Packet Filtering for FPGA-Based Routing Accelerator

被引:0
作者
Antos, David [1 ,2 ]
Rehak, Vojtech [1 ]
Holub, Petr [2 ,3 ]
机构
[1] Masaryk Univ, Fac Informat, Bot 68A, Brno 60200, Czech Republic
[2] CESNET, zspo, Prague 16000, Czech Republic
[3] Masaryk Univ, Inst Comp Sci, Brno 60200, Czech Republic
来源
CESNET CONFERENCE 2006: FIRST CESNET CONFERENCE ON ADVANCED COMMUNICATIONS AND GRIDS | 2006年
关键词
Packet filtering; hardware accelerated routing; filtering rules transformation; filter decision diagrams; binary decision diagrams;
D O I
暂无
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
In this paper, we present a novel approach for Binary Decision Diagram based semantically extended representation of packet filters called Filter Decision Diagrams (FDD), used for efficient filter processing and lookup in a hardware accelerator that uses a lookup engine employing CAM and comparison instructions kept in SRAM. We present the most important operations for FDDs and also give some complexity estimate. We also analyze and compare expressing power of the most commonly available packet filters.
引用
收藏
页码:161 / 173
页数:13
相关论文
共 49 条
  • [41] Efficient GPGPU-based parallel packet classification
    Hung, Che-Lun
    Wang, Hsiao-Hsi
    Guo, Shih-Wei
    Lin, Yaw-Ling
    Li, Kuan-Ching
    TRUSTCOM 2011: 2011 INTERNATIONAL JOINT CONFERENCE OF IEEE TRUSTCOM-11/IEEE ICESS-11/FCST-11, 2011, : 1367 - 1374
  • [42] Fast Parallel Network Packet Filter System based on CUDA
    Hung, Che-Lun
    Guo, Shih-Wei
    INTERNATIONAL JOURNAL OF NETWORKED AND DISTRIBUTED COMPUTING, 2014, 2 (04) : 198 - 210
  • [43] The use and usability of direction-based filtering in firewalls
    Wool, A
    COMPUTERS & SECURITY, 2004, 23 (06) : 459 - 468
  • [44] Enabling precise traffic filtering based on protocol encapsulation rules
    Cerrato, Ivano
    Risso, Fulvio
    COMPUTER NETWORKS, 2018, 136 : 51 - 67
  • [45] Content-based Routing Using Multicasting for Vehicular Networks
    Shivshankar, Smitha
    Jamalipour, Abbas
    2012 IEEE 23RD INTERNATIONAL SYMPOSIUM ON PERSONAL INDOOR AND MOBILE RADIO COMMUNICATIONS (PIMRC), 2012, : 2460 - 2465
  • [46] RepuFilter: Prevention of Untrusted Packet Spread Based on Trust Evaluation in Wireless Networks
    Bao, Han
    Zhang, Xiaoping
    Wang, Gaoyuan
    Zhang, Mengyu
    Wang, Yisong
    Zhao, Youjian
    ICC 2023-IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS, 2023, : 5972 - 5977
  • [47] TDPF: a traceback-based distributed packet filter to mitigate spoofed DDoS attacks
    Fallah, Mehran S.
    Kahani, Nafiseh
    SECURITY AND COMMUNICATION NETWORKS, 2014, 7 (02) : 245 - 264
  • [48] A Credit Based Abnormal Traffic Filtering Method for Time Sensitive Network in Substations
    Jia, Huibin
    Liu, Yanyan
    Wu, Kun
    Li, Jiahe
    Wang, Zhihua
    2024 INTERNATIONAL CONFERENCE ON UBIQUITOUS COMMUNICATION, UCOM 2024, 2024, : 292 - 296
  • [49] BDD-based Algorithm for the Minimum Spanning Tree in Wireless Ad-hoc Network Routing
    Yanez-Marquez, C.
    Yanez, I. L.
    Nieto, O. C.
    Cruz, A. J. A.
    IEEE LATIN AMERICA TRANSACTIONS, 2013, 11 (01) : 600 - +