面向内容安全的报文解析结构研究

Research on Content Security-Oriented Packet Parsing Architecture

灵活准确的萃取报文协议字段和有效载荷对深度包检测至关重要,提出了一种面向内容安全的协议解析结构实现高速网络下协议的灵活解析。首先定义内容萃取树来灵活描述协议的解析关系,其次设计了一种并行流水结构来满足线速协议解析,同时针对内容萃取树节点到流水线映射的失衡问题,提出一种节点均衡映射算法完成不同流水线级上节点数目的平衡,最后在NetFPGA-10G平台上仿真验证了结构的可行性,结果表明该结构在性能和资源占用上取得了较好的平衡。

A Content Security-Oriented Packet Parsing Architecture（CSOPPA） was proposed to achieve high-speed network protocol parses flexibly.First,the content extraction-trie（CE-trie） was defined to describe the parsing relationship of the protocol flexibly,then a parallel pipeline was designed to meet the wire-speed parsing,and a node balanced mapping algorithm（NBMA） was proposed to achieve the balance of the number of nodes among different pipeline stages.Finally,the feasibility of CSOPPA was verified on NetFPGA-10G platform.The simulation results showed that CSOPPA achieves the balance between the performance and resource consumption.