• DocumentCode
    1779
  • Title

    A Distributed TCAM Coprocessor Architecture for Integrated Longest Prefix Matching, Policy Filtering, and Content Filtering

  • Author

    Zhiping Cai ; Zhijun Wang ; Kai Zheng ; Jiannong Cao

  • Author_Institution
    Dept. of Network Eng., Nat. Univ. of Defense Technol., Changsha, China
  • Volume
    62
  • Issue
    3
  • fYear
    2013
  • fDate
    Mar-13
  • Firstpage
    417
  • Lastpage
    427
  • Abstract
    Longest Prefix Matching (LPM), Policy Filtering (PF), and Content Filtering (CF) are three important tasks for Internet nowadays. It is both technologically and economically important to develop integrated solutions to the effective execution of the three tasks. To this end, in this paper, we propose a distributed Ternary Content Addressable Memory (TCAM) coprocessor architecture. The integrated solution exploits the complementary lookup load and storage load requirements of the three tasks to balance the lookup load and storage load among the TCAMs. A prefix filtering-based CF algorithm is designed to reduce the lookup load and a novel cache system is developed to dynamically handle the lookups from overloaded TCAMs. Simulations based on real-world traffic traces show that the proposed solution can perform all three tasks given a 10 Gbps line rate using only the resources required to perform just the CF task given a 10 Gbps line rate.
  • Keywords
    Internet; computer network security; content-addressable storage; coprocessors; memory architecture; telecommunication traffic; Internet; LPM; PF; cache system; complementary lookup load requirements; content filtering; distributed TCAM coprocessor architecture; distributed ternary content addressable memory coprocessor architecture; integrated longest prefix matching; integrated solution; policy filtering; prefix filtering-based CF algorithm; real-world traffic traces; storage load requirements; Computer architecture; Coprocessors; Filtering; Heuristic algorithms; IP networks; Intrusion detection; Pattern matching; Longest prefix matching; content filtering; intrusion detection; policy filtering;
  • fLanguage
    English
  • Journal_Title
    Computers, IEEE Transactions on
  • Publisher
    ieee
  • ISSN
    0018-9340
  • Type

    jour

  • DOI
    10.1109/TC.2011.255
  • Filename
    6112752