Abstract
With the development of computer technology, network bandwidth and network traffic continue to increase. Considering the large data flow, it is imperative to perform inspection effectively on network packets. In order to find a solution of deep packet inspection which can appropriate to the current network environment, this paper built a deep packet inspection system based on many-core platform, and in this way, verified the feasibility to implement a deep packet inspection system under many-core platform with both high performance and low consumption. After testing and analysis of the system performance, it has been found that the deep packet inspection based on many-core platform TILE_Gx36 [1] [2] can process network traffic of which the bandwidth reaches up to 4 Gbps. To a certain extent, the performance has improved compared to most deep packet inspection system based on X86 platform at present.
Highlights
Openness of the Internet leads to diversity of network information, which has provided convenient experience to users, but contains a variety of security risks, such as network attacks
Under the huge data flow environment, the deep packet inspection deployment often tends to a large scale, which arouses the urgent need for high performance and low consumption
This paper will study the performance of the deep packet inspection system on many-core platform TILE_Gx36 under large flow network environment
Summary
Openness of the Internet leads to diversity of network information, which has provided convenient experience to users, but contains a variety of security risks, such as network attacks. The traditional packet inspection technology has been confined to data inspection on the network layer and transport layer. It lacks the recognition of the application layer protocol and cannot meet the modern network environment. The transplantation of open source software— Suricata in many-core platform and expanding the application layer protocol identification on the basic of Open DPI is researched in this paper. Through this way, a deep packet inspection based on many-core platform with high performance and low consumption was built.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have