Fast Packet Classification Algorithm in Hardware

Packet classification, hardware

Packet classification is an important operation for applications such as routers, firewalls or intrusion detection systems. Many algorithms and hardware architectures for packet classification have been created, but none of them can compete with the speed of TCAMs in the worst case. I propose new hardware-based algorithm for packet classification. The solution is based on problem decomposition and is aimed at the highest network speeds. A unique property of the algorithm is the constant time complexity in terms of external memory accesses. The algorithm performs exactly two external memory accesses to classify a packet. Using FPGA and one commodity SRAM chip, a throughput of 150 million packets per second can be achieved.

Packet classification is an important operation for applications such as
routers, firewalls or intrusion detection systems. Many algorithms and
hardware architectures for packet classification have been created, but
none of them can compete with the speed of TCAMs in the worst case.
I propose new
hardware-based algorithm for packet classification. The solution is based
on problem decomposition and is aimed at the highest network speeds. A unique
property of the algorithm is the constant time complexity in terms of
external memory accesses. The algorithm performs exactly two external
memory accesses to classify a packet. Using FPGA and one commodity SRAM
chip, a throughput of 150 million packets per second can be achieved.