Research On The Network Data Filtering Technology Based On Octeon Multi-Core Network Processor

With the increasing of network bandwidth and flow, the traditional host has suffered a bottleneck in the process of filtering network packets. In the application of network security, a faster and higher performance network data filtering platform is required increasingly.In this paper, the traditional data filtering technology was studied and analyzed. For the bottleneck of filtering network packets in the high-speed network environment, we proposed a data flow queue filtering model based on the OCTEON multi-core processor, which is referred to FQM model. The model makes full use of work groups, the mechanism of scheduling between nuclear, the mixed-mode of control plane and data plane in the OCTEON processor. By the rational allocation of work groups and nuclear on different functional modules, and the rational use of control plane and data plane, the filtration speed and matching rate of packets in the high-speed network environment is improved significantly.In this model, single packet and associated packet are processed in different ways, the single packet is matched directly, and the associated fragmentation packet are matched in group before entering the protocol stack, which avoiding the unnecessary operations that a lot of fragmented packets match the rules after re-assembling in the stack,and improving the speed of data matching,and reducing the consumption of system resources.In this paper, for the proposed FQM model, a data filtering system has been designed on the OCTEON68XX platform, and the design and implementation of control plane and data plane in the system, especially packet capturing module, packet matching module and packet forwarding module, have been elaborated in detail. Simulation results prove that the system can improve the speed arid accuracy of packets filtration significantly in the high-speed network environment.