An adaptive hash-based multilayer scheduler for L7-filter on a highly threaded hierarchical multi-core server

ANCS'09: Symposium on Architecture for Networking and Communications Systems

Volumn , Issue , 2009, Pages 50-59

  Guo, Danhua ^a   Liao, Guangdeng ^a   Bhuyan, Laxmi N ^a   Liu, Bin ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

connection locality; deep packet inspection; L7 filter; load balance; multicore; multithreading; packet classification; parallelism; QoS; scalability; scheduling

Indexed keywords

CONNECTION LOCALITY; DEEP PACKET INSPECTION; L7-FILTER; LOAD BALANCE; MULTI CORE; MULTI-THREADING; PACKET CLASSIFICATION; PARALLELISM; QOS;

COMPUTER ARCHITECTURE; INSPECTION; MULTILAYERS; MULTITASKING; NETWORK ARCHITECTURE; OPTIMIZATION; ROUTERS; SCALABILITY; SCHEDULING; SERVERS;

PACKET NETWORKS;

EID: 78650942502     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1882486.1882497     Document Type: Conference Paper

References (31)

1. Application Layer Packet Classifier for Linux (L7-filter), http://l7-filter.sourceforge.net/.
2. B. Brodie, et al., "A Scalable Architecture for High-Throughput Regular-Expression Pattern Matching", ISCA '06.
3. Cisco IOS Netflow, http://www.cisco.com/en/US/products/ps6601/products- ios-protocol-group-home.html
4. Cisco Systems. Scaling the world wide web. Available from http://cio.cisco.com/warp/public/751/advtg/swww-wp.htm.
5. A. C. Dusseau, et al., "Effective Distributed Scheduling of Parallel Workloads", SIGMETRICS 1996.
6. A. Fedorova, et al., "Cache-Fair Thread Scheduling for Multicore Processors", OSDI '06.
7. D. Guo, et al., "A Scalable Multithreaded L7-filter Design for Multi-core Servers", ANCS 2008.
8. N. Hua, et al., "Variable-Stride Multi-Pattern Matching for Scalable Deep Packet Inspection", IEEE INFOCOM '09.
9. Huawei MSCG Hierarchical DPI Solution, http://www.huawei.com/products/ datacomm/catalog.do?id=1219
10. Raj Jain and Shawn A. Routheir, "Packet trains - measurements and a new model for computer network traffic", IEEE Journal on Selected Areas in Communications, 4(6):986-995, September 1986. (Pubitemid 17468789)
11. Juniper M Series Multiservice Edge Routers, http://www.juniper.net/us/en/ local/pdf/datasheets/1000042-en.pdf
12. Lukas Kencl, Jean-Yves Le Boudec, "Adaptive Load Sharing for Network Processor", IEEE INFOCOM 2002.
13. S. Kumar, et al., "Advanced Algorithms for Fast and Scalable Deep Packet Inspection", ANCS 2006.
14. S. Kumar, et al., "Algorithms to Accelerate Multiple Regular Expressions Matching for Deep Packet Inspection", SIGCOMM '06.
15. libnids, http://libnids.sourceforge.net/
16. Harlan McGhan, "Niagara 2 Opens the Floodgates - Niagara 2 Design is the Closest thing Yet to a True Server on a Chip", The Insider's Guide to Microprocessor Hardware, 11/6/06-01.
17. MIT DARPA Intrusion Detection Data Sets, http://www.ll.mit.edu/IST/ ideval/data/2000/2000-data-index.html.
18. A. Mitra, et al., "Compiling PCRE to FPGA for Accelerating SNORT IDS", ANCS 2007.
19. P. Piyachon and Y. Luo, "Efficient Memory Utilization on Network Processors for Deep Packet Inspection", ANCS 2006.
20. SPECweb 2005 Published Results, http://www.spec.org/web2005/results/
21. Receive Side Scaling (RSS), http://www.microsoft.com/whdc/device/network/ NDIS-RSS.mspx/.
22. K. W. Ross, "Hash Routing For Collections of Shared Web Caches", IEEE Network, Vol. 11, No. 6 November-December 1997.
23. Steve Sistare, "The UltraSparc T2 Processor and the Solaris Operating System", Oct 09, 2007, http://blogs.sun.com/sistare/entry/the- ultrasparc-t2-processor-and
24. Reid G. Smith, "The contract Net Protocol: High-level Communication and Control in a distributed Problem Solver", ACM Transactions on Computers, pages 1104-1113, December 1980.
25. SNORT Network Intrusion Detection System, http://www.snort.org/
26. D. Tam, et al., "Thread Clustering: Sharing-Aware Scheduling on SMP-CMP-SMT Multiprocessors", EuroSys '07.
27. L. Tan, et al., "A High Throughput String Matching Architecture for Intrusion Detection and Prevention", ISCA '05.
28. D. G. Thaler, C. V. Ravishankar, "Using name-based mappings to Increase Hit Rates", IEEE/ACM Transactions on Networking, Vol. 6 No. 1 pp. 1-14, Feburary 1998.
29. B. Veal, et al., "Performance Scalability of a Multi-core Web Server", ANCS 2007.
30. J. Verdu, et al., "MultiLayer processing - an execution model for parallel stateful packet processing", ANCS 2008.
31. F. Yu, et al., Fast and memory-efficient regular expression matching for deep packet inspection, ANCS 2006.