A Modular System for FPGA-Based TCP Flow Processing in High-Speed Networks

Field Programmable Gate Arrays (FPGAs) can be used in Intrusion Prevention Systems (IPS) to inspect application data contained within network flows. An IPS operating on high-speed network traffic can be used to stop the propagation of Internet worms and to protect networks from Denial of Services (DoS) attacks. When used in the backbone of a core network, the device will be exposed to millions of active flows simultaneously. In order to protect the data in each connection, network devices will need to track the state of every flow. This must be done at multi-gigabit line rates without introducing significant delays. This paper describes a high performance TCP processing system called TCP-Processor which supports flow processing in high-speed networks utilizing multiple devices. This circuit provides stateful flow tracking, TCP stream reassembly, context storage, and flow manipulation services for applications which process TCP data streams. A simple client interface eases the co...

• Type: Conference
• Year: 2004
• Where: FPL
• Authors: David V. Schuehler, John W. Lockwood
• Keywords: FPL 2004, Performance Tcp Processing, TCP Data Streams, TCP Stream Reassembly