Share Email Print

Proceedings Paper

A novel packet classification algorithm for information security firewall
Author(s): Kai Peng; Yimin Lu; Gang Lu; Tianpin Deng
Format Member Price Non-Member Price
PDF $17.00 $21.00

Paper Abstract

The exponential growth in optical link speed has stressed the performance of routers and firewall. Consequently, a new breed of microprocessors, called Network Processors (NP), are designed and fabricated specifically to effectively process packets on firewalls and routers. Packet classification is a major function in network processors to fit requirements of next-generation Internet. The paper presents a hardware-based packet classification algorithm for NP. The innovative aspect of the proposed algorithm is to use the NP's parallel character well enough. The algorithm use hash algorithm to make six-dimension classification be three-dimension classification. Compressing the size of classification fields are used for hash input while TCAM performs the lookup of the hash value and source IP. The memory of the algorithm is the total amount of memory needed to store the rules. The search speed of our algorithm is neither sensitive to the size of the rule table. It is only relate to the collision of the hash function. The performance of the proposed algorithm test result demonstrates that the proposed scheme is a sound approach that can be implemented on NP efficiently.

Paper Details

Date Published: 4 January 2006
PDF: 6 pages
Proc. SPIE 5985, International Conference on Space Information Technology, 59851W (4 January 2006); doi: 10.1117/12.657360
Show Author Affiliations
Kai Peng, Huazhong Univ. of Science and Technology (China)
Yimin Lu, Huazhong Univ. of Science and Technology (China)
Gang Lu, Huazhong Univ. of Science and Technology (China)
Tianpin Deng, Huazhong Univ. of Science and Technology (China)

Published in SPIE Proceedings Vol. 5985:
International Conference on Space Information Technology
Cheng Wang; Shan Zhong; Xiulin Hu, Editor(s)

© SPIE. Terms of Use
Back to Top