Abstract:The emergence of new network applications, such as the network intrusion detection system and packet-level accounting, requires packet classification to report all matched rules instead of only the best matched rule. Although several schemes have been proposed recently to address the multimatch packet classification problem, most of them require either huge memory or expensive ternary content addressable memory (TCAM) to store the intermediate data structure, or they suffer from steep performance degradation under certain types of classifiers. In this paper, we decompose the operation of multimatch packet classification from the complicated multidimensional search to several single-dimensional searches, and present an asynchronous pipeline architecture based on a signature tree structure to combine the intermediate results returned from single-dimensional searches. By spreading edges of the signature tree across multiple hash tables at different stages, the pipeline can achieve a high throughput via the interstage parallel access to hash tables. To exploit further intrastage parallelism, two edge-grouping algorithms are designed to evenly divide the edges associated with each stage into multiple work-conserving hash tables. To avoid collisions involved in hash table lookup, a hybrid perfect hash table construction scheme is proposed. Extensive simulation using realistic classifiers and traffic traces shows that the proposed pipeline architecture outperforms HyperCuts and B2PC schemes in classification speed by at least one order of magnitude, while having a similar storage requirement. Particularly, with different types of classifiers of 4K rules, the proposed pipeline architecture is able to achieve a throughput between 26.8 and 93.1 Gb/s using perfect hash tables.

DBTable: Leveraging Discriminative Bitsets for High-Performance Packet Classification

MiCuts: Combing Bit-Based Cutting and Splitting for Efficient Packet Classification

DOT: Towards Fast Decision Tree Packet Classification by Optimizing Rule Partitions

DBS: A Bit-level Heuristic Packet Classification Algorithm for High Speed Network

DTRadar: Accelerating Search Process of Decision Trees in Packet Classification.

Discrete Bit Selection: Towards a Bit-Level Heuristic Framework for Multi-Dimensional Packet Classification

FROD: an Efficient Framework for Optimizing Decision Trees in Packet Classification

Practical Multituple Packet Classification Using Dynamic Discrete Bit Selection.

PT-Tree: A Cascading Prefix Tuple Tree for Packet Classification in Dynamic Scenarios

CARR: a Scalable Solution for Network Packet Classification.

Bitcuts: A Fast Packet Classification Algorithm Using Bit-Level Cutting

CutSplit: A Decision-Tree Combining Cutting and Splitting for Scalable Packet Classification.

An Efficient Hybrid Algorithm for Multidimensional Packet Classification.

High-Throughput and Memory-Efficient Multimatch Packet Classification Based on Distributed and Pipelined Hash Tables.

Tuple Space Assisted Packet Classification with High Performance on Both Search and Update

Performance Evaluation And Improvement Of Algorithmic Approaches For Packet Classification

TabTree: A TSS-assisted Bit-selecting Tree Scheme for Packet Classification with Balanced Rule Mapping

Cache-Aware Algorithm for Packet Classification

An Observation of Packet Classification: Most Rules Are at the Top

LearningTuple: A Packet Classification Scheme with High Classification and High Update

Practical Multituple Packet Classification Using Dynamic Discrete Bit Selection