Research And Implementation Of Network Applications Identification And Content Inspection Technology Based On Multicore Mips Processor

With the rapid development in the internet area, administrators are requested to provide more powerful solution to manage and take control of the network. Network Applications Identification and Content Inspection is the key of accomplish that mission. While in high-speed and intense-traffic network environment, traditional network management solutions are unable fulfill both the performance or flexibility requirements, this paper proposes a solution based on multicore MIPS network-processor to address this problem.In this paper, the deep packet inspection technology, which is fundamental in the application identification and content inspection area, is firstly introduced, followed by the introduction of the defects in traditional solutions. Secondly a brief introduction about the network-processor, Octeon CN5860, is provided with its exclusive features, the hardware acceleration unit, the packet flow model as well as how to program this processor.Next this paper analyzes a number of network applications and services, with summarized characteristics of these applications and services. Based on those achievements, the design and implantation of application identification and content inspection functionality on the Octeon processor is introduced in following chapters. As for application identification, this paper proposes methods based on weight-calculation and connection flow respectively, to address some complex scenarios. As for content inspection, this paper proposes a packet management strategy to filter and monitor sensitive traffic. Details of the implementation processes are provided.Finally, some functional tests and performance tests are ran on this network-processor with the program running on it. This system is also tested by being connected into real network environment. The testing results show that all the functionality works correctly, with the capability to fulfill both the functional and performance requirements.