PTME: A Regular Expression Matching Engine Based on Speculation and Enumerative Computation on FPGA

被引:0
作者
Sun, Mingqian [1 ]
Xie, Guangwei [2 ]
Zhang, Fan [3 ]
Gho, Wei [3 ]
Fan, Xitian [4 ]
Li, Tianyang [3 ]
Chen, Li [3 ]
Du, Jiayu [5 ]
机构
[1] Southeast Univ, Sch Cyber Sci & Engn, 2 Southeast Univ Rd, Nanjing 211102, Peoples R China
[2] Fudan Univ, Sch Comp Sci, 220 Han Dan Rd, Shanghai 056004, Peoples R China
[3] Natl Digital Switching Syst Engn & Technol Res Ctr, 7 Jian Xue Rd, Zhengzhou 450011, Henan, Peoples R China
[4] Shanghai HONGZHEN Informat Sci & Technol Corp, 1588 Lian Hang Rd, Shanghai 201112, Peoples R China
[5] Purple Mt Labs, 9 Mozhou East Rd, Nanjing 211111, Jiangsu, Peoples R China
关键词
Regular expression matching; DFA; speculation and enumerative compu-tation; FPGA;
D O I
10.1145/3655626
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Fast regular expression matching is an essential task for deep packet inspection. In previous works, the regular expression matching engine on FPGA struggled to achieve an ideal balance between resource consumption and throughput. Speculation and enumerative computation exploits the statistical properties of deterministic finite automata, allowing for more efficient pattern matching. Existing related designs mostly revolve around vector instructions and multiple processors/cores or SIMD instruction sets, with a lack of implementation on FPGA platforms. We design a parallelized two-character matching engine on FPGA for efficiently fast filtering off fields with no pattern features. We transform the state transitions with sequential dependencies to the existing problem of elements in one set, enabling the proposed design to achieve high throughput with low resource consumption and support dynamic updates. Results show that compared with the traditional DFA matching, with a maximum resource consumption of 25% for on-chip FFs (74323/1045440) and LUTs (123902/522720), there is an improvement in throughput of 8.08-229.96x speedup and 87.61-99.56% speed-up(percentage improvement) for normal traffic, and 11.73-39.59x speedup and 91.47-97.47% speed-up(percentage improvement) for traffic with high-frequency match hits. Compared with the state-of-the-art similar implementation, our circuit on a single FPGA chip is superior to existing multi-core designs.
引用
收藏
页码:1 / 28
页数:28
相关论文
共 34 条
  • [31] Efficient compression algorithm for ternary content addressable memory-based regular expression matching
    Liu, Shu
    Su, Shaojing
    Liu, Desheng
    Huang, Zhiping
    Xiao, Mingyan
    ELECTRONICS LETTERS, 2017, 53 (03) : 152 - 154
  • [32] GPU-based NFA Implementation for Memory Efficient High Speed Regular Expression Matching
    Zu, Yuan
    Yang, Ming
    Xu, Zhonghu
    Wang, Lin
    Tian, Xin
    Peng, Kunyang
    Dong, Qunfeng
    ACM SIGPLAN NOTICES, 2012, 47 (08) : 129 - 139
  • [33] A Reconfigurable Multi-Byte Regular-Expression Matching Architecture for Signature-Based Intrusion Detection
    Badran, Tamer F.
    Ahmad, Hany H.
    Abdelgawad, Mohamad
    2008 3RD INTERNATIONAL CONFERENCE ON INFORMATION AND COMMUNICATION TECHNOLOGIES: FROM THEORY TO APPLICATIONS, VOLS 1-5, 2008, : 2571 - 2574
  • [34] Efficient Regular Expression Pattern Matching for Network Intrusion Detection Systems using Modified Word-based Automata
    Kumar, Pawan
    Singh, Virendra
    PROCEEDINGS OF THE FIFTH INTERNATIONAL CONFERENCE ON SECURITY OF INFORMATION AND NETWORKS, 2012, : 103 - 110