Research And Design Of High-speed Distribution Machine For NIPS Based On Network Processor IXP2400

NIPS was an active intrusion defense system based on network. It should provide non-interrupted service while in use. Thus it required high real-time and high precision, or else the bottleneck of throughput was caused.Traditional NIPS based on ASIC was not good at flexible and intelligent dealings. However, network processor had good system structure design and optimized network process units, which made it capable of processing in high speed and also high flexibility.A high-speed distribution machine for NIPS based on Intel IXP2400 was introduced in present dissertation. With reference to Intel IXA Portability Framework in the course of design, a model of layered architecture was brought forward, and the design about the concurrency among the microengines and among the microengines treads was also considered. Then a fast hash distribution algorithm based on 5-tuple was put forward, which achieved line-rate distribution. Coding and emluator of distribution machine were completed by IXA SDK4.1 Workbench which was provided by Intel Corp. The results of emluator indicated the fast hash distribution algorithm achieved line-rate transmittability with POS packets under OC-48 bandwidth. Thus it achieved requirement of high-speed distribution under Giga network.