Abstract: Described are an encoding method and system for ROAs. The encoding method includes the following steps: given a set of authorized IP prefixes an AS which are maintained with an IP address trie. By specifying a sequence of hanging levels on the IP address trie, it is divided into a set of non-overlapping sub-trees, each rooted at a hanging level. A node on a hanging level uniquely defines a sub-tree rooted at it, whose prefix can be encoded as the identifier of this sub-tree. All authorized prefixes covered by a sub-tree can be encoded into a bitmap of 2h bits, where h is the height of this sub-tree. Thus, the set of authorized IP prefixes of an AS is encoded into several tuples (identifier, bitmap).

Abstract: The disclosure provides a data packet classification method and system based on a convolutional neural network including merging each rule set in a training rule set to form a plurality of merging schemes, and determining an optimal merging scheme for each rule set in the training rule set on the basis of performance evaluation; converting a prefix combination distribution of each rule set in the training rule set and a target rule set into an image, and training a convolutional neural network model by taking the image and the corresponding optimal merging scheme as features; and classifying the target rule set on the basis of image similarity, and constructing a corresponding hash table for data packet classification.

Abstract: A multi-level flow table search method includes extracting matching information of a data packet when the data packet is received and selecting a keyword from the matching information of the data packet according to flow-table match-field configuration information. The method also includes searching for a match field of each-level flow table in a multi-level flow table starting from a first-level flow table in the multi-level flow table by using the keyword as a search keyword, and matching the search keyword with the match field. If matching of a match field of a current-level flow table is completed, the method includes executing a corresponding instruction, and if the current-level flow table is not a last-level flow table or there is an instruction for executing an action, executing a corresponding action.

Abstract: A multi-level flow table search method includes extracting matching information of a data packet when the data packet is received and selecting a keyword from the matching information of the data packet according to flow-table match-field configuration information. The method also includes searching for a match field of each-level flow table in a multi-level flow table starting from a first-level flow table in the multi-level flow table by using the keyword as a search keyword, and matching the search keyword with the match field. If matching of a match field of a current-level flow table is completed, the method includes executing a corresponding instruction, and if the current-level flow table is not a last-level flow table or there is an instruction for executing an action, executing a corresponding action.