High-Performance Packet Classification on Multi-Core Network Processing Platforms

• Published in: Tsinghua science and technology Vol. 16; no. 4; pp. 432 - 439
• Main Author: 亓亚炬 薛一波 李军
• Format: Journal Article
• Language: English
• Published: Elsevier Ltd 01.08.2011; Department of Automation, Tsinghua University, Beijing 100084, China; Tsinghua National Laboratory for Information Science and Technology, Beijing 100084, China; Research Institute of Information Technology, Tsinghua University, Beijing 100084, China%Research Institute of Information Technology, Tsinghua University, Beijing 100084, China
• Subjects: Algorithms; Classification; Firewalls; Intrusion; multi-core; Networks; packet classification; Packets (communication); performance evaluation; Platforms; Processors; 入侵检测系统; 内存使用; 分类算法; 多核; 性能; 数据包分类; 核心平台; 网络处理器; multi-core; performance evaluation; packet classification
• ISSN: 1007-0214; 1878-7606; 1007-0214
• DOI: 10.1016/S1007-0214(11)70062-1

Packet classification is crucial to the implementation of advanced network services that require the capability to distinguish traffic in different flows, such as access control in firewalls and protocol analysis in intrusion detection systems. This paper proposes a novel packet classification algorithm optimized for multi-core network processors. The proposed algorithm, AggreCuts, has an explicit worst-case search time with modest memory usage. The data structure of AggreCuts is flexible and well-adapted to different types of multi-core platforms. The algorithm on both Intel IXP2850 32-bit and Cavium OCTEON3860 64-bit multi-core platforms was implemented to evaluate the performance of AggreCuts. The experimental results show that AggreCuts outperforms the best-known existing algorithm in terms of memory usage and classification speed.