Abstract:Ternary Content Addressable Memory (TCAM) is an essential hardware component in SDN-enabled switches, which supports fast lookup speed and flexible matching patterns. However, TCAM's limited storage capacity has long been a scalability challenge to enforce fine-grained forwarding policies in SDN. Based on the observation of traffic locality, the rule-caching mechanism employs a combination of TCAM and Random Access Memory (RAM) to maintain the forwarding rules of large and small flows, respectively. However, previous works cannot identify large flows timely and accurately, and suffer from high computational complexity when addressing rule dependencies in TCAM. Worse still, TCAM only caches the forwarding rules of large flows but ignores the latency requirements of small flows. Small flows encounter cache-miss in TCAM and then will be diverted to RAM, where they have to experience slow lookup processes. To jointly optimize the performance of both high-throughput large flows and latency-sensitive small flows, we propose a hybrid rule-caching framework, H-Cache, to scale traffic-aware forwarding policies in SDN. H-Cache identifies large flows through a collaboration of learning-based and threshold-based methods to achieve early detection and high accuracy, and proposes a time-efficient greedy heuristic to address rule dependencies. For small flows, H-Cache establishes default paths in TCAM to speed up their lookup processes, and also reduces their TCAM occupancy through label switching and region partitioning. Experiments with both real-world and synthetic datasets demonstrate that H-Cache increases TCAM utilization by an average of 11% and reduces the average completion time of small flows by almost 70%.

RuleCache: Accelerating Web Application Firewalls by On-line Learning Traffic Patterns

Taming the Wildcards: Towards Dependency-free Rule Caching with FreeCache.

L-QoCo: learning to optimize cache capacity overloading in storage systems

AWEsome-Cache: Dependency-Free Rule-Caching for Arbitrary Wildcard Patterns in TCAM

Adaptive Wildcard Rule Cache Management for Software-Defined Networks

H-Cache: Traffic-Aware Hybrid Rule-Caching in Software-Defined Networks.

PipeCache: High Hit Rate Rule-Caching Scheme Based on Multi-Stage Cache Tables

An Improved Web Cache Replacement Algorithm Based on Weighting and Cost

CAB: a reactive wildcard rule caching system for software-defined networks.

Cost Minimization for Rule Caching in Software Defined Networking

Web Caching Replacement Based on User's Visiting Action

Exploring Dynamic Rule Caching Under Dependency Constraints for Programmable Switches: Theory, Algorithm, and Implementation

T-Cache: Efficient Policy-Based Forwarding Using Small TCAM

Application Controlled Caching for Web Servers

Efficient Flow Table Caching Architecture and Replacement Policy for SDN Switches

Wire Speed Packet Classification Without Tcams: A Few More Registers (And A Bit Of Logic) Are Enough

A Packet Classification Algorithm Based on Self-Adaptive Cache

A Statistics-based Web Cache Prediction Model

CPFirewall: A Novel Parallel Firewall Scheme for FWaaS in the Cloud Environment.

Active Network Approach for Web Caching.

Optimization to Firewall Rule-Matching with Statistic Analysis