Method of multi-dimensional Packet Classification based on muti-bit segmentation

Abstract

A multidimensional grouping classification method based on multi-bit division includes following steps: 1) establish a decision tree root node, and assign the full set of the rules set of classification algorithm to the root node; 2) recursively divide each node of decision tree with the corresponding rules set, and generate a number of sub-nodes, and each sub-node corresponds to a rules subset after the division; until the scale of all the rules sets of the nodes is smaller than a certain predetermined threshold; in which, the said division method including the following steps in turn: convert the rules table into two-dimensional bit array, and evaluate the performance when each bit generating decision tree, and according to the performance influence scale, select the bit to generate decision tree. This invention uses bit value as the basis of node separating, and based on the new view of bit division, to establish the decision tree, so the established tree is small in scale, and the comprehensive performance is very good in time / space.

Description

technical field [0001] The invention relates to a grouping classification method in a high-speed router and a firewall. Background technique [0002] At present, all TCP / IP networks are interconnected through routers, and the Internet is an international network in which thousands of IP subnets are interconnected through routers. This kind of network is called a router-based network (router based network), forming an "internet network" with routers as nodes. In the "internet network", the router is not only responsible for forwarding the IP packets, but also responsible for communicating with other routers to jointly determine the routing selection and maintain the routing table of the "internet network". [0003] The firewall is composed of software and hardware devices, and is located between the computers of enterprises or network groups and the external channel (Internet), restricting external users' access to internal networks and managing internal users' access to ext...

AI Technical Summary

Problems solved by technology

[0024] The Hypercuts algorithm is applied to routers or firewalls to establish a decision tree structure to realize the data flow classification function. It improves the generation algorithm of the decision tree on the basis of the Hicuts algorithm. The average number of rules and the number of empty nodes on the point, resulting in the generated decision tree is still not optimal (or close to optimal) in terms of balance and overall scale, which will inevitably affect the overall performance of routers or firewalls

Images