Research And Implementation Of High Speed Network Packet Capture Technology And Distribution Security Gateway

With the wide application of computer communication technology in distribution automation system,the problem of information security has become increasingly prominent.How to ensure the security of data interaction between distribution terminal and distribution master station has become an urgent problem to be solved in the process of construction of distribution automation.Distribution security gateway can carry out bidirectional identity authentication with distribution terminals,effectively prevent illegal distribution terminals from accessing or stealing terminal information as distribution master station,so as to provide effective guarantee for the border security of distribution network.High-speed network data packet capture technology is the basis of data analysis and processing of distribution security gateway.With the increase of network transmission rate and the number of distribution terminals,there is a higher demand for the performance of this technology.Therefore,this paper first analyses the performance bottlenecks of data capture in traditional Linux system,and summarizes the optimization measures of these problems,which lays a solid theoretical foundation for high-speed network data processing.Then,the overall structure of distribution security gateway is designed,and the functions of each module are divided,on the basis of researching distribution security protection scheme and distribution business characteristics,.Finally,a high-speed parallel network packet processing framework is designed and implemented by high concurrent lock-free queue and PF RING.The design ideas and implementation details of key modules such as session management,bidirectional identity authentication and network data processing are fully elaborated.Experiments show that the packet loss rate of the network packet processing framework designed in this paper is low in the test of different network transmission rates and different packet lengths,which meets the requirements of data processing in high-speed network environment.And the distribution security gateway based on this framework meets the functional and performance requirements in practical application,and can provide efficient and reliable security guarantee for distribution business.