Abstract:Today's Internet applications exhibit increased diversity, while the Internet routers are still oblivious to this trend. To improve the end-to-end application QoS, one solution is to embed the application information explicitly in packet headers, but it will bring global changes. Another local solution is router-assisted traffic differentiation. To achieve this, the functionalities including packet identification and flow tracking inside the router are required. While most existing studies focus on the former, fewer efforts are put on the later. Given a large flow table is involved, how to track millions of concurrent flows in a cost-effective manner on a router's line card raises a great space-time challenge. To address this, we design an on-chip/off-chip flow tracking system to accommodate millions of flows and achieve the throughput at tens of Gigabits. By exploiting temporal locality and heavy-tailedness of Layer-4 traffic, we design the Adaptive Least Frequently Evicted (ALFE) replacement policy to catch elephant flows, therefore maintain a high cache hit rate. To alleviate performance penalty due to the cache misses, we organize the flow table in a fixed-allocated manner to fully utilize modern DRAM's burst feature. We have implemented a research prototype using FPGA for performance evaluation. The experiment results show that our system can reach 80% hit rate with a small-sized cache of 16K entries, while achieving 70Mpps throughput. This enables backbone line rate processing. Further, more than 40% power saving can be achieved by our system, which is fast and accurate with only 3% FPGA resource usage.

Fast Path Session Creation on Network Processors

Fastpath-based VPN Gateway over Network Processor

Towards High-Performance Flow-Level Packet Processing on Multi-Core Network Processors

Embedded network processor based parallel intrusion detection

An Efficient TCP Flow State Management Algorithm in High-Speed Network

An Efficient Scheduling Mechanism With Flow-Based Packet Reordering In A High-Speed Network Processor

Fast Parallelized TCP/IP Stack for High-Speed Network Intrusion Detection Systems

Architecture-Aware Session Lookup Design for Inline Deep Inspection on Network Processors

Towards High-Performance Network Intrusion Prevention System on Multi-core Network Services Processor

A 10 Gbps In-Line Network Security Processor Based on Configurable Hetero-Multi-cores

Robust dynamic network traffic partitioning against malicious attacks.

Tracking Millions of Flows in High Speed Networks for Application Identification

Adaptive Packet Classification Algorithm Based on Ixp2800 Network Processor

Advancements in Traffic Processing Using Programmable Hardware Flow Offload

Efficient and Robust Dynamic Network Traffic Partitioning Based on Flow Tables

Towards Optimized Packet Classification Algorithms for Multi-Core Network Processors

On the Extreme Parallelism Inside Next-Generation Network Processors

Scalable Kernel TCP Design and Implementation for Short-Lived Connections.

Multi-dimensional Packet Classification on FPGA: 100 Gbps and Beyond

State-Compute Replication: Parallelizing High-Speed Stateful Packet Processing

A Practical Packet Reordering Mechanism with Flow Granularity for Parallelism Exploiting in Network Processors