1 / 17

Network processing at gigabit speeds

Network processing at gigabit speeds. Leiden Embedded Research Center Leiden Institute of Advanced Computer Science. Leiden University, The Netherlands. Mihai Cristea. Packet processing at line rate. Problem domain Network processors FFPF (Fairly Fast Packet Filters) NET-FFPF

kipling
Download Presentation

Network processing at gigabit speeds

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Network processing at gigabit speeds Leiden Embedded Research Center Leiden Institute of Advanced Computer Science Leiden University, The Netherlands Mihai Cristea

  2. Packet processing at line rate • Problem domain • Network processors • FFPF (Fairly Fast Packet Filters) • NET-FFPF • FPL-3 programming language

  3. Problem domain • Increasing demands for packet processing tasks: • Network monitoring • Intrusion detection • Firewalling • network speeds vs. bus, memory, processor speeds • Inefficient software

  4. Network processors Packet processing at high speeds

  5. Processing in FFPF Example: monitoring applications HOST App_mon1 App_mon2 PCI StrongARM … ME0 ME1 ME2 MEx RX TX

  6. Distributed packet processing

  7. Distributed processing in NET-FFPF • Heterogeneous processing nodes • Gigabit speeds support • Easy programming language: FPL-3 • Provides: • Load balancing; • Traffic monitoring; • Firewalling .... At link rates

  8. Traffic monitoringmapped onto APT

  9. Traffic monitoringmapped onto dAPT

  10. FPL-3 programming language • Generic header-based filtering • Payload scanning • Looping & branching • Packet replication • Traffic splitting • Compiles to machine code • Distributed support across a network IF (PKT.PROTO == UDP) THEN R[0] = Hash(26,12,1024); M[R[0]]++; FI

  11. user Monitoring results Write filters SWITCH NP Filtering Network traffic NP NP Filtering Filtering&splitting NP Filtering Using NET-FFPF

  12. Performance

  13. Conclusion • NET-FFPF distributed network processing environment • FPL-3 programming language

  14. Questions ?

  15. IXP1200 architecture

  16. IXP1200 architecture

More Related