High performance deep packet inspection on multi-core platform
Wang, Cong, Morris, Joseph and Wang, Xiaojun
(2009)
High performance deep packet inspection on multi-core platform.
In: IC-BNMT 2009 - 2nd IEEE International Conference on Broadband Network & Multimedia Technology, 18-20 October 2009, Beijing, China.
ISBN 978-1-4244-4590-5
Deep packet inspection (DPI) provides the ability to perform quality of service (QoS) and Intrusion Detection on network packets. But since the explosive growth of Internet, performance and scalability issues have been raised due to the gap between network and end-system speeds. This article describles how a desirable DPI system with multi-gigabits throughput and good scalability should be like by exploiting parallelism on network interface card, network stack and user applications. Connection-based parallelism, affinity-based scheduling and lock-free data structure are the main technologies introduced to alleviate the performance and scalability issues. A common DPI application L7-Filter is used as an example to illustrate the applicaiton level parallelism.
Item Type:
Conference or Workshop Item (Paper)
Event Type:
Conference
Refereed:
Yes
Uncontrolled Keywords:
internet; data structures; quality of service; scheduling; security of data;
Proceedings of the 2nd IEEE International Conference on Broadband Network & Multimedia Technology.
.
Institute of Electrical and Electronics Engineers. ISBN 978-1-4244-4590-5