作者: Jun Li , Xiaohe Hu , Jiaqi Gao
DOI:
关键词: Bit array 、 Firewall (construction) 、 Header 、 Computer science 、 Computer engineering 、 Processing delay 、 Real-time computing 、 Throughput 、 Scalability 、 Data compression 、 Networking hardware
摘要: Packet classification is one of the core techniques in network devices such as firewall, IDS and IPS. Tens thousands rules pose great pressure on algorithm terms memory requirements throughput. In this paper, a new packet algorithm, named Fixed-Length Compression Bit Vector (FLCBV), proposed based compression scheme FLC. Compared with traditional algorithms, FLC more adaptive to environment, especially large scale ruleset multi-field header. Experimental results demonstrate that FLCBV takes only 65% compared algorithms without losing much