DocumentCode :
1779
Title :
A Distributed TCAM Coprocessor Architecture for Integrated Longest Prefix Matching, Policy Filtering, and Content Filtering
Author :
Zhiping Cai ; Zhijun Wang ; Kai Zheng ; Jiannong Cao
Author_Institution :
Dept. of Network Eng., Nat. Univ. of Defense Technol., Changsha, China
Volume :
62
Issue :
3
fYear :
2013
fDate :
Mar-13
Firstpage :
417
Lastpage :
427
Abstract :
Longest Prefix Matching (LPM), Policy Filtering (PF), and Content Filtering (CF) are three important tasks for Internet nowadays. It is both technologically and economically important to develop integrated solutions to the effective execution of the three tasks. To this end, in this paper, we propose a distributed Ternary Content Addressable Memory (TCAM) coprocessor architecture. The integrated solution exploits the complementary lookup load and storage load requirements of the three tasks to balance the lookup load and storage load among the TCAMs. A prefix filtering-based CF algorithm is designed to reduce the lookup load and a novel cache system is developed to dynamically handle the lookups from overloaded TCAMs. Simulations based on real-world traffic traces show that the proposed solution can perform all three tasks given a 10 Gbps line rate using only the resources required to perform just the CF task given a 10 Gbps line rate.
Keywords :
Internet; computer network security; content-addressable storage; coprocessors; memory architecture; telecommunication traffic; Internet; LPM; PF; cache system; complementary lookup load requirements; content filtering; distributed TCAM coprocessor architecture; distributed ternary content addressable memory coprocessor architecture; integrated longest prefix matching; integrated solution; policy filtering; prefix filtering-based CF algorithm; real-world traffic traces; storage load requirements; Computer architecture; Coprocessors; Filtering; Heuristic algorithms; IP networks; Intrusion detection; Pattern matching; Longest prefix matching; content filtering; intrusion detection; policy filtering;
fLanguage :
English
Journal_Title :
Computers, IEEE Transactions on
Publisher :
ieee
ISSN :
0018-9340
Type :
jour
DOI :
10.1109/TC.2011.255
Filename :
6112752
Link To Document :
بازگشت