A High-Speed TCP Reassembly Architecture with Early Inspection Mechanism for Pattern Matching

碩士 === 國立臺灣大學 === 電機工程學研究所 === 97 === Network intrusion detection software is becoming insufficient while the traffic on the internet is increasing. As a result, developers seek to design internet specific intellectual circuits, often known as TCP offload engines (TOEs), to substitute for software s...

Full description

Bibliographic Details
Main Authors: Po-Han Huang, 黃柏涵
Other Authors: 王勝德
Format: Others
Language:en_US
Online Access:http://ndltd.ncl.edu.tw/handle/03067385995525283127
Description
Summary:碩士 === 國立臺灣大學 === 電機工程學研究所 === 97 === Network intrusion detection software is becoming insufficient while the traffic on the internet is increasing. As a result, developers seek to design internet specific intellectual circuits, often known as TCP offload engines (TOEs), to substitute for software solutions. TCP reassembly, which is traditionally managed by operating system, plays an important role in the design of TOEs. This thesis presents a hardware implementation of TCP reassembly system dedicated for pattern matching that utilizes the limited memory resources and a carefully designed scheduling mechanism that informs the pattern matching unit to inspect the packet payloads in the correct order. The proposed architecture achieves more than 5 Gbit/s throughput. It also presents a novel mechanism called early inspection to keep the receive buffer from being overwhelmed that packet-loss might cause to common TCP reassembly units.