基于CAM/TCAM分组的Multi-Gigabit速率模式匹配引擎

为了提高NIDS中模式匹配模块的处理性能,在分析相关研究的基础上,提出了一种具有multi-gigabit线速度处理能力的模式匹配引擎.该引擎采用按模式串长度和数目不同,在CAM或TCAM中均衡分组存储的方法,以及待测串切换等技术实现了multi-gigabit速率的处理性能和有效的存储空间利用.通过采用多个匹配模块并行处理的方式可以进一步提高引擎的处理能力.在200 MHz的时钟工作频率下,系统输出的性能可以达到6 Gbit/s以上.

Multi-Gigabit Rate Pattern-Matching Engine Using Grouping CAM/TCAM

In order to improve the performance of pattenvmatching module in NIDS, an efficient engine for multigigahit rate, line-speed pattern-matching is proposed after analyzing a large amount of related work. By grouping and evenly storing patterns into CAM or TCAM acoording to their lengths and amount, as well as using payloadswitching technique, this engine not only reaches multi-gigabit rate performance, but also has high storage efficiency. System performance can be improved further by using multiple process modules in parallel. In a 200 MHz Clock implementation, system throughput can reach more than 6 Gbit/s.