Abstract

With the development of computer technology, network bandwidth and network traffic continue to increase. Considering the large data flow, it is imperative to perform inspection effectively on network packets. In order to find a solution of deep packet inspection which can appropriate to the current network environment, this paper built a deep packet inspection system based on many-core platform, and in this way, verified the feasibility to implement a deep packet inspection system under many-core platform with both high performance and low consumption. After testing and analysis of the system performance, it has been found that the deep packet inspection based on many-core platform TILE_Gx36 [1] [2] can process network traffic of which the bandwidth reaches up to 4 Gbps. To a certain extent, the performance has improved compared to most deep packet inspection system based on X86 platform at present.

Highlights

  • Openness of the Internet leads to diversity of network information, which has provided convenient experience to users, but contains a variety of security risks, such as network attacks

  • Under the huge data flow environment, the deep packet inspection deployment often tends to a large scale, which arouses the urgent need for high performance and low consumption

  • This paper will study the performance of the deep packet inspection system on many-core platform TILE_Gx36 under large flow network environment

Read more

Summary

Introduction

Openness of the Internet leads to diversity of network information, which has provided convenient experience to users, but contains a variety of security risks, such as network attacks. The traditional packet inspection technology has been confined to data inspection on the network layer and transport layer. It lacks the recognition of the application layer protocol and cannot meet the modern network environment. The transplantation of open source software— Suricata in many-core platform and expanding the application layer protocol identification on the basic of Open DPI is researched in this paper. Through this way, a deep packet inspection based on many-core platform with high performance and low consumption was built.

Related Works
Overall Structure
Packets Receiving and Sending by mPIPE
Packet Processing and Forwarding
Optimization and Test
Conclusion
Full Text
Paper version not known

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call