Deep Packet Inspection Based on Many-Core Platform

Ya-Ru Zhan¹, Zhao-Shun Wang²

¹Department of Software Engineering, University of Science & Technology Beijing, Beijing, China.
²Department of Computer Science & Technology, University of Science & Technology Beijing, Beijing, China.

DOI: 10.4236/jcc.2015.35001                

Abstract

With the development of computer technology, network bandwidth and network traffic continue to increase. Considering the large data flow, it is imperative to perform inspection effectively on network packets. In order to find a solution of deep packet inspection which can appropriate to the current network environment, this paper built a deep packet inspection system based on many-core platform, and in this way, verified the feasibility to implement a deep packet inspection system under many-core platform with both high performance and low consumption. After testing and analysis of the system performance, it has been found that the deep packet inspection based on many-core platform TILE_Gx36 [1] [2] can process network traffic of which the bandwidth reaches up to 4 Gbps. To a certain extent, the performance has improved compared to most deep packet inspection system based on X86 platform at present.

Keywords

Many-Core Platform, Deep Packet Inspection, Application Layer Protocol, TILE_Gx36

Conflicts of Interest

The authors declare no conflicts of interest.

References

[1]	Tilera Inc. (2013) ArchOverview-TILE-Gx.
[2]	Tilera Inc. (2013) TIL Encore-Gx-Card-UG.
[3]	Lin, Q. (2013) The Design and Implementation of P2P Flow Based on DPI. Zhejiang University of Technology.
[4]	Huang, K. and Zhang, D.F. (2011) An Index-Split Bloom Filter for Deep Packet Inspection. Science China (Information Sciences), 1, 23-37. http://dx.doi.org/10.1007/s11432-010-4132-4
[5]	Dharmapurikar, S., Krishnamurthy, P., Sproull, T. and Lockwood, J. (2004) Deep Packet Inspection Using Parallel Bloom Filters. IEEE Micro Magazine.
[6]	Ai, X. (2013) The Design and Optimization of DPI System on Many-Core Environment. Harbin Institute of Technology.
[7]	Tilera Inc. (2013) mPIPE-Guide.
[8]	Snort: An Open Source Network Intrusion Prevention and Detection System (2010).
[9]	Wei, Y., Zhou, Y.F. and Guo, L.C. (2011) The Recognition and Analysis of Packet with Open DPI. Computer Engineering, S1, 98-100.