Linked IPS on Octeon multi-core processor for new generation network

Traditional single-CPU based NIDS/NIPS are more and more difficult to deploy in the new generation network because of their less processing power. To meet the requirements of high-speed, high performance and high efficiency for NIDS/NIPS in the new generation network, the scheme of linked IPS based on Octeon multi-core processor is proposed, furthermore, the new intrusion characteristics occurring in IPv6 network are also considered. Matching rules in rule library for intrusion detection, and using the new protocol analysis and flow-based detection techniques, the multiple parallel executions including the executions on control plane and data plane are distributed on multiple cores of Octeon. Adopting the mechanism of named blocks to communicate between multiple cores, and by means of the feedbacks from the cores running data plane code to the control plane core, the system has realized the high-speed linking among the flow processing, protocol analysis and the control module.