Improvement of ACL assembly algorithm

Abstract

To prevent harmful information through ISP's firewall, major technical measures are filtering technology and classification access. ACL assembly technology can effectively achieve the effect of fine filtering and restricted access, so the network equipment with the application of ACL assembly technology is a new research direction. This paper briefly introduces the basic principles and development of ACL assembly, and focuses on the matching performance of ACL assembly. An improved NP+TCAM-based ternary bitmap matching algorithm is proposed to effectively minimize the number of times of matching when assembling ACLs. The test data suggest that this algorithm effectively improves the real-timeliness of correlation matching.