基于sketch的软件定义测量数据平面硬件模型  

Sketch-based data plane hardware model for software-defined measurement

作　　者：戴冕[1,2] 程光[1,2] 

机构地区：[1]东南大学计算机科学与工程学院,江苏南京211189 [2]东南大学教育部计算机网络和信息集成重点实验室,江苏南京211189

出　　处：《通信学报》2017年第10期113-121,共9页Journal on Communications

基　　金：国家高技术研究发展计划("863"计划)基金资助项目(No.2015AA015603);赛尔网络下一代互联网技术创新基金资助项目(No.NGII20150108)~~

摘　　要：提出一种基于sketch数据结构的软件定义测量数据平面硬件模型,并在以现场可编程逻辑门阵列(FPGA)为核心的可编程网络设备Net Magic上进行了实现。利用部署在硬件FPGA高速SRAM中的通用sketch数据结构高效地采集数据平面流量数据,控制平面收集并缓存统计数据,提供给上层的测量应用使用。使用count-min sketch和2-universal散列函数实现了在高速流量下实时的分组处理和流量统计;使用Bloom filter在控制平面恢复流量的原始5元组信息,解决了sketch数据结构的不可逆问题。使用CERNET骨干网流量数据对原型系统进行的评估结果表明,该原型系统使用极其有限的硬件资源实现了对较大规模网络流量的实时测量,同时具备较好的测量精度。A sketch-based data plane hardware model for software-defined measurement was introduced, and it was implemented in the programmable network device Net Magic. A generic sketch model for collecting flow-level data using high-speed memories on the FPGA was proposed, the control plane collected and cached the data for further process. Count-min sketch and 2-universal hash functions in the SRAM of FPGA for real-time traffic counting of high-speed traffic were implemented; Bloom filter was used to rebuild the original 5-tuple data which solved the irreversibility of sketch. The CERNET backbone trace to evaluate the prototype system was used, the result shows that it has the ability to use the limited hardware resource to measure a large amount of network traffic data with a proper measurement accuracy at the same time.

关 键 词：软件定义测量 现场可编程逻辑门阵列 全域散列 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]