计算机应用 ›› 2018, Vol. 38 ›› Issue (8): 2375-2380.DOI: 10.11772/j.issn.1001-9081.2018010069

• 网络与通信 • 上一篇    下一篇

基于独立规则集位提取的包分类压缩方法

王孝龙, 刘勤让, 林森杰, 黄雅静   

  1. 国家数字交换系统工程技术研究中心, 郑州 450002
  • 收稿日期:2018-01-11 修回日期:2018-04-09 出版日期:2018-08-10 发布日期:2018-08-11
  • 通讯作者: 王孝龙
  • 作者简介:王孝龙(1993-),男,河南民权人,硕士研究生,主要研究方向:协议解析、数据包处理;刘勤让(1975-),男,河南睢县人,研究员,博士,主要研究方向:宽带信息网络、芯片系统设计;林森杰(1993-),男,广东汕头人,硕士研究生,主要研究方向:拟态安全;黄雅静(1984-),女,湖南长沙人,博士,助理研究员,主要研究方向:信号处理。
  • 基金资助:
    国家科技重大专项资助项目(2016ZX01012101);国家自然科学基金资助项目(61572520,61521003)。

Compression method based on bit extraction of independent rule sets for packet classification

WANG Xiaolong, LIU Qinrang, LIN Senjie, Huang Yajing   

  1. National Digital Switching System Engineering & Technological Research Center, Zhengzhou Henan 450002, China
  • Received:2018-01-11 Revised:2018-04-09 Online:2018-08-10 Published:2018-08-11
  • Supported by:
    This work is partially supported by the National Science and Technology Major Project (2016ZX01012101), the National Natural Science Foundation of China (61572520, 61521003).

摘要: 针对当前互联网中多匹配域流表规模不断膨胀、匹配宽度不断增大,导致硬件存储压力过大的问题,提出了一种基于独立规则子集位提取(BEIS)的压缩方案。首先,根据多匹配域之间的逻辑关系进行匹配域合并,从而减少匹配域个数、减小流表位宽;其次,对合并后的规则集进行独立规则子集分割,将分割后的子集进行可区分的位提取,从而使用部分位完成匹配查找功能,进一步缩减所用的三态内容寻址寄存器(TCAM)空间;最后,提出了实现该方案的硬件查找架构。仿真结果表明,对于OpenFlow流表,该方案在一定的时间复杂度下,比匹配域裁剪(FT)方案减少了20%的存储空间;另外,对于实际应用中常见的访问控制列表、防火墙等包分类规则集,可实现20%到40%的压缩比率。

关键词: 包分类, OpenFlow, 多匹配域条目, 独立规则集, 位提取

Abstract: The continuous expansion in scale of multi-field entries and the growing increase in bit-width bring heavy storage pressure in hardware on the Internet. In order to solve this problem, a compression method based on Bit Extraction of Independent rule Subsets (BEIS) was proposed. Firstly, some fields were merged based on the logical relationships among multiple match fields, thus reducing the number of match fields and the width of flow tables. Secondly, with the division of independent rule subsets for the merged rule set, some differentiate bits in the divided subsets were extracted to achieve the matching and searching function, further reducing the used Ternary Content Addressable Memory (TCAM) space. Finally, the lookup hardware architecture of this method was put forward. Simulation results show that, with certain time complexity, the storage space of the proposed method can be reduced by 20% compared with Field Trimmer (FT) in OpenFlow flow table; in addition, for common packet classification rule sets such as access control list and firewall in practical application, the compression ratio of 20%-40% can be achieved.

Key words: packet classification, OpenFlow, multi-field entry, independent rule set, bit extraction

中图分类号: