ACHIEVING 100 GB/S URL FILTERING WITH COTS MULTI-CORE SYSTEMS

Surachai Chitpinityon ； Surasak Sanguanpong ； Supaporn Erjongmanee ； Kasom Koht-Arsa

《International Journal of Electronic Commerce Studies》 8卷1期 (2017/06) Pp. 77-95

https://doi.org/10.7903/ijecs.1483

摘要

URL filtering is an essential tool used by Internet Service Providers (ISPs) and organizations to restrain clients from accessing non-secured or illegal web content. Designing a URL filtering method that achieves a high bit rate of 100 Gb/s and beyond for international ISPs is a challenging task. High-performance URL filtering with multi-gigabit rate capacity requires a fast URL matching algorithm and an enhanced packet processing technique. In this paper, we tackle these challenges by design and development of a software-based URL filtering system to support 100 Gb/s bandwidth. Our aim is to build a system that runs on a single commercial off-the-shelf (COTS) server with multi-core CPUs. We propose a compact URL representation using AVL tree and a multi-core/multi-thread filtering technique with session hijacking and fast packet processing framework. Performance measurements results show successful URL filtering operating at 100 Gb/s in a real network testbed.

關鍵字

URL Filtering ； Web Filtering ； Session Hijacking ； 100 GbE ； COTS ； AVL

參考文獻

Deibert, J. G.(ed.)(2008).The practice and policy of global internet filtering.Cambridge MA:MIT Press.

Banday, M.T.,Shah, N.A.(2016).A concise study of web filtering.Sprouts.10(31)

Goodney, A.,Narayan, S.,Bhandwalkar, V.,Cho, Y.H.(2010).Pattern based packet filtering using NetFPGA in DETER Infrastructure.1st Asia NetFPGA Developers Workshop.(1st Asia NetFPGA Developers Workshop).:

Garnica, J.,Lopez-Buedo, S.,Lopez, V.,Aracil, J.,Hidalgo, J.M.G.(2012).A FPGA-based scalable architecture for URL legal filtering in 100GbE Networks.International Conference on Reconfigurable Computing and FPGAs.(International Conference on Reconfigurable Computing and FPGAs).:

Chen, H.,Liu, R.,Chang, Y.,Huang, Y.,Wu, P.,Yeh, A.,Huang, N.(2002).The design and implementation of network-processor based gigabit web filtering system.Taiwan Area Network Conference (TANET2002).(Taiwan Area Network Conference (TANET2002)).: