Many-core Platform Based Dpi Device Supporting Query Of Network Products Profile

Deep Packet Inspection(DPI)devices are widely used in Policy Control and Charging,user behavior analysis,intrusion detection and prevention,etc.With the rapid growth of Internet traffic,DPI devices' performance needs to be improved.Hardware-based DPI devices have satisfying processing ability,however they are lack of flexibility and expensive to maintain,although the software-based DPI is flexible but does not perform well.The emergence of many-core processor has brought a compromise of performance and flexibility.In addition,the DPI devices need a external product information database to obtain the associated information and the product information database is constructed by crawling and parsing pages of the target websites,such as video,e-commerce,the website for reading and so on.Therefore,the research for the many-core platform based DPI device supporting query of network products profile is significant for the realization of real-time DPI.Based on the tilera many-core platform,this thesis designs a DPI device which supports the query of network products profile,and evaluates and optimizes the performance of the device with video website as an example.The main work is as following:Firstly,the overall design of the device is presented,and two parallel processing structures are designed including run-to-complete and software-pipeline according to the logic function in order to compare the performance of both to find the better structure for the proposed device.Secondly,the device's important functional modules are designed and implemented,including packet receiving and parsing module,application identification and query module,table query and update module,log integration and output module.High-speed packet reception and HTTP DNS protocol parsing are handled by packet receiving and parsing module.Application identification and query module adopts the multi-mode matching algorithm to identify Web applications and extracts products ID according to the traffic characteristics of each application,and then queries products profile.Table query and update module is for the recording and updating of DNS session information.Log integration and output module is responsible for the integration and output of protocol analysis data.Finally,the many-core based DPI device is tested and a variety of performance optimization schemes are proposed.The device's support for HTTP and DNS protocol analysis is verified,and then this thesis tests the ability of two parallel processing structures to analysis two protcol respectively,the results show that after the core type optimization,memory homing strategy optimization,huge page optimization,implementation of software-pipeline achieves higher performance.One of the many-core processors of the device analyzes the protocol with a throughput of 9 Gbps,and 50 Kpps of simulated packet traffic with product ID,the DNS parsing capacity of 1.17 Gbps when the average packet length of the simulated traffic is 133 bytes.The 2U size of the many-core based DPI device has two many-core processors and the overall performance is equivalent to six x86 servers' processing performance.In summary,this research can provide a reference for high performance and high flexibility network packet processing application development.