask and a configuration keyword are split into sets of sub-masks and sets of sub-configuration keywords. Mask operation is performed to obtain sets of masked sub-configuration keywords. Operation is performed on masked sub-configuration keyword to obtain a first Hash value and this is used as a storage address, to obtain a storage table in which sets of masked sub-configuration keywords are stored. A keyword in a packet is split into sets of sub-keywords, mask operation is performed on the sub-keyword and a sub-mask to obtain a masked sub-keyword. Hash operation is performed on sets of masked sub-keywords to obtain a plurality of second Hash values. The storage table is queried by the storage address corresponding to the second Hash value. If the corresponding masked sub-configuration keyword is consistent with the masked sub-keyword, it is determined that the packet hits a rule.