High-speed packet filtering utilizing stream processors

Richard J. Hummel; Errin W. Fulp

doi:10.1117/12.818389

13 April 2009 High-speed packet filtering utilizing stream processors

Richard J. Hummel, Errin W. Fulp

Proceedings Volume 7344, Data Mining, Intrusion Detection, Information Security and Assurance, and Data Networks Security 2009; 73440I (2009) https://doi.org/10.1117/12.818389
Event: SPIE Defense, Security, and Sensing, 2009, Orlando, Florida, United States

Abstract

Parallel firewalls offer a scalable architecture for the next generation of high-speed networks. While these parallel systems can be implemented using multiple firewalls, the latest generation of stream processors can provide similar benefits with a significantly reduced latency due to locality. This paper describes how the Cell Broadband Engine (CBE), a popular stream processor, can be used as a high-speed packet filter. Results show the CBE can potentially process packets arriving at a rate of 1 Gbps with a latency less than 82 μ-seconds. Performance depends on how well the packet filtering process is translated to the unique stream processor architecture. For example the method used for transmitting data and control messages among the pseudo-independent processor cores has a significant impact on performance. Experimental results will also show the current limitations of a CBE operating system when used to process packets. Possible solutions to these issues will be discussed.

Citation Download Citation

Richard J. Hummel and Errin W. Fulp "High-speed packet filtering utilizing stream processors", Proc. SPIE 7344, Data Mining, Intrusion Detection, Information Security and Assurance, and Data Networks Security 2009, 73440I (13 April 2009); https://doi.org/10.1117/12.818389

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available