CAM01-1: A Customized TCAM Architecture for Multi-Match Packet Classification

Most conventional packet classifiers find the highest priority filter that matches the packet. However, new networking applications such as network intrusion detection systems (NIDS) and load balancers require all (or the first few) matching results in packet classification. A TCAM -based architecture optimized for multiple match search is introduced in this paper. We propose a renovated TCAM design that can find all or the first r matches in a packet filter set. Our scheme partitions the filter set and performs the multi-match search on one partition only. A VLSI implementation of our classifier in 0.18 mum technology can achieve speed that is 1-2 order of magnitude higher than software based approaches. Power consumption is reduced by 40% which is far better than the conventional hardware based multi-match designs.

[1]  Jonathan S. Turner,et al.  Packet classification using extended TCAMs , 2003, 11th IEEE International Conference on Network Protocols, 2003. Proceedings..

[2]  Anand Rangarajan,et al.  Algorithms for advanced packet classification with ternary CAMs , 2005, SIGCOMM '05.

[3]  David E. Taylor,et al.  On using content addressable memory for packet classification , 2005 .

[4]  T. V. Lakshman,et al.  SSA: a power and memory efficient scheme to multi-match packet classification , 2005, ANCS '05.

[5]  T. V. Lakshman,et al.  Gigabit rate packet pattern-matching using TCAM , 2004, Proceedings of the 12th IEEE International Conference on Network Protocols, 2004. ICNP 2004..

[6]  Nen-Fu Huang,et al.  Fast and scalable multi-TCAM classification engine for wide policy table lookup , 2005, 19th International Conference on Advanced Information Networking and Applications (AINA'05) Volume 1 (AINA papers).

[7]  Aaas News,et al.  Book Reviews , 1893, Buffalo Medical and Surgical Journal.

[8]  Chung-Hsun Huang,et al.  Design of high-performance CMOS priority encoders and incrementer/decrementers using multilevel lookahead and multilevel folding techniques , 2002 .

[9]  Nen-Fu Huang,et al.  Design of multi-field IPv6 packet classifiers using ternary CAMs , 2001, GLOBECOM'01. IEEE Global Telecommunications Conference (Cat. No.01CH37270).

[10]  Haoyu Song,et al.  Efficient packet classification for network intrusion detection using FPGA , 2005, FPGA '05.

[11]  Andrew Mason,et al.  A power-optimized 64-bit priority encoder utilizing parallel priority look-ahead , 2004, 2004 IEEE International Symposium on Circuits and Systems (IEEE Cat. No.04CH37512).

[12]  T. V. Lakshman,et al.  Efficient multimatch packet classification and lookup with TCAM , 2005, IEEE Micro.

[13]  Bin Liu,et al.  TCAM-based distributed parallel packet classification algorithm with range-matching solution , 2005, Proceedings IEEE 24th Annual Joint Conference of the IEEE Computer and Communications Societies..