Abstract

This article proposes a domain name caching method for the multicore network-traffic capture system, which significantly improves insert latency, throughput and hit rate. The caching method is composed of caching replacement algorithm, cache set method. The method is easy to implement, low in deployment cost, and suitable for various multicore caching systems. Moreover, it can reduce the use of locks by changing data structures and algorithms. Experimental results show that compared with other caching system, our proposed method reaches the highest throughput under multiple cores, which indicates that the cache method we proposed is best suited for domain name caching.

Highlights

  • Domain Name System (DNS) can direct web traffic to the correct destination

  • We find that the DNS cache is the main performance bottleneck of the network-traffic capture system

  • This fully proves that our cache system can guarantee extremely high throughput performance when inset operations account for a relatively high proportion (70%)

Read more

Summary

Introduction

Domain Name System (DNS) can direct web traffic to the correct destination. In the field of network security, IP is the most important means of distinguishing tracing network attacks. It is difficult for network security managers to remember a series of numbers when manually identifying IP, so the corresponding domain name needs to be displayed behind the IP. At this time, it is necessary to add a DNS cache system to the network-traffic capture system to achieve this function. The best way to achieve quick query of IP and domain names is to use a key-value pair caching system

Methods
Results
Conclusion
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call