POPE and PaNeL : Fast lookup in routing tables

Resolution - deciding on the appropriate action for a packet, based on a provided table of rules - is an extremely important problem in computer networks. Both routing and filtering require fast resolution. In this paper, we explore the possibility of using XMT, a recently-implemented FPGA-based general parallel machine, to perform resolution. While XMT is still not mature, our early results show that our systems, POPE and PaNeL, outperform the state-of-the-art serial solution by one to two orders of magnitude. Thus, we suggest that XMT may become a viable solution for fast packet processing in the future.

[1]  Daniel Hoffman,et al.  Blowtorch: a framework for firewall test automation , 2005, ASE.

[2]  George Varghese,et al.  Multiway range trees: scalable IP lookup with fast updates , 2004, Comput. Networks.

[3]  Guy E. Blelloch,et al.  Prefix sums and their applications , 1990 .

[4]  Keshav Pingali,et al.  The tao of parallelism in algorithms , 2011, PLDI '11.

[5]  Jan Jürjens,et al.  Specification-Based Testing of Firewalls , 2001, Ershov Memorial Conference.

[6]  Jens H. Krüger,et al.  A Survey of General‐Purpose Computation on Graphics Hardware , 2007, Eurographics.

[7]  Uzi Vishkin,et al.  Algorithmic approach to designing an easy-to-program system: Can it lead to a HW-enhanced programmer's workflow add-on? , 2009, 2009 IEEE International Conference on Computer Design.

[8]  Bernhard Plattner,et al.  Scalable high speed IP routing lookups , 1997, SIGCOMM '97.

[9]  Bradley C. Kuszmaul,et al.  Cilk: an efficient multithreaded runtime system , 1995, PPOPP '95.

[10]  Srinivasan Keshav,et al.  Issues and trends in router design , 1998, IEEE Commun. Mag..

[11]  Hrishikesh B. Acharya,et al.  Linear-time verification of firewalls , 2009, 2009 17th IEEE International Conference on Network Protocols.

[12]  S. Sahni,et al.  O(log n) dynamic packet routing , 2002, Proceedings ISCC 2002 Seventh International Symposium on Computers and Communications.

[13]  Hrishikesh B. Acharya,et al.  Firewall verification and redundancy checking are equivalent , 2011, 2011 Proceedings IEEE INFOCOM.

[14]  Hrishikesh B. Acharya,et al.  Projection and Division: Linear-Space Verification of Firewalls , 2010, 2010 IEEE 30th International Conference on Distributed Computing Systems.

[15]  Uzi Vishkin,et al.  PRAM-on-chip: first commitment to silicon , 2007, SPAA '07.

[16]  Devavrat Shah,et al.  Fast Updating Algorithms for TCAMs , 2001, IEEE Micro.

[17]  Nick McKeown,et al.  Routing lookups in hardware at memory access speeds , 1998, Proceedings. IEEE INFOCOM '98, the Conference on Computer Communications. Seventeenth Annual Joint Conference of the IEEE Computer and Communications Societies. Gateway to the 21st Century (Cat. No.98.