Abstract:ABSTRACTThe emergence of new network applications like network intrusion detection system, packet-level accounting, and load-balancing requires packet classification to report all matched rules, instead of only the best matched rule. Although several schemes have been proposed recently to address the multi-match packet classification problem, most of them require either huge memory or expensive Ternary Content Addressable Memory (TCAM) to store the intermediate data structure, or suffer from steep performance degradation under certain types of classifiers. In this paper, we decompose the operation of multi-match packet classification from the complicated multi-dimensional search to several single-dimensional searches, and present an asynchronous pipeline architecture based on a signature tree structure to combine the intermediate results returned from single-dimensional searches. By spreading edges of the signature tree in multiple hash tables at different stages of the pipeline, the pipeline can achieve a high throughput via the inter-stage parallel access to hash tables. To exploit further intra-stage parallelism, two edge-grouping algorithms are designed to evenly divide the edges associated with each stage into multiple work-conserving hash tables with minimum overhead. Extensive simulation using realistic classifiers and traffic traces shows that the proposed pipeline architecture outperforms HyperCut and B2PC schemes in classification speed by at least one order of magnitude, while with a similar storage requirement. Particularly, with different types of classifiers of 4K rules, the proposed pipeline architecture is able to achieve a throughput between 19.5 Gbps and 91 Gbps.

A High-Speed Network Content Filtering System.

Multi-Gigabit Rate Pattern-Matching Engine Using Grouping CAM/TCAM

Implementation of Network Processor-Based Content Filtering

Mixed Timescale Online PHY Caching and Content Delivery for Content-Centric Wireless Networks.

High-performance multi-pattern matching structure in hardware network firewall

A Multi-Path Forwarding Strategy for Content-Centric Networking

Fast Multi-Pattern Matching Algorithm on Compressed Network Traffic

High-Speed Packet Classification with Efficient Parallel Range Match for IP Network Applications

Feacan: Front-End Acceleration For Content-Aware Network Processing

An automaton for fast multi-streams content inspection

Source address filtering in large scale network: a cooperative software mechanism design

Dual Cuckoo Filter with a Low False Positive Rate for Deep Packet Inspection

Fast Dynamic Pattern Matching for Deep Packet Inspection

An ultra high throughput and memory efficient pipeline architecture for multi-match packet classification without TCAMs.

Joint Pushing and Caching Based on Physical Layer Multicasting and Network Coding.

A Unified Framework for Caching in Arbitrary Networks

Fast Parallelized TCP/IP Stack for High-Speed Network Intrusion Detection Systems

Source Address Filtering For Large Scale Network: A Cooperative Software Mechanism Design

Real-time Pre-Processing System with Hardware Accelerator for Mobile Core Networks

Multisource Dissemination In Content-Centric Networking

FCSS: Fog-Computing-based Content-Aware Filtering for Security Services in Information-Centric Social Networks