Abstract:The emergence of new network applications, such as the network intrusion detection system and packet-level accounting, requires packet classification to report all matched rules instead of only the best matched rule. Although several schemes have been proposed recently to address the multimatch packet classification problem, most of them require either huge memory or expensive ternary content addressable memory (TCAM) to store the intermediate data structure, or they suffer from steep performance degradation under certain types of classifiers. In this paper, we decompose the operation of multimatch packet classification from the complicated multidimensional search to several single-dimensional searches, and present an asynchronous pipeline architecture based on a signature tree structure to combine the intermediate results returned from single-dimensional searches. By spreading edges of the signature tree across multiple hash tables at different stages, the pipeline can achieve a high throughput via the interstage parallel access to hash tables. To exploit further intrastage parallelism, two edge-grouping algorithms are designed to evenly divide the edges associated with each stage into multiple work-conserving hash tables. To avoid collisions involved in hash table lookup, a hybrid perfect hash table construction scheme is proposed. Extensive simulation using realistic classifiers and traffic traces shows that the proposed pipeline architecture outperforms HyperCuts and B2PC schemes in classification speed by at least one order of magnitude, while having a similar storage requirement. Particularly, with different types of classifiers of 4K rules, the proposed pipeline architecture is able to achieve a throughput between 26.8 and 93.1 Gb/s using perfect hash tables.

A Code-Based Multi-match Packet Classification with TCAM

Multi-Gigabit Rate Pattern-Matching Engine Using Grouping CAM/TCAM

A Space- and Power-Efficient Multi-Match Packet Classification Technique Combining TCAMs and SRAMs

A hybrid TCAM + SRAM scheme for multi-match packet classification

An Energy-efficient TCAM-based Packet Classification with Decision-tree Mapping

An ultra high throughput and memory efficient pipeline architecture for multi-match packet classification without TCAMs.

Improvement of TCAM-based packet classification algorithm

TCAM-based distributed parallel packet classification algorithm with range-matching solution

DPPC-RE: TCAM-based distributed parallel packet classification with range encoding

High-Throughput and Memory-Efficient Multimatch Packet Classification Based on Distributed and Pipelined Hash Tables.

MiCuts: Combing Bit-Based Cutting and Splitting for Efficient Packet Classification

GreenTCAM: A Memory- and Energy-Efficient TCAM-based Packet Classification

An Advanced TCAM-SRAM Architecture for Ranges Towards Minimizing Packet Classifiers

Packet Classifiers in Ternary CAMs Can Be Smaller

CATCAM: Constant-time Alteration Ternary CAM with Scalable In-Memory Architecture

Finding Nonequivalent Classifiers in Boolean Space to Reduce TCAM Usage.

Tapac: A Tcam-Assisted Algorithmic Packet Classification with Bounded Worst-Case Performance

TupleRadar: Accelerating Tuple Space Search in Packet Classification by Learned Index

An Encoding Scheme for TCAM-based Packet Classification

A new way to the space reduction in TCAM

Unified nvTCAM and sTCAM architecture for improving packet matching performance.