Real-time pre-processing system with hardware accelerator for mobile core networks

随着用作通信终端或平台的移动设备越来越多,电信基础设施安全受到的威胁日益严重。作为一种移动核心网关的旁路设备,网络探测工具可以收集和分析所有经过网关的数据流量,并进行安全检测。但随着核心网链路带宽的不断提高,如何有效降低安全检测系统的处理压力是一项重要挑战。在本文中,我们设计并评估了一个由硬件加速器和多核处理器构成的报文实时预处理系统,能够快速恢复移动核心网链路中每个封装和压缩的数据包,并有效地将还原后的流量分配到多个后端安全检测系统。使用大量真实数据对系统进行测试,结果表明,我们的预处理系统可以处理所有类型的通信协议报文,并实现至少18 Gb/s的处理速率。

With the rapidly increasing number of mobile devices being used as essential terminals or platforms for communication, security threats now target the whole telecommunication infrastructure and become increasingly serious. Network probing tools, which are deployed as a bypass device at a mobile core network gateway, can collect and analyze all the traffic for security detection. However, due to the ever-increasing link speed, it is of vital importance to offioad the processing pressure of the detection system. In this paper, we design and evaluate a real-time pre-processing system, which includes a hardware accelerator and a multi-core processor. The implemented prototype can quickly restore each encapsulated packet and effectively distribute traffic to multiple back-end detection systems. We demonstrate the prototype in a well-deployed network environment with large volumes of real data. Experimental results show that our system can achieve at least 18 Gb/s with no packet loss with all kinds of communication protocols.