Network device and method for processing traffic using multi-network interface card

摘要

A method for processing traffic using a multi-network interface card and a network device employing the method are provided. The network device includes a first network card configured to classify and filter traffic, a second network card configured to inspect and process the traffic classified by the first network card, a processor configured to manage the first and second network cards and apply network policies to the first and second network cards, respectively, and a memory configured to store the network policies.

主权项

1. A network device comprising:
a first network card configured to classify input packets, filter and discard a first packet of classified packets, and transmit a second packet of the classified packets to a second network card; the second network card configured to perform deep packet inspection and processing of the second packet received by the first network card; a processor configured to manage the first and second network cards and apply network policies to the first and second network cards, respectively, wherein the first network card filters and discards the packets corresponding to second to fourth layers of the input packets, transmits the packets requiring inspection and not corresponding to the second to fourth layers to the second network card, and transmits other normal packets to networks, wherein the deep packet inspection comprises parsing application services from the packets, retrieving applications policies, and attempting to match the application services with corresponding application policies, and wherein the second network card transfers the packets back to the first network card after changing a payload of the packets according to a matching result of the deep packet inspection, wherein the first network card:
receives packets from the second network card,stores the packets received in an asynchronous first in a first out (FIFO) device, andtransmits the packets stored to a network; and a memory configured to store the network policies.