A novel packet classification algorithm for information security firewall

Kai Peng; Yimin Lu; Gang Lu; Tianpin Deng

doi:10.1117/12.657360

4 January 2006 A novel packet classification algorithm for information security firewall

Kai Peng, Yimin Lu, Gang Lu, Tianpin Deng

Proceedings Volume 5985, International Conference on Space Information Technology; 59851W (2006) https://doi.org/10.1117/12.657360
Event: International Conference on Space information Technology, 2005, Wuhan, China

Abstract

The exponential growth in optical link speed has stressed the performance of routers and firewall. Consequently, a new breed of microprocessors, called Network Processors (NP), are designed and fabricated specifically to effectively process packets on firewalls and routers. Packet classification is a major function in network processors to fit requirements of next-generation Internet. The paper presents a hardware-based packet classification algorithm for NP. The innovative aspect of the proposed algorithm is to use the NP's parallel character well enough. The algorithm use hash algorithm to make six-dimension classification be three-dimension classification. Compressing the size of classification fields are used for hash input while TCAM performs the lookup of the hash value and source IP. The memory of the algorithm is the total amount of memory needed to store the rules. The search speed of our algorithm is neither sensitive to the size of the rule table. It is only relate to the collision of the hash function. The performance of the proposed algorithm test result demonstrates that the proposed scheme is a sound approach that can be implemented on NP efficiently.

Citation Download Citation

Kai Peng, Yimin Lu, Gang Lu, and Tianpin Deng "A novel packet classification algorithm for information security firewall", Proc. SPIE 5985, International Conference on Space Information Technology, 59851W (4 January 2006); https://doi.org/10.1117/12.657360

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available