A benchmarking methodology for NPU-based stateful firewall

It is currently a challenge to evaluate and compare network processor-based (a.k.a. NPU-based) applications due to the heterogeneity of the application designs and hardware architectures. Many research works have been done in the area of packet classifications, which were directed towards proposing...

Full description

Saved in:
Bibliographic Details
Published in9th Asia-Pacific Conference on Communications (IEEE Cat. No.03EX732) Vol. 3; pp. 904 - 908 Vol.3
Main Authors Lee Eng Kean, Nor, S.B.M.
Format Conference Proceeding
LanguageEnglish
Published IEEE 2003
Subjects
Application software
Computer architecture
Computer networks
Hardware
Microelectronics
Network address translation
Open systems
Standards organizations
Terminology
Turing machines
Online AccessGet full text

Cover

More Information
Summary:It is currently a challenge to evaluate and compare network processor-based (a.k.a. NPU-based) applications due to the heterogeneity of the application designs and hardware architectures. Many research works have been done in the area of packet classifications, which were directed towards proposing high-speed firewall implementation algorithms. However, few researches focus on providing standard benchmarking methodology for a specific class of firewall. This paper presents a benchmarking methodology for NPU-based stateful firewall. The aim is to allow 'apple-to-apple' comparison among similar firewalls available in the market, and to provide practical benchmarks that exhibit realistic performance numbers. The key aspects of this work are benchmark specifications, separation of benchmark granularity in a layered manner, and the means of measurement. Finally, a system-level benchmark is applied on a stateful firewall implemented on Intel's IXP1200 network processor as a proof-of-concept of this work.
ISBN:0780381149
9780780381148
DOI:10.1109/APCC.2003.1274229