Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies 2020
DOI: 10.1145/3386367.3431290
|View full text |Cite
|
Sign up to set email alerts
|

DeepMatch

Abstract: Restricting data plane processing to packet headers precludes analysis of payloads to improve routing and security decisions. Deep-Match delivers line-rate regular expression matching on payloads using Network Processors (NPs). It further supports packet reordering to match patterns in flows that cross packet boundaries. Our evaluation shows that an implementation of DeepMatch, on a 40 Gbps Netronome NFP-6000 SmartNIC, achieves up to line rate for streams of unrelated packets and up to 20 Gbps when searches sp… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1

Citation Types

0
3
0

Year Published

2021
2021
2024
2024

Publication Types

Select...
6
2

Relationship

0
8

Authors

Journals

citations
Cited by 32 publications
(3 citation statements)
references
References 56 publications
0
3
0
Order By: Relevance
“…Early SmartNICs [8], [9], [10] provided a limited set of in-pipeline processing capabilities for delivering packets to user space [11], traffic shaping [12], or tailored offloads for TCP packet processing [13]. Emerging SmartNICs provide much richer hardware capabilities such as regular expression matching [14], compression [15], encryption [16], and SDN controllers [17]. Current commercial SmartNIC products exist at multiple points along this design space and range from generally programmable in-pipeline processing capabilities [18], [19], SmartNICs that provide in-pipeline processing with general programs and predefined hardware functions [20], and the most capable SmartNICs providing a complete feature set that enables packet processing both alongside and within the packet pipeline using both predefined programs and programmable processors [5], [21].…”
Section: A From Smartnics To Dpusmentioning
confidence: 99%
“…Early SmartNICs [8], [9], [10] provided a limited set of in-pipeline processing capabilities for delivering packets to user space [11], traffic shaping [12], or tailored offloads for TCP packet processing [13]. Emerging SmartNICs provide much richer hardware capabilities such as regular expression matching [14], compression [15], encryption [16], and SDN controllers [17]. Current commercial SmartNIC products exist at multiple points along this design space and range from generally programmable in-pipeline processing capabilities [18], [19], SmartNICs that provide in-pipeline processing with general programs and predefined hardware functions [20], and the most capable SmartNICs providing a complete feature set that enables packet processing both alongside and within the packet pipeline using both predefined programs and programmable processors [5], [21].…”
Section: A From Smartnics To Dpusmentioning
confidence: 99%
“…DeepMatch [15] provides a line-rate DPI primitive in the data plane using Netronome SMART. DeepMatch showcases new applications in the data plane that were not realized before, such as Quality of Service (QoS) policies and network monitoring that require processing application layer information.…”
Section: B Deep Packet Inspection (Dpi) In P4mentioning
confidence: 99%
“…However, with the increasing use of advanced encryption, traditional DPI tools struggle to meet the latest network traffic needs and requirements. This has resulted in the necessity for more advanced DPI methods capable of processing encrypted traffic using machine learning (ML) algorithms [8]. Similarly, machine learning (ML) is built on the concept of features, which are parameters within a dataset.…”
Section: Introductionmentioning
confidence: 99%