Packet classification as a fundamental network primitive

Packet classification is an ubiquitous and key building block of many critical network functions like routing, firewalling, and load balancing. However, classification is currently implemented, deployed and configured in an ad-hoc manner. Reliance on ad-hoc mechanisms make classification hard to configure, inefficient and inflexible. In this thesis, we address the above limitations by elevating packet classification as a fundamental network primitive. We do so by introducing a new classification layer in the network protocol stack, and by defining two control plane protocols—policy-based classifier deployment and generic classification offload. In policy-based classifier deployment, packets are explicitly redirected through the classifiers specified by network policy. Generic classification offload provides a signaling mechanism that enables different entities to collaboratively implement classification. Through prototype implementations, testbed experiments and formal analysis, we demonstrate that our solution simplifies deployment and configuration, and improves flexibility, efficiency and performance of packet classification.