| With the rapid development of the Internet, we all have experienced thecreativity and convenient it brings to us. However, along with the network dataexplosion-like growth, invasion of viruses and malicious attacks are becoming morecommon and network security has become increasingly prominent. In such anenvironment, a variety of network security technologies emerged.Deep Packet Inspection is one of the most widely used content securitytechnologies. It is able to compensate for the traditional firewall technologies whichare limited to network layer and transport layer but lack of safety testing in theapplication layer. On the other hand, multi-core technology is the future trend ofprocessor development. Compared with the traditional processors, a multi-coreprocessor has a higher performance per watt, which can significantly reduce theenergy consuming in a widely deployed system. This paper studies the performanceof the deep packet inspection system in multi-core platform.Firstly, we design and implement a deep packet inspection system which workson the X86platform. In order to improve the scalability, this system is designed toconsist of a functional base and the upper plugins which are used to analyze theapplication data. The functional base provides a unified data interface for the upperplugins and the plugins which are based on the various application protocols candynamically access the system.Secondly, we migrate and optimize the system in multi-core environment. Herewe use the Gx36platform which uses the MIPS instruction set and the newtwo-dimensional interconnect structure, with high degree of parallelism and complexstorage mode characteristics. We work out an interface for sending and receivingpackets and solve the problem of parallelization and memory formation.Lastly, we tested the deep packet inspection system in X86and the deep packetinspection system in Gx36using offline and online data traffic. The test results showthat system in Gx36platform has lower power consumption at the same performancewith the system in X86platform. The performance per watt is3times better and thevolume performance ratio is close to2. |
