Many-fields Packet Classification Using R-Tree and Field Concatenation Technique

07/05/2022
by   Aladdin Abdulhassan, et al.
0

Software-defined Networking is an approach that decouples the software-based control plane from the hardware-based data plane proposed for enterprise networks; OpenFlow is the most famous flexible protocol that can manage network traffic between the control and the data plane. Software-Defined Networking (SDN) requires up to 18 fields of the packets header to be checked against a big many-fields ruleset to categorize packets into flows, the process of categorizing packets into flows is called packet classification. Network switches process all packets belonging to the same flow in a similar manner by applying the same actions defined in the corresponding rule. Packet classification facilitates supporting new services such as filtering, blocking unsafe sites traffic, routing packets based on the packet's header information, and giving priority to specific flows. High-performance algorithms for many-field packet classification had been gained much interest in the research communities. This paper presents a new method to implement the many-fields packet classification of SDN flow table using Rectangle Tree (R-Tree). In this method, source and destination IP addresses from each flow table entry have been converted to a two-dimensional point. The remainders of the rule's fields have been concatenated into a single field by taking the most important bits with rules' ID in order to be inserted into the R-tree, for each rule an effective small binary flag is used to indicate the field's size, type, and ranges. Subsequently, searching is performed on the rectangle tree to find the matched rules according to the highest priority. In the simulation using the class-bench databases, the results show that this method achieves very good performance, classification speed and reduces the number of memory accesses significantly.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
12/26/2017

Matching model of flow table for networked big data

Networking for big data has to be intelligent because it will adjust dat...
research
01/04/2021

Machine Learning based Malicious Payload Identification in Software-Defined Networking

Deep packet inspection (DPI) has been extensively investigated in softwa...
research
11/18/2016

Fast and reconfigurable packet classification engine in FPGA-based firewall

In data communication via internet, security is becoming one of the most...
research
09/17/2021

Acila: Attaching Identities of Workloads for Efficient Packet Classification in a Cloud Data Center Network

IP addresses and port numbers (network based identifiers hereafter) in p...
research
05/04/2023

Flow Correlator: A Flow Table Cache Management Strategy

Switching, routing, and security functions are the backbone of packet pr...
research
10/08/2020

Strategies for Integrating Controls Flows in Software-Defined In-Vehicle Networks and Their Impact on Network Security

Current In-Vehicle Networks (IVNs) connect Electronic Control Units (ECU...
research
03/12/2018

FDRC: Flow-Driven Rule Caching Optimization in Software Defined Networking

With the sharp growth of cloud services and their possible combinations,...

Please sign up or login with your details

Forgot password? Click here to reset