Abstract:L7-filter is a significant deep packet inspection (DPI) extension to Netfilter in Linux's QoS framework. It classifies network traffic based on information hidden in the packet payload. Although the computationally intensive payload classification can be accelerated with multiple processors, the default OS scheduler is oblivious to both the software characteristics and the underlying multicore architecture. In this paper, we present a parallelized L7-filter algorithm and an efficient scheduler technique for multicore servers. Our multithreaded L7-filter algorithm can process the incoming packets on multiple servers boosting the throughput tremendously. Our scheduling algorithm is based on Highest Random Weight (HRW), which maintains the connection locality for the incoming traffic, but only guarantees load balance at the connection level. We present an Adapted Highest Random Weight (AHRW) algorithm that enhances HRW by applying packet-level load balancing with an additional feedback vector corresponding to the queue length at each processor. We further introduce a Hierarchical AHRW (AHRW-tree) algorithm that considers characteristics of the multicore architecture such as cache and hardware topology by developing a hash tree architecture. The algorithm reduces the scheduling overhead to O(log N) instead of O(N) and produces a better balance between locality and load balancing. Results show that the AHRW-tree scheduler can improve the L7-filter throughput by about 50% on a Sun-Niagara- 2-based server compared to a connection locality-based scheduler. Although extensively tested for L7-filter traces, our technique is applicable to many other packet processing applications, where connection locality and load balancing are important while executing on multiple processors. With these speedups and inherent software flexibility, our design and implementation provide a cost-effective alternative to the traffic monitoring and filtering ASICs.

High Performance Http Proxy Based on Linux Kernel 2.4

Design and Implementation of High-Performance Linux Kernel Based on HTTP Proxy

Implementation of HTTP Compression Based on Khttpd

Data stream splicing for web proxy cache optimization

A New Distributed Proxy Cache System—double-layer Cluster Proxy Cache

Optimization of Network Performance Based on Linux Kernel

Design and Evaluation of a Proxy Cache for Peer-to-Peer Traffic

Scalable Kernel TCP Design and Implementation for Short-Lived Connections.

Research on Web Proxy Dased on Distributed In-Memeoy Cache Sharing

KLinux: Hybrid Real-Time Open-Source Linux Operating System

PROXY+: simple proxy augmentation for dynamic content processing

Hybrid real-time Linux operating system

Performance Comparison of HTTP/3 and HTTP/2: Proxy vs. Non-Proxy Environments

INTELLIGENT PREFETCH AND CACHE TECHNIQUES BASED ON NETWORK PERFORMANCE

TCP Proxy for Satellite Network

An efficient parallelized L7-filter design for multicore servers

Task Optimization Based on CPU Pipeline Technique in a Multicore System

P2P Network Proxy System Based on HeteroPastry

High Performance Userspace Networking for Containerized Microservices.

Research of the Multi-protocol Proxy on the Application Layer Using Virtual C/S Model

Scalability Evaluation and Optimization of Multi-Core SIP Proxy Server.