HIGH PERFORMANCE DEEP PACKET INSPECTION ON MULTI-CORE PLATFORM

摘要：

Deep Packet Inspection (DPI) provides the ability to perform Quality of Service (QoS) and Intrusion Detection on network packets. But since the explosive growth of Intrnet, performance and scalability issues have been raised due to the gap between network and end-system speeds. This article describles how a desirable DPI system with multi-gigabits throughput and good scalability should be like by exploiting parallelism on Network Interface Card, network stack and user applications. Connection-based Parallelism, Affinity-based Scheduling and Lock-free Data Structure are the main technologies introduced to alleviate the performance and scalability issues. A common DPI application L7-Filter is used as an example to illustrate the applicaiton level parallelism.

关键词： DPI Multi-Core Parallelism Lock-Free Data Structure

作者: Wang Cong Joe Morris Wang Xiaojun

作者单位: Dublin City University, Dublin, Ireland

会议类型: 国际会议

会议名称: 2009 2nd IEEE International Conference on Broadband Network & Multimedia Technology(2009年宽带网络与多媒体国际会议 IEEE IC-BNMT2009)

会议地点: 北京

会议语种:英文

页码: 619-622

在线出版日期: 2009-10-18（万方平台首次上网日期，不代表论文的发表时间）