Multicore Flow Processor with Wire-Speed Flow Admission Control

다국어 초록 (Multilingual Abstract)

We propose a flow admission control (FAC) for setting up a wire-speed connection for new flows based on their negotiated bandwidth. It also terminates a flow that does not have a packet transmitted within a certain period determined by the users. The FAC can be used to provide a reliable transmission of user datagram and transmission control protocol applications. If the period of flows can be set to a short time period, we can monitor active flows that carry a packet over networks during the flow period. Such powerful flow management can also be applied to security systems to detect a denial-of-service attack. We implement a network processor called a flow management network processor (FMNP), which is the second generation of the device that supports FAC. It has forty reduced instruction set computer core processors optimized for packet processing. It is fabricated in 65-nm CMOS technology and has a 40-Gbps process performance. We prove that a flow router equipped with an FMNP is better than legacy systems in terms of throughput and packet loss.

참고문헌 (Reference)

1 "https://www.opennetworking.org/"

2 "http://www.xelerated.com/en/hx/"

3 "http://www.ezchip.com/products.htm"

4 "http://opennetsummit.org/index.html"

5 "http://en.wikipedia.org/wiki/User_Datagram_Protocol"

6 G.M. Amdahl, "Validity of the Single-Processor Approach to Achieving Large Scale Computing Capabilities vol. 30" ACM Press 483-485, 1967

7 J. Postel, "Transmission Control Protocol"

8 N. Brownlee, "Traffic Flow Measurement: Architecture"

9 "The Cisco QuantumFlow Processor: Cisco’s Next Generation Network Processor"

10 B.Y. Yoon, "Scalable Flow-Based Network Processor for Premium Network Services" 436-440, 2011

11 Nam-Seok Ko, "Quality-of-Service Mechanisms for Flow-Based Routers" 한국전자통신연구원 30 (30): 183-193, 2008

12 J.W. Roberts, "Quality of Service by Flow Aware Networking" Phil. Trans. Royal Soc 2000

13 S. Govind, "Packet Reordering in Network Processors" 2007

14 N. McKeown, "OpenFlow: Enabling Innovation in Campus Networks" 38 (38): 69-74, 2008

15 "OpenFlow Switch Specification, V1.2" Open Netw. Foundation 2011

16 A. Kumar, "Nonintrusive TCP Connection Admission Control for Bandwidth Management of an Internet Access Link" 2000

17 M. Jarschel, "Modeling and Performance Evaluation of an OpenFlow Architecture"

18 "Micro transport protocol"

19 "Junos OS MPLS Applications Configuration Guide R12.1"

20 R. Mortier, "Implicit Admission Control" 2000

21 J. Rajahalme, "IPv6 Flow Label Specification"

22 "Guide to Intrusion Detection and Prevention Systems (IDPS)" NIST Special Publication 800-894, 2007

23 J. Lakkakorpi, "Flexible Admission Control for DiffServ Access Networks" 5244 : 2003

24 V. Paxson, "End-to-End Internet Packet Dynamics" 7 (7): 1999

25 E. Kohler, "Datagram Congestion Control Protocol (DCCP)"

26 H.K. Yi, "DDoS Detection Algorithm Using the Bidirectional Session" 160 : 191-203, 2011

27 P. Pan, "A Measurement Study on Video Acceleration Service" 2009