论文部分内容阅读
CPU保护策略(CPU Protect Policy,CPP)用于避免网络设备的CPU收到网络上不必要和具有恶意攻击目的的数据流,提高网络设备自身安全性能,还可以通过设置QoS过滤机制来保护网络设备的控制平台(ControlPlane,简称CP)在遭受攻击和高负载的情况下仍能保持数据转发和协议状态的稳定。本文阐述了目前控制平台策略的现状和发展趋势,以及目前锐捷网络产品采用的CPP技术,剖析了增加CPU保护策略的网络设备对于提高性能所起的作用。
The CPU Protect Policy (CPP) is used to prevent the network device’s CPU from receiving unnecessary and malicious data flows on the network to improve the network device’s own security. You can also protect the network devices by setting QoS filtering mechanisms (ControlPlane, CP for short) can keep data forwarding and protocol status stable under attack and heavy load. This article describes the status quo and development trend of the current control platform strategy, as well as the current CPP technology used by Ruijie Networks products, and analyzes the role of network devices that increase the CPU protection strategy to improve performance.