A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have implemented a Firewall with this architecture in reconflgurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results in both speed and area improvement when it is implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields. High throughput classification invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly in terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for the worst case packet size. The Firewall rule update involves only memory re-initialization in software without any hardware change.

A do-it-yourself (DIY) switched mode power conversion laboratory

In the education of physical sciences, the role of the laboratory cannot be overemphasised. It is the laboratory exercises which enable the student to assimilate the theoretical basis, verify the same through bench-top experiments, and internalize the subject discipline to acquire mastery of the same. However the resources essential to put together such an environment is substantial. As a result, the students go through a curriculum which is wanting in this respect. This paper presents a low cost alternative to impart such an experience to the student aimed at the subject of switched mode power conversion. The resources are based on an open source circuit simulator (Sequel) developed at IIT Mumbai, and inexpensive construction kits developed at IISc Bangalore. The Sequel programme developed by IIT Mumbai, is a circuit simulation program under linux operating system distributed free of charge. The construction kits developed at IISc Bangalore, is fully documented for anyone to assemble these circuit which minimal equipment such as soldering iron, multimeter, power supply etc. This paper puts together a simple forward dc to dc converter as a vehicle to introduce the programming under sequel to evaluate the transient performance and small signal dynamic model of the same. Bench tests on the assembled construction kit may be done by the student for study of operation, transient performance and closed loop stability margins etc.

A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have Implemented a Firewall with this architecture in reconfigurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using, our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results In both speed and area Improvement when It is Implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields.High throughput classification Invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly In terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware Implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for file worst case packet size. The Firewall rule update Involves only memory re-initialiization in software without any hardware change.

Co-ordinate Interleaved Distributed Space-Time Coding for Two-Antenna-Relays Networks

Distributed space time coding for wireless relay networks when the source, the destination and the relays have multiple antennas have been studied by Jing and Hassibi. In this set-up, the transmit and the receive signals at different antennas of the same relay are processed and designed independently, even though the antennas are colocated. In this paper, a wireless relay network with single antenna at the source and the destination and two antennas at each of the R relays is considered. A new class of distributed space time block codes called Co-ordinate Interleaved Distributed Space-Time Codes (CIDSTC) are introduced where, in the first phase, the source transmits a T-length complex vector to all the relays;and in the second phase, at each relay, the in-phase and quadrature component vectors of the received complex vectors at the two antennas are interleaved and processed before forwarding them to the destination. Compared to the scheme proposed by Jing-Hassibi, for T >= 4R, while providing the same asymptotic diversity order of 2R, CIDSTC scheme is shown to provide asymptotic coding gain with the cost of negligible increase in the processing complexity at the relays. However, for moderate and large values of P, CIDSTC scheme is shown to provide more diversity than that of the scheme proposed by Jing-Hassibi. CIDSTCs are shown to be fully diverse provided the information symbols take value from an appropriate multidimensional signal set.

Byzantine-resilient distributed computing systems

This paper is aimed at reviewing the notion of Byzantine-resilient distributed computing systems, the relevant protocols and their possible applications as reported in the literature. The three agreement problems, namely, the consensus problem, the interactive consistency problem, and the generals problem have been discussed. Various agreement protocols for the Byzantine generals problem have been summarized in terms of their performance and level of fault-tolerance. The three classes of Byzantine agreement protocols discussed are the deterministic, randomized, and approximate agreement protocols. Finally, application of the Byzantine agreement protocols to clock synchronization is highlighted.

Stability of Fe3+ -VO defect pairs in polycrystalline Pb(Ti,Zr)O3

The intensity of the EPR signal with g = 5.985 arising from a ferric ion â oxygen vacancy defect pair (Fe3+ â VO) in PbTiO3, varies with the extent of PbO nonstoichiometry at constant Fe3+ content due to an increased oxygen vacancy concentration. In PZT solid solutions, the signal intensity decreases with an increase in Zr. A lower intensity is also noticed for Fe3+ â VO signals in PbZrO3. This behaviour is explained on the basis of PbO nonstoichiometry arising from independent Pb- and O-vacancies as well as the randomly distributed crystallographic shear (CS) plane defects. The contribution to PbO nonstoichiometry from CS planes is larger in high zirconium compositions of PZT.

Phase relations and dielectric properties of BaTi03 ceramics heavily substituted with neodymium

Investigations on the phase relations and dielectric properties of (1 -x)BaTiO3 + xNd2/3TiO 3 (BNT) ceramics sintered in air below 1650 K have been carried out. X-ray powder diffraction studies indicate apparent phase singularity for compositions with x < 0.3. Nd2Ti207 is detected at higher neodymium concentrations. The unit cell parameter changes continuously with neodymium content, and BaTiO3 is completely cubic at room temperature with x -- 0.0525, whereas electron diffraction studies indicate that the air-sintered BNT ceramics with x > 0.08 contain additional phases that are partly amorphous even to an electron beam. SEM observations reveal that BaTiO3 grains are mostly covered by a molten intergranular phase, and show the presence of randomly distributed Nd2Ti207 grains. Energy dispersive X-ray analysis shows the Ba-Nd-Ti ternary composition of the intergranular phase. Differential thermal analysis studies support the formation of a partial melt involving dissolution-precipitation of boundary layers of BaTiO3 grains. These complex phase relations are accounted for in terms of the phase instability of BaTiO3 with large cation-vacancy concentration as a result of heavy Nd 3+ substitution. The absence of structural intergrowth in (1 - x)BaTiO3 + xNd2/3TiO3 under oxidative conditions leads to a separation of phases wherein the new phases undergo melting and remain X-ray amorphous. BNT ceramics with 0.1 < x < 0.3 have ~eff >~ 104 with tan 6 < 0.1 and nearly flat temperature capacitance characteristics. The grain-size dependence of ee,, variations of ~eff and tan 6 with the measuring frequency, the non-ohmic resistivities, and the non-linear leakage currents at higher field-strengths which are accompanied by the decrease in eeff and rise in tan 3, are explained on the basis of an intergranular (internal boundary layer) dielectric characteristic of these ceramics.

On the moulding of population viscosity by natural selection

In this paper, we explore the conjoint evolution of dispersal and social behaviour. The model investigated is of a population distributed over a number of sites each with a carrying capacity of two adults and an episode of dispersal in the juvenile stage. The fertilities are governed by whether an individual and its neighbour are selfish or co-operative. It is shown that the best dispersal strategy for the co-operative genotype always involves lower levels of dispersal; and further that ecological conditions favouring low levels of dispersal increase the selective advantage of a co-operative genotype. Given this positive feedback, we suggest that in any taxon viscosity and co-operativity will tend to be correlated and bimodally distributed. Hence we predict the existence of two kinds of animal societies; viscous and co-operative (e.g. quasi-social wasps such as Mischocyttarus), and non-viscous and selfish (e.g. communal sphecid wasps such as Cerceris), and relatively few social groups with intermediate levels of co-operativity and viscosity. We also suggest that when one of the two sexes disperses, it will be the sex with lower potential for co-operative behaviour.

Single-Symbol ML Decodable Distributed STBCs for Partially-Coherent Cooperative Networks

A relay network with N relays and a single source-destination pair is called a partially-coherent relay channel (PCRC) if the destination has perfect channel state information (CSI) of all the channels and the relays have only the phase information of the source-to-relay channels. In this paper, first, a new set of necessary and sufficient conditions for a space-time block code (STBC) to be single-symbol decodable (SSD) for colocated multiple antenna communication is obtained. Then, this is extended to a set of necessary and sufficient conditions for a distributed STBC (DSTBC) to be SSD for. a PCRC. Using this, several SSD DSTBCs for PCRC are identified. It is proved that even if a SSD STBC for a co-located MIMO channel does not satisfy the additional conditions for the code to be SSD for a PCRC, single-symbol decoding of it in a PCRC gives full-diversity and only coding gain is lost. It is shown that when a DSTBC is SSD for a PCRC, then arbitrary coordinate interleaving of the in-phase and quadrature-phase components of the variables does not disturb its SSD property for PCRC. Finally, it is shown that the possibility of channel phase compensation operation at the relay nodes using partial CSI at the relays increases the possible rate of SSD DSTBCs from (2)/(N) when the relays do not have CSI to(1)/(2), which is independent of N.

The structures of the ammonium halides

A comparison with the alkali halides suggests that all the ammonium halides should occur in the NaCl centre-of-mass structure. Experimentally, at room temperature and atmospheric pressure, only NH4I crystallizes in this structure, while NH4F is found in the ZnO structure, and NH4C1 and NH4Br occur in the CsCl structure. We show that a distributed charge on the NH4+ ion can explain these structures. Taking charges of + 0.2e on each of the five atoms in NH4+, as suggested by other studies, we have recomputed the Madelung energy in the cases of interest. A full ionic theory including electrostatic, van der Waals and repulsive interactions then explains the centre-of-mass structures of all the four ammonium halides. The thermal and pressure transitions are also explained reasonably well. The calculated phase diagram of NH4F compares well with experiment. Barring the poorly understood NH4F(II) phase, which is beyond the scope of this work, the other features are in qualitative agreement. In particular, the theory correctly predicts a pressure transition at room temperature from the ZnO structure directly to the CsCl structure without an intermediate NaCl phase. A feature of our approach is that we do not need to invoke hydrogen bonding in NH4F.

New species of Ptychozoon (Sauria: Gekkonidae) from the Nicobar Archipelago, Indian Ocean

A new species of Ptychozoon is described from the central portion of the Nicobar Archipelago, Bay of Bengal, India. It has been formerly referred to P. kuhli, a species widely distributed in Sundaland. Ptychozoon nicobarensis sp. nov. reaches an SVL of 100.3 mm, and is diagnosable from congeneric species in showing the following combination of characters: dorsum with a tan vertebral stripe, lacking dark transverse bars; supranasals in contact; cutaneous expansions on sides of head; absence of predigital notch in preantebrachial cutaneous expansion; imbricate parachute support scales; four irregular rows of low, rounded enlarged scales on dorsum; 20-29 scales across widest portion of tail terminus; three indistinct chevrons on dorsum; 7-11 pairs of preanal pores; femoral pores absent; tail with an expanded terminal flap and weak lobe fusion at proximal border of tail terminus. The curious distribution of the new species, centred around the central Nicobars is speculated to be the result of competition with and/or predation by large gekkonid species, to the north (Gekko verreauxi) and south (G. smithii) of the group of islands occupied by the new Ptychozoon from the central Nicobars.

Performance evaluation of a distributed concurrency control algorithm

Concurrency control (CC) algorithms are important in distributed database systems to ensure consistency of the database. A number of such algorithms are available in the literature. The issue of performance evaluation of these algorithms has been recognized to be important. However, only a few studies have been carried out towards this. This paper deals with the performance evaluation of a CC algorithm proposed by Rosenkrantz et al. through a detailed simulation study. In doing so, the algorithm has been modified so that it can, within itself, take care of the redundancy in the database. The influences of various system parameters and the transaction profile on the response time and on the degree of conflict are considered. The entire study has been carried out using the programming language SIMULA on a DEC-1090 system.

An account of chronological developments in control of distributed parameter systems

Control systems arising in many engineering fields are often of distributed parameter type, which are modeled by partial differential equations. Decades of research have lead to a great deal of literature on distributed parameter systems scattered in a wide spectrum.Extensions of popular finite-dimensional techniques to infinite-dimensional systems as well as innovative infinite-dimensional specific control design approaches have been proposed. A comprehensive account of all the developments would probably require several volumes and is perhaps a very difficult task. In this paper, however, an attempt has been made to give a brief yet reasonably representative account of many of these developments in a chronological order. To make it accessible to a wide audience, mathematical descriptions have been completely avoided with the assumption that an interested reader can always find the mathematical details in the relevant references.

Towards formal specification of a distributed computing system

Onboard spacecraft computing system is a case of a functionally distributed system that requires continuous interaction among the nodes to control the operations at different nodes. A simple and reliable protocol is desired for such an application. This paper discusses a formal approach to specify the computing system with respect to some important issues encountered in the design and development of a protocol for the onboard distributed system. The issues considered in this paper are concurrency, exclusiveness and sequencing relationships among the various processes at different nodes. A 6-tuple model is developed for the precise specification of the system. The model also enables us to check the consistency of specification and deadlock caused due to improper specification. An example is given to illustrate the use of the proposed methodology for a typical spacecraft configuration. Although the theory is motivated by a specific application the same may be applied to other distributed computing system such as those encountered in process control industries, power plant control and other similar environments.

Reassessing the earthquake hazard in Kerala based on the historical and current seismicity

Given the lack of proper constraints in understanding earthquake mechanisms in the cratonic interiors and the general absence of good quality database, here we reassess the seismic hazard in the province of Kerala, a part of the aEuro cent stable continental interioraEuro cent, based on an improved historical and instrumental database. The temporal pattern of the current seismicity suggests that > 60% of the microtremors in Kerala occurs with a time lag after the peak rainfall, indicating that hydroseismicity may be a plausible model to explain the low-level seismicity in this region. Further, an increment in overall seismicity rate in the region in the recent years is explained as due to increased anthropogenic activities, which includes changes in hydrological pathways as a consequence of rapid landscape changes. Our analyses of the historical database eliminate a few events that are ascribed to this region; this exercise has also led to identification of a few events, not previously noted. The improved historical database essentially suggests that the central midland region is more prone to seismic activity compared to other parts of Kerala. This region appears to have generated larger number of significant earthquakes; the most prominent being the multiple events (doublets) of 1856 and 1953, whose magnitudes are comparable to that of the 2000/2001 (central Kerala) events. Occurrences of these historical events and the recent earthquakes, and the local geology indicative of pervasive faulting as shown by widely distributed pseudotachylite veins suggest that the NNW-SSE trending faults in central midland Kerala may host discrete potentially active sources that may be capable of generating light to moderate size earthquakes. The frequency of earthquakes in central Kerala evident from the historical database requires that the seismic codes stipulated for this region are made mandatory.