Fast Firewall Implementations for Software-based ...

Fast Firewall Implementations for Software-based Routers Lili Qiu

[email protected] Cornell University

George Varghese

[email protected] University of California, San Diego

Subhash Suri

[email protected] Washington University in St. Louis

o]†Œ>¦Eq1\D;I+"'+„&'!
%;½J&1 C
?B/B'
3%.LBJ .Q
(Q+8 2 #J ’.
''6"'6B 43
(.+%B"!'"$"' I
NO  .LB342&(J.& .QP8 &"'(, R 4  !"$# A1+-?S>TVUXW$Y*Z*[]\_^/TGU`W a*[]\bT_&+JUb"'(. QW$Y [ &(J.2
+  +&I+*h B  (w."! 2"'%.L"'(l+8'"$ & 6B "'(,?
3
"'(102 "' (3%gKBJ&13@  &1D"'(,x%& +X&(J.y 9 ("'(,)    H#(J.…+& ? ("'(,„   Lop"'(,5„^:†:‡ˆ
"$@ 2"'‰%*"'
(q>+*h/ 1+QB  
 &,
+(l+/;>
& 8%& B
(.Š"'b+J‹ 2 2
 4: %M3"$  2 (3Š"! 2"'!& ‹
+C:UbŒ…+ 2
&?‡8}&(J.x„ Ž 
%;I(`W$Y%*[m# !. ¦Š ¦Š 
H"' 2' 2 (DG#  ;>''  h1 %\ h („!& ,BJDB
(/ 
1  
D. 4"! 2' 2 (3V†Œ>¦EG
 & 8. ("!&'@m
&@m hD"' 8&(J.Â
3
D.Q*@ D +D_
 VJ& K
(  (3 & G
(A +("’M3 b7
& C  ."'(, 9 / ’&"$#J%*"!
(}7
& #  ;>'' "'(,Q 
 "' 8;CH+J%h
B h%.H"'(H %&# 1;6'O.&B  
 &(J.l  
   8&'!
3 &%.w
2 I%&(5B .1  2"'(%.QBD4L+ . "'(J*"!
(„..D  >&G;> !O&>
+ G+%. G#J !.G
Š+IJ&1  1+„>+8
  ..  I&(J.Q=IŒ>TC¡*¢8^ T~
 I(D AB  n/oop'
,Ci5q r&sEt q %* 1+"' 2\&;I+1 6iÆ"'K+>(D AB b
&J#J$ K&(J.k?"'b+>(D H@ B 6
&b !&"'#%.l# !./W Ã\ŠY%“*[] h1 6    (3>   & +}W$Y%D\EYY\ Y*a%[C"'(."'%& +&1+…;>
 ?%&2B +J%hD"'
 A.
3 ?(
?* "!2"'( %&‹.&B  &%.w
(Q+"'6
B h&"'
(Š\+  J& 6"'(D 
&@ .  ! h  O™1Ç  +("’M3 /'"'2 (%.5!A%& +eW$Y*a%[>&(J.    "'hUb'
%;yŒC!"$#%&"'
(-W$Y%&[+J&G F'
"'G+6   I
  F"'"'(,5.&B   h1 %\‹"$> %&C.&&BJ ?+%h  ,!& "$@ "' +J&?%&(|B2 F'
"' .Š\_ +? h (}+2"! 2' ?J   !"$#%&"'
(…&!,
 "$+ 26;I"''b.
2M3"$8;> !p
+"'5M3 "'
(½ 2
"'h* „l
)  @m F 2"'(9+9d;C
x"' 2!  J&1 Š !"$#J%*"'
( 2 1+("' 2;>KD(
%;-
vg>È –—˜&špÉ–—˜&7 DÊ/œ ™–É—Ë

&(J. œ ™1š‹•JÉÌD 7 3Ê2špÉ™™1œ + 8"!I&(l"'(3  "'(,2.'"$d4LB v;>  ( + wd;C
£"' 2'w+ 2  g…BD &1D"'(,-%& +e %M3"$  2+ '%&H
& ,QB%(£+%hH
3
 A;>
& %&L%& +|"' 2  K   ("!(,   I+*h 2"!("' LO%& +„"' 2 IBI+J%h 
3
& :;C
   
& , h1 %\;C/#J(J.L"'(, %E.*B I+J*6+8"' 28
 BJ&13@  &1D"'(,)%* 1+½"'„ A+eB  l+J(+9;C
 5 }B
(.Š< cv(%.5
op'
,>iwqr&s‹t%\+? & +…"' 2"'8
($492
((387 @ 
& op
’ (l
($4Q?7 
& I
Ed;>
qG;>
& 8+J&(l
"' Lp< R "' 2"'!& $43\ ;C#(J.+J&G G ("'(,8   8op"!(,/^8†‡e
"' 2"!‰ &"'
(JqK+ A+|B  A
 &,l
?+J(|+2;>
 %QB
(J.|
&8i r ;C
’.l"!(."'%*
& .„+8J I L*1+"'(, +"'#J$ %