A Single-Cycle Multi-Match Packet Classification Engine Using TCAMs

Most conventional packet classifiers find the highest priority filter that matches the packet. However, new networking applications such as network intrusion detection systems and load balancers require all (or the first few) matching results in packet classification. An efficient TCAM-based architecture for multi-match search is introduced in this paper. We propose a novel partitioning scheme based on filters and their intersection properties. An efficient contention resolver unit is designed to enhance performance of the search by choosing only one partition. Our approach finds all matches in exactly one conventional TCAM cycle while reducing the power consumption by at least two orders of magnitude