【摘要】 为了更好地适应网络回溯分析系统对高速网络下数据包捕获的要求，研究了基于eXpress Data Path(XDP)的高性能流量采集技术。通过使用零拷贝套接字AF＿XDP旁路内核协议栈，直接将数据包从内核空间传输到用户空间，有效减少了用户空间和内核空间频繁上下文切换带来的系统开销，提高了数据包捕获性能。在Linux平台上，基于XDP技术实现了数据包的捕获功能，并与基于Intel Data Plane Development Kit (DPDK)的流量采集方式进行实验对比。实验结果表明，XDP满足DPDK的流量采集性能要求，并且具有独立于硬件设备的优势。更多还原

【Abstract】 To keep up with the demands of precision packet capture on high-speed networks in network retrospective analysis system,a high-performance traffic acquisition technology based on eXpress Data Path(XDP) is studied. The zero-copy socket AF＿XDP is used to bypass the kernel protocol stack,directly passing network traffic from the driver in the kernel up to userspace. Effectively reduce the system overhead caused by constant context switches between user space and kernel space,and improve the performance of packet capture. The packet processing functionality is implemented based on XDP in Linux,and the performance tests are designed to compare it with packet capture mechanism based on Intel Date Plane Development Kit(DPDK). The experimental results show that XDP can reach the high-performance level of DPDK,and has the advantage of that no special hardware features are needed.更多还原