MpFPC-A Parallelization Method for Fast Packet Classification

Abstract

Packet classification is the core technology of network layer and an important means to ensure the security of network system. With the rapid development of network technology, higher requirements are put forward for the speed of network packet classification. This paper improves the traditional single thread package classification framework, A new parallelization method for fast packet classification (MpFPC) based on distributed computing is proposed, the method adopts the packet classification idea based on decision tree, but compared with the traditional algorithm, a rule mapping preprocessing process is added before constructing the classification decision tree, which effectively removes the rule redundancy and conflict, so as to avoid the rule replication problem of the traditional decision-tree-based method. In addition, the method can group the rules and data packets at the same time, which improves the packet classification efficiency. Experimental results show that MpFPC method has high classification efficiency and has obvious speed advantage compared with Uscuts method with time complexity of O(k log n). In addition, the test results also show that the classification speed of MpFPC will increase with the increasing number of computing nodes, which provides a new possible way to meet the classification wire-speed requirement.