HIGH PERFORMANCE DEEP PACKET INSPECTION ON MULTI-CORE PLATFORM

被引:0
作者
Cong, Wang [1 ]
Morris, Joe [1 ]
Wang Xiaojun [1 ]
机构
[1] Dublin City Univ, Dublin 9, Ireland
来源
PROCEEDINGS OF 2009 2ND IEEE INTERNATIONAL CONFERENCE ON BROADBAND NETWORK & MULTIMEDIA TECHNOLOGY | 2009年
关键词
DPI; Multi-Core; Parallelism; Lock-Free Data Structure;
D O I
暂无
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Deep Packet Inspection (DPI) provides the ability to perform Quality of Service (QoS) and Intrusion Detection on network packets. But since the explosive growth of Intrnet, performance and scalability issues have been raised due to the gap between network and end-system speeds. This article describles how a desirable DPI system with multi-gigabits throughput and good scalability should be like by exploiting parallelism on Network Interface Card, network stack and user applications. Connection-based Parallelism, Affinity-based Scheduling and Lock-free Data Structure are the main technologies introduced to alleviate the performance and scalability issues. A common DPI application L7-Filter is used as an example to illustrate the applicaiton level parallelism.
引用
收藏
页码:619 / 622
页数:4
相关论文
共 16 条
[1]  
[Anonymous], APPL LAYER PACKET CL
[2]  
[Anonymous], Receive side scaling
[3]  
DESAI V, 2006, HIGH PERFORMANCE NET
[4]  
Guo D, 2008, P 4 ACM IEEE S ARCH
[5]  
*INT CORP, 2006, SUPR PACK PROC PERF
[6]  
*INT CORP, 2003, INT PRO 10GBE LR SER
[7]  
KUMAR S, ADV ALGORITHMS FAST
[8]  
LEMOINE E, 2004, P 3 IEEE INT C NETW
[9]  
MICHAEL, 1996, S PRINC DISTR COMP, P267
[10]  
MITRA A, COMPILING PCRE FPGA