Abstract:OpenFlow switches are being deployed in SDN to enable a wide spectrum of non-traditional applications. As a promising alternative to brutal force TCAMs, FPGA-based packet classification is being actively investigated. However, none of the existing FPGA designs can achieve high performance on both search and update for large-scale rule sets. To address this issue, we propose TcbTree, an FPGA-based algorithmic scheme for packet classification. Specifically, at the algorithmic side, i) a two-stage framework consisting of heterogeneous algorithms is proposed, where most rules can be mapped into several balanced trees without rule replications, ii) for the remaining few rules, a centralized TSS (Tuple Space Search) architecture together with a real-time feedback scheme is designed to enhance the efficiency of TSS search on FPGA, and iii) a tree dilution method is designed to equalize rule distribution in trees, so that the latency of tree search can be reduced. At the hardware side, i) an efficient data structure set is designed to convert tree traversal to addressing process, which breaks the constraints of limited tree depth and imbalanced node distribution, and ii) distinct from fully pipelined designs, multiple levels of parallelism are efficiently explored with multi-core, multi-search-engine and coarse-grained pipelines herein. Experimental results using ClassBench show that, with the implementation of TcbTree on FPGA, the average classification throughputs for 1k, 10k, 32k and 100k rule sets achieve 788.8 MPPS, 404.3 MPPS, 237 MPPS and 41.8 MPPS, respectively, and the update throughput for all benchmark rule sets is above 1 MUPS.

Dryad: Deploying Adaptive Trees on Programmable Switches for Networking Classification

DTRadar: Accelerating Search Process of Decision Trees in Packet Classification.

Empowering In-Network Classification in Programmable Switches by Binary Decision Tree and Knowledge Distillation

FROD: an Efficient Framework for Optimizing Decision Trees in Packet Classification

DOT: Towards Fast Decision Tree Packet Classification by Optimizing Rule Partitions

Sra: Switch Resource Aggregation For Application Offloading In Programmable Networks

AFTM: an Adaptive Flow Table Management Scheme for OpenFlow Switches.

Toward Scalable and Low-Cost Traffic Testing for Evaluating DDoS Defense Solutions

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

SwitchTree: in-network computing and traffic analyses with Random Forests

Intelligent In-Network Attack Detection on Programmable Switches with Soterv2

Mousika: Enable General In-Network Intelligence in Programmable Switches by Knowledge Distillation

In-Forest: Distributed In-Network Classification with Ensemble Models

TabTree: A TSS-assisted Bit-selecting Tree Scheme for Packet Classification with Balanced Rule Mapping

Toward Resource-Efficient and High-Performance Program Deployment in Programmable Networks

Dynamic Switching Mechanism for Multi-tree Multicast in SDN-based Fat-Tree Data Center Network

Syslog Processing For Switch Failure Diagnosis And Prediction In Datacenter Networks

Soter: Deep Learning Enhanced In-Network Attack Detection Based on Programmable Switches

PT-Tree: A Cascading Prefix Tuple Tree for Packet Classification in Dynamic Scenarios

IIsy: Hybrid In-Network Classification Using Programmable Switches

FPGA-Based Updatable Packet Classification Using TSS-Combined Bit-Selecting Tree