scispace - formally typeset
Journal ArticleDOI

Router plugins: a software architecture for next-generation routers

Reads0
Chats0
TLDR
A high-performance, modular, extended services router software architecture in the Net BSD operating system kernel that allows code modules, called plugins, to be dynamically added and configured at run time and can forward packets up to three times faster than the best effort kernel.
Abstract
Present-day Internet protocol routers typically employ monolithic operating systems that are not easily upgradable and extensible. With the rapid rate of protocol development it is becoming increasingly important to dynamically upgrade router software in an incremental fashion. We have designed and implemented a high-performance, modular, extended services router software architecture in the Net BSD operating system kernel. This architecture allows code modules, called plugins, to be dynamically added and configured at run time. One of the novel features of our design is the ability to bind different plugins to individual flows; this allows for distinct plugin implementations to seamlessly coexist in the same runtime environment. We achieve high performance through a carefully designed modular architecture, an innovative packet classification algorithm that is highly efficient, and by caching that exploits the flow-like characteristics of Internet traffic. Compared to a monolithic best effort kernel, our implementation requires an average increase in packet processing overhead of only 8%, or 600 cycles per packet when running on an Intel Pentium Pro at 233 MHz. By shortcutting the forward loop based on the per-flow state we establish, we can forward packets up to three times faster than the best effort kernel.

read more

Citations
More filters
Proceedings ArticleDOI

Fast and scalable layer four switching

TL;DR: Two new algorithms for solving the least cost matching filter problem at high speeds are described, based on a grid-of-tries construction and works optimally for processing filters consisting of two prefix fields using linear space.
Patent

Enforcing network service level agreements in a network element

TL;DR: In this paper, the authors propose a mechanism to enforce network service-level agreements in a network infrastructure element by copying an application-layer message without disrupting the forwarding of the application layer message.
Patent

Secure system for allowing the execution of authorized computer program code

TL;DR: In this article, a multi-level proactive whitelist approach is employed to secure a computer system by allowing only the execution of authorized computer program code thereby protecting the computer system against malicious code such as viruses, Trojan horses, spyware, and/or the like.
Proceedings ArticleDOI

A modular approach to packet classification: algorithms and results

TL;DR: A novel approach to packet classification which combines a heuristic tree search with the use of filter buckets is proposed and studied, which is unique in the sense that it can adapt to the input packet distribution by taking into account the relative filter usage.
Patent

Method and apparatus for generating a network topology representation based on inspection of application messages at a network device

TL;DR: In this paper, the authors present a method for generating a network topology representation based on inspection of application messages at a network device. But the method is limited to the case where the network device receives a request packet, routes the packet to the destination, and extracts and stores correlation information from a copy of the request packet in order to determine application-to-application mapping and calculate application response times.
References
More filters

An Architecture for Differentiated Service

TL;DR: An architecture for implementing scalable service differentiation in the Internet achieves scalability by aggregating traffic classification state which is conveyed by means of IP-layer packet marking using the DS field [DSFIELD].
Journal ArticleDOI

Random early detection gateways for congestion avoidance

TL;DR: Red gateways are designed to accompany a transport-layer congestion control protocol such as TCP and have no bias against bursty traffic and avoids the global synchronization of many connections decreasing their window at the same time.

Security Architecture for the Internet Protocol

R. Atkinson
TL;DR: This document describes an updated version of the "Security Architecture for IP", which is designed to provide security services for traffic at the IP layer, and obsoletes RFC 2401 (November 1998).
Journal ArticleDOI

Analysis and simulation of a fair queueing algorithm

TL;DR: In this article, a fair gateway queueing algorithm based on an earlier suggestion by Nagle is proposed to control congestion in datagram networks, based on the idea of fair queueing.
Proceedings ArticleDOI

Analysis and simulation of a fair queueing algorithm

TL;DR: It is found that fair queueing provides several important advantages over the usual first-come-first-serve queueing algorithm: fair allocation of bandwidth, lower delay for sources using less than their full share of bandwidth and protection from ill-behaved sources.