1 / 9

A Multi-gigabit Rate Deep Packet Inspection Algorithm using TCAM

A Multi-gigabit Rate Deep Packet Inspection Algorithm using TCAM. Author： Jung-Sik Sung, Seok-Min Kang, Youngseok Lee, Taeck-Geun Kwon, and Bong-Tae Kim Publisher： IEEE GLOBECOM 2005 Presenter：Wen-Tse Liang Date：2011/09/14. Outline. INTRODUCTION THE PROPOSED ALGORITHM

matsu
Télécharger la présentation

A Multi-gigabit Rate Deep Packet Inspection Algorithm using TCAM

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. A Multi-gigabit Rate Deep Packet Inspection Algorithm using TCAM Author：Jung-Sik Sung, Seok-Min Kang, Youngseok Lee, Taeck-Geun Kwon, and Bong-Tae Kim Publisher：IEEE GLOBECOM 2005 Presenter：Wen-Tse Liang Date：2011/09/14

  2. Outline • INTRODUCTION • THE PROPOSED ALGORITHM • Algorithm • The Preprocessing Stage • The Scanning Stage • PERFORMACE ANALYSIS AND SIMULATION

  3. Introduction We suppose a TCAM-based pattern- matching algorithm which decreases the number of TCAM lookups per packet by means of performing a TCAM lookup operation per multi-bytes in a packet payload. The secure router usually supports multi-gigabit rate such as 10 Gbps Ethernet and OC-192. Therefore, multi-gigabit rate secure routers need 10Gbps scan rate for detecting malicious signatures from the packets.

  4. Introduction We call this algorithm as the jumping window pattern-matching scheme. By reducing the number of TCAM lookups with the proposed jumping window scheme, multi-gigabit rate can be supported for secure routers.

  5. THE PROPOSED ALGORITHMAlgorithm

  6. THE PROPOSED ALGORITHMThe Preprocessing Stage

  7. THE PROPOSED ALGORITHMThe Scanning Stage

  8. PERFORMACE ANALYSIS AND SIMULATION Assuming the length of packet is 1518 bytes 0.81 million packets per second (Mpps) throughput is required to support 10Gbps.

  9. PERFORMACE ANALYSIS AND SIMULATION

More Related