|
|
DPDK Accelerated Firewall
Holubář, Jiří ; Fukač, Tomáš (referee) ; Vrána, Roman (advisor)
Nowadays, when almost everyone uses the Internet, network traffic security must also be ensured. This is what firewall helps with. Some routes require higher bandwidth than others. This thesis explores possibilities of using the DPDK library when implementing the firewall in order to achieve the highest possible bandwidth.
|
|
|
Hardware acceleration of packet classification using TC Flower
Benc, Marek ; Fujcik, Lukáš (referee) ; Libich, Jiří (advisor)
Sdružení CESNET vyvíjí vysokorychlostní programovatelné síťové karty COMBO (aktuálně až s dvěma 100Gbps porty) zaměřené na analýzu a zpracování síťových dat. Karty obsahují FPGA čip, který dovoluje uživatelům přesně definovat způsob, jakým má být síťový provoz zpracován. Jedno z možných využití těchto karet je jako síťový přepínač pro virtuální stroje v data centru. Tato práce je zaměřená na implementaci podpory TC Flower offloadu pro karty COMBO (software a FPGA firmware). Jedná se o všeobecné rozhraní pro instalaci flow pravidel typu shoda+akce do SmartNICů, a dovoluje nám použít je pro správu síťového provozu mezi virtuálními stroji a vnějším světem. Cílem je úspora procesorových cyklů hostitelského stroje.
|
|
|
Packet Processing Using DPDK Library
Procházka, Aleš ; Lichtner, Ondrej (referee) ; Grégr, Matěj (advisor)
This master thesis focuses on filtering and forwarding packets in high speed networks. Firstly the DPDK framework is introduced, which is used for fast packet processing. This project also introduces a design of application for high-speed packet filtering and design of tools for making it easier to work with that application. Subsequently, the implementation of this design is introduced and testing with comparison of results with a standard firewall
|
|
|
Packet Filtering in Computer Networks
Faron, Jan ; Kováčik, Michal (referee) ; Kajan, Michal (advisor)
This bachelor’s thesis deals with packet classification in computer networks. In the introduction it describes some areas where packet classification is used. Then, necessary theoretical background is introduced, together with requirements for classification algorithm. It describes four high-level approaches to the packet classification. It describes principle of various algorithms for each high-level approach. Algorithm EffiCuts is chosen for detailed analysis and implementation. This packet classification algorithm is compared with other packet classification algorithms from NetBench library.
|
|
|
Packet Filtering in Computer Networks
Holuša, Jan ; Kováčik, Michal (referee) ; Kajan, Michal (advisor)
This bachelor's thesis deals with packet classification in computer networks. It describes algorithms which are implemented in experimental Netbench framework. For some of them, there are examples of data structures and searching methods. Part of this thesis is implementation of modular packet classification algorithm. Another part of this thesis describes experiments with this algorithm to find its suitable parameters and experiments with Netbench algorithms for comparison of their space and computational complexity.
|
|
|
Analysis of Parameters of Packet Classification Rule Sets
Sabo, Jozef ; Orsák, Michal (referee) ; Matoušek, Jiří (advisor)
A theme of bachelor's thesis is an analysis of rules used for packet classification in computer networks. A theoretical part of the thesis introduces packet classification and describes the role of classification rules. This part also presents the format of classification rules utilized in real tools. Based on these information, a tool able to analyze IP 5-tuple classification rules in any format was designed and implemented. Output of the implemented tool is a parameter file containing different statistics and probability distributions of examined rule sets. This parameter file can be used for generating synthetic rule sets using ClassBench and ClassBench-ng tools. The final part of the thesis examines parameter files created by the implemented tool from available real rule sets.
|
|
|
Packet Classification Algorithms
Machala, Jiří ; Puš, Viktor (referee) ; Kajan, Michal (advisor)
The main aim of this work is interpretation and implementation of HyperCuts algorithm. It also covers the problematic of packet classification in general - it sums up the basic classification theory and introduces well-known classification methods. It concentrates mostly on evaluation of HyperCuts in comparison to HiCuts algorithm and analyses the assets of optimizations described in professional literature. It proposes a new way to limit the number of memory accesses by combining HyperCuts and HiCuts for single classifier.
|
|
|
Packet Filtering in Computer Networks
Šrůtka, Petr ; Kováčik, Michal (referee) ; Kajan, Michal (advisor)
This bachelor thesis contains an introduction to packet classification, types of packet classification techniques and different metrics. It describes different algorithms used for packet classification and implementation of Recursive flow classification algorithm is also part of this bachelors thesis. It presents different configuration parameters of RFC algorithm and describes its advantages and disadvantages. This work is concluded with a set of experiments describing characteristics of implemented algorithm together with comparison of other classification approaches.
|
|
|
Packet Classification Using FPGA Technology
Puš, Viktor ; Tobola, Jiří (referee) ; Kořenek, Jan (advisor)
This diploma thesis deals with packet classification in computer networks. The problem of packet classification is described, together with requirements for classification algorithm. Then, necessary theoretical background is introduced. Contemporary approaches to the classification are described, together with the critique of the current state of the field. The main focus of the work is the new algorithm of packet classification based on problem decomposition. Unique property of the algorithm is constant time complexity in terms of external memory accesses. Algorithm implemetation is proposed, using FPGA and one external memory. Planned prototype may achieve throughput of 64 Gbit/s in the worst case.
|
|
|
Analysis of WiFi Traffic at the BUT
Lacina, Vojtěch ; Matoušek, Petr (referee) ; Čejka, Rudolf (advisor)
This work inquires into problem of current wifi traffic on VUT. The traffic has been captured with tcpdump program, anonymized and analyzed in process of creating this work. All this in order to get insight into it's nature. Resulting informations imply the need for traffic shaping which is described later in work. This work tries to determine most fitting means of traffic shaping which would result in improved quality of connection for interactive applications as well as greater satisfaction of provider (VUT) and users.
|
guest ::
