基于CAM/TCAM分组的Multi-Gigabit速率模式匹配引擎  

Multi-Gigabit Rate Pattern-Matching Engine Using Grouping CAM/TCAM

作　　者：何一凡[1,2] 徐国银 沈海斌[1,2] 

机构地区：[1]浙江大学超大规模集成电路设计研究所,杭州310027 [2]杭州文化广播电视集团,310004

出　　处：《电子器件》2007年第1期158-161,共4页Chinese Journal of Electron Devices

摘　　要：为了提高NIDS中模式匹配模块的处理性能,在分析相关研究的基础上,提出了一种具有multi-gigabit线速度处理能力的模式匹配引擎.该引擎采用按模式串长度和数目不同,在CAM或TCAM中均衡分组存储的方法,以及待测串切换等技术实现了multi-gigabit速率的处理性能和有效的存储空间利用.通过采用多个匹配模块并行处理的方式可以进一步提高引擎的处理能力.在200MHz的时钟工作频率下,系统输出的性能可以达到6Gbit/s以上.In order to improve the performance of pattenvmatching module in NIDS, an efficient engine for multigigahit rate, line-speed pattern-matching is proposed after analyzing a large amount of related work. By grouping and evenly storing patterns into CAM or TCAM acoording to their lengths and amount, as well as using payloadswitching technique, this engine not only reaches multi-gigabit rate performance, but also has high storage efficiency. System performance can be improved further by using multiple process modules in parallel. In a 200 MHz Clock implementation, system throughput can reach more than 6 Gbit/s.

关 键 词：入侵检测 模式匹配 CAM/TCAM 

分 类 号：TN915.08[电子电信—通信与信息系统]