Network flow filtering system and method based on field programmable gate array (FPGA)

Abstract

A network flow filtering system and method based on a field programmable gate array (FPGA) belongs to the field of network application. The method includes first utilizing a heredity K-means algorithm to conduct off-line practice on network historical flow to generate a flow classification knowledge base, utilizing the heredity K-means algorithm to recognize and distinguish flow classes online by combining the flow classification knowledge base and determining whether the flow is required to be filtered according to a recognition result. The recognition method based on the heredity K-means solves the problem of low accuracy in recognition of novel application protocol flow of a traditional method. The online recognition and the filtering process are achieved based on the FPGA technology. An online recognition and filtering internet protocol (IP) core operating in the FPGA can process network data packages in real time, extracts characteristic attributes of each flow, calculates and recognizes the flow class in real time and filters the flow in real time according to the recognition result. The system and method has good real-time performance and cannot obviously affect effective bandwidth of the network in the implementation process.

Description

technical field [0001] The invention belongs to the field of network applications, in particular to an FPGA-based network flow filtering system. The present invention also relates to a method for FPGA-based network traffic filtering Background technique [0002] At present, the influence of the Internet on people is becoming more and more extensive, and the management of network traffic is also more important. Application layer traffic filtering is an important practice of traffic management. The basis of traffic filtering is traffic identification. The continuous emergence of new protocols and applications poses severe challenges to traditional traffic identification methods. Many new protocols use random port numbers to invalidate the port-based identification method, and the method based on load analysis is also powerless for some new applications that do not analyze the characteristic field or use encryption to hide the characteristic. In order to meet the challenges, ...

AI Technical Summary

Problems solved by technology

[0003] There is online real-time identification operation in the traffic filtering process. Traditional operating platforms such as PC platforms have the disadvantages of low efficiency and poor real-time performance, while ASIC-based platforms have low flexibility and low development efficiency. Even for NP-based platforms, the optimization The content is also limited to the general operations of network data processing, and cannot accelerate high-level algorithms

Images