CPC H04L 63/0245 (2013.01) [H04L 45/586 (2013.01); H04L 47/31 (2013.01); H04L 63/166 (2013.01); H04L 63/20 (2013.01); H04L 69/22 (2013.01)] | 20 Claims |
1. A data transfer method implemented by a virtual switch, wherein the data transfer method comprises:
receiving a first data packet;
determining, based on characteristic information, whether the first data packet is an Internet Protocol (IP) data packet or a non-IP data packet, wherein the virtual switch determines that the first data packet is the IP data packet when the first data packet has the characteristic information, and wherein the first data packet is the non-IP data packet when the first data packet does not have the characteristic information;
forwarding, in response to determining that the first data packet is the non-IP data packet, the first data packet to a security verification system;
extracting, in response to determining that the first data packet is the IP data packet, the characteristic information of the first data packet;
determining, based on the characteristic information, whether an expedited forwarding rule is configured for a data stream to which the first data packet belongs, wherein the expedited forwarding rule indicates that a second data packet in the data stream has previously been verified by the security verification system with a secure verification result; and
bypassing the security verification system to send the first data packet to a receive end when the expedited forwarding rule is configured for the data stream.
|