面向深度分组检测的高速数据分组解析结构

doi:10.3969/j.issn.1000-436X.2013.06.019

Abstract

Abstract:

A deep packet inspection oriented high speed packet parsing architecture called BiPPCS (bidirectional packet parsing architecture for content security) was proposed. Firstly, the content extraction tree was used to describe the cou-pling of the protocol relationship to improve flexibility of the packet parsing. Secondly, hardware bi-directional parallel pipeline was used to enhance the processing rate of the packet parsing. Thirdly, a node mapping algorithm was used to balance the number of nodes on all pipeline stages to optimize the storage space. Analysis and simulation show that BiPPCS gets balance among the rate processing, resource consumption and other aspects.

Key words: packet parsing, deep packet inspection, binary trie; network security, reconfiguration, NetFPGA

Yong-ji DONG,Yun-fei GUO,Wan-wei HUANG,Hui-qun HUANG. Deep packet inspection oriented high speed packet parsing architecture[J]. Journal on Communications, 2013, 34(6): 156-164.

Figures/Tables 11

References 14

[1]	朱映映, 吴锦锋, 明仲 . 基于网络事件和深度协议分析的入侵检测研究[J]. 通信学报 2011,(8):171-178. ZHU Y Y , WU J F , MING Z . Research on intrusion detection based on network events and deep protocol analysis[J]. Journal on Communications, 2011,(8):171-178.
[2]	LIAO M Y , LUO M Y , YANG C S , et al. Design and evaluation of deep packet inspection system: a case study[J]. IET Networks, 2012,1(1): 2-9.
[1]	朱国胜, 余少华 . 基于TCAM的范围匹配方法——C-TCAM[J]. 通信学报 2012,33(1):31-37. ZHU G S , YU S H . Range matching method based on TCAM:C-TCAM[J]. Journal on Communications, 2012,33(1):31-37.
[4]	PENG K , TANG S , DONG Q , et al. Chain-based DFA deflation for fast and scalable regular expression matching using TCAM[A]. Proceedings of the ACM/IEEE Symposium on Architectures for Networking and Communications Systems. Brooklyn[C]. NY, USA, 2011. 24-35.
[7]	BHATNAGAR H , . 高级ASIC芯片综合[M]. 北京: 清华大学出版社, 2007. BHATNAGAR H . Advanced ASIC Chip Synthesis[M]. Beijing: Tsinghua Universit Press, 2007.
[6]	AHMADI M , WONG S . Network processors: challenges and trends[A]. Proceedings of the 17th Annual Workshop on Circuits, Systems and Signal Processing[C]. The Netherlands, 2006. 223-232.
[7]	Xilinx corporaton[EB/OL]. 2012.
[8]	ANWER M B , MOTIWALA M , TARIQ M B , et al. Switchblade: a platform for rapid deployment of network protocols on programmable hardware[A]. Proceedings of the ACM SIGCOMM Conference[C]. New Delhi, India, 2010. 183-194.
[9]	BANDO M , SERTAC ARTAN N , CHAO H J . Scalable lookahead regular expression detection system for deep packet inspection[J]. IEEE/ACM Transactions on Networking, 2012.
[10]	KOBIERSKY P , KORENEK J , POLCAK L . Packet header analysis and field extraction for multigigabit networks[A]. Proceedings of the IEEE Symposium on Design and Diagnostics of Electronic Circuits and Systems[C]. Liberec, Czech Republic, 2009. 96-101.
[11]	KOZANITIS C , HUBER J , SINGH S . Leaping multiple headers a single bound: wire-speed parsing using the Kangaroo system[A]. Proceedings of the 29th IEEE Conference on Computer Communications[C]. San Diego, CA, USA, 2010. 830-838.
[12]	ATTIG M , GORDON B . 400Gb/s programmable packet parsing on a single FPGA[A]. Proceedings of the ACM/IEEE Symposium on Architectures for Networking and Communications Systems[C]. Brooklyn, NY, USA, 2011. 12-23.
[13]	KORCEK P , KOSAR V , ZADNIK M , et al. Hacking NetCOPE to run on NetFPGA-10G[A]. Proceedings of the ACM/IEEE Symposium on Architectures for Networking and Communications Systems[C]. Brooklyn, NY, USA, 2011. 217-218.
[14]	BASU A , NARLIKAR G . Fast incremental updates for pipelined forwarding engines[A]. Proceedings of IEEE INFOCOM Conference[C]. San Francisco, CA, USA, 2003. 64-74.

Metrics

Recommended 0

No Suggested Reading articles found!

流水线深度	逻辑资源(slice)	BRAM/36 kbit	时钟频率/ns	吞吐量/(Gbit·s^?1)
6	10.4%	12	4.778 9	214
10	12.5%	20	4.914 6	208
14	14%	28	4.971 4	206

结构	逻辑资源(slice)	BRAM/36 kbit	吞吐量/(Gbit·s^?1)	接口独立的协议解析能力
BiPPCS	10.4%	3%	214	是
PP	44%	—	343	否
Kangaroo	6.4%	15%	10	否

[1]	Chang-xi GAO,Ya-biao WU,Cong WANG. Encrypted traffic classification based on packet length distribution of sampling sequence [J]. Journal on Communications, 2015, 36(9): 65-75.
[2]	Zhe WANG,Man-gui LIANG,Xiao-meng JI,MateusAbisai Fillipus. Source-controlled OpenFlow data plane [J]. Journal on Communications, 2015, 36(3): 195-201.
[3]	Mao-hua JING,Yi-xian YANG,Tao WANG,Yang XIN. Novel NFA engine construction method of regular expressions [J]. Journal on Communications, 2014, 35(10): 98-106.
[4]	. Novel NFA engine construction method of regular expressions [J]. Journal on Communications, 2014, 35(10): 12-106.
[5]	Ju-long LAN,Dong-nian CHENG,Yu-xiang HU. Research on reconfigurable information communication basal network architecture [J]. Journal on Communications, 2014, 35(1): 128-139.
[6]	. Deep packet inspection oriented high speed packet parsing architecture [J]. Journal on Communications, 2013, 34(6): 19-164.
[7]	Bo YUAN,Bin-qiang WANG,Dong-chao MA. Trustworthy component model supporting networks reconfiguration [J]. Journal on Communications, 2013, 34(3): 32-43.
[8]	Ting WANG,Ju-long LAN,Jun-ting WU. Hardware reconfigurable coding and evolution algorithm based on evolvable hardware [J]. Journal on Communications, 2012, 33(8): 35-41.
[9]	Yi-jiao CHEN,Ze-xin LU,Zhi-gang SUN,Tao LI,Gao-feng LV. Design and implementation of packet forwarding engine for reconfigurable routers [J]. Journal on Communications, 2012, 33(8): 42-51.
[10]	Yu-ting MIAO,Chun-ming WU,Qiang YANG,Ming JIANG. Self-healing mechanism for reconfigurable service overlay networks [J]. Journal on Communications, 2012, 33(8): 52-61.
[11]	Qian HE,Zhi-yong FENG,Ping ZHANG. Reconfiguration decision making based on artificial intelligence technology in cognitive radio networks [J]. Journal on Communications, 2012, 33(7): 96-102.
[12]	Hui LI,Ming-long ZHANG,Fu-xing CHEN,Han-xu HOU,Kai PAN,Wei WANG,Hu-sheng YUAN,Tao SUN. Co-decode algorithm of network coding with hardware logic [J]. Journal on Communications, 2012, 33(7): 1-8.
[13]	Zhi-cong HE,Guang-zhao GU,Xin WANG,Jin ZHAO,Xiang-yang XUE. Novel cooperative caching strategies for video streaming distribution based on reconfiguration routers [J]. Journal on Communications, 2012, 33(6): 82-90.
[14]	Yu-feng LI,Han QIU,Qin-rang LIU,Ju-long LAN. Design of network management and regulation system over flexible reconfiguration [J]. Journal on Communications, 2012, 33(11): 84-90.
[15]	Shun-li ZHANG,Xue-song QIU,Ya-lian PAN,Luo-ming MENG. Forecast-based resource reconfiguration algorithm for network virtualization [J]. Journal on Communications, 2011, 32(7): 57-63.

Deep packet inspection oriented high speed packet parsing architecture

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 11

References 14

Related Articles 15

Metrics

Recommended 0