A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have implemented a Firewall with this architecture in reconflgurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results in both speed and area improvement when it is implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields. High throughput classification invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly in terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for the worst case packet size. The Firewall rule update involves only memory re-initialization in software without any hardware change.

A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have Implemented a Firewall with this architecture in reconfigurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using, our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results In both speed and area Improvement when It is Implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields.High throughput classification Invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly In terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware Implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for file worst case packet size. The Firewall rule update Involves only memory re-initialiization in software without any hardware change.

Bismuth tungsten-oxide bronzes - a study of intergrowth phases and related aspects

Reaction of bismuth metal with WO$_3$ in the absence of oxygen yields interesting bronze-like phases. From analytical electron microscopy and X-ray photoelectron spectroscopy, the product phases are found to have the general composition Bi$_x$ WO$_3$ with bismuth in the 3+ state. Structural investigations made with high resolution electron micrscopy and cognate techniques reveal that when x < 0.02, a perovskite bronze is formed. When x $\geqslant$ 0.02, however, intergrowth tungsten bronzes (i.t.b.) containing varying widths of the WO$_3$ slab are formed, the lattice periodicity being in the range 2.3-5.1 nm in a direction perpendicular to the WO$_3$ slabs. Image-matching studies indicate that the bismuth atoms are in the tunnels of the hexagonal tungsten bronze (h.t.b.) strips and the h.t.b. strips always remain one-tunnel wide. Annealed samples show a satellite structure around the superlattice spots in the electron diffraction patterns, possibly owing to ordering of the bismuth atoms in the tunnels. The i.t.b. phases show recurrent intergrowths extending up to 100 nm in several crystals. The periodicity varies considerably within the same crystal wherever there is disordered intergrowth, but unit cell dimensions can be assigned from X-ray and electron diffraction patterns. The maximum value of x in the i.t.b. phases is ca. 0.07 and there is no evidence for the i.t.b. phase progressively giving way to the h.t.b. phase with increase in x. Hexagonal tungsten bronzes that contain bismuth with x up to 0.02 can be formed by starting from hexagonal WO$_3$, but the h.t.b. phase seems to be metastable. Optical, magnetic and electron transport properties of the i.t.b. phases have been measured and it appears that the electrons become itinerant when x > 0.05.

Normal-mode sound propagation in an ocean with sinusoidal surface waves

The normal-mode solution to the problem of acoustic wave propagation in an isovelocity ocean with a wavy surface is considered. The surface wave amplitude is assumed to be small compared to the acoustic wavelength, and the method of multiple scales is employed to study the interaction between normal-mode acoustic waves and the surface waves. A nonresonant interaction causes small fluctuations of the amplitude and phase of the acoustic wave at a rate dependent on the frequency of the surface wave. Backscatter occurs if the wavenumber of the surface wave is larger than that of the acoustic wave. The interaction becomes resonant if appropriate phase-matching conditions are satisfied. In this case, two acoustic normal modes get coupled, resulting in a large-scale periodic exchange of energy from one mode to another.

Evolution of cooperation by reciprocation within structured demes

The iterative two-person Prisoners’ Dilemma game has been generalised to theN-person case. The evolution of cooperation is explored by matching the Tit For Tat (TFT) strategy (Axelrod and Hamilton 1981) against the selfish strategy. Extension of TFT toN-person situations yields a graded set of strategies from the softest TFT, which continues cooperation even if only one of the opponents reciprocates it, to the hardest, which would do so only when all the remaining opponents cooperate. The hardest TFT can go to fixation against the selfish strategy provided it crosses a threshold frequencypc. All the other TFT are invadable by the selfish (D) or the pure defector strategy, while none can invadeD. Yet, provided a thresholdpc is crossed, they can coexist stably withD. AsN, the size of the group increases, the threshold pc also increases, indicating that the evolution of cooperation is more difficult for larger groups. Under certain conditions, only the soft TFT can coexist stably against the selfish strategyD, while the harder ones cannot. An interesting possibility of a complete takeover of the selfish population by successive invasions by harder and harder TFT strategies is also presented.

Binary decompositions and acyclic schemes

It is well known that the notions of normal forms and acyclicity capture many practical desirable properties for database schemes. The basic schema design problem is to develop design methodologies that strive toward these ideals. The usual approach is to first normalize the database scheme as far as possible. If the resulting scheme is cyclic, then one tries to transform it into an acyclic scheme. In this paper, we argue in favor of carrying out these two phases of design concurrently. In order to do this efficiently, we need to be able to incrementally analyze the acyclicity status of a database scheme as it is being designed. To this end, we propose the formalism of "binary decompositions". Using this, we characterize design sequences that exactly generate theta-acyclic schemes, for theta = agr,beta. We then show how our results can be put to use in database design. Finally, we also show that our formalism above can be effectively used as a proof tool in dependency theory. We demonstrate its power by showing that it leads to a significant simplification of the proofs of some previous results connecting sets of multivalued dependencies and acyclic join dependencies.

GEODERM: geometric shape design system using an entity-relationship model

GEODERM, a microcomputer-based solid modeller, which incorporates the parametric object model, is discussed. The entity-relationship model, which is used to describe the conceptual schema of the geometric database, is also presented. Three of the four modules of GEODERM, which have been implemented are described in some detail. They are the Solid Definition Language (SDL), the Solid Manipulation Language (SML) and the User-System Interface.

Derivation of the decoupling relations for composite models from anomaly constraints and n-independence

It is shown, in the composite fermion models studied by 't Hooft and others, that the requirements of Adler-Bell-Jackiw anomaly matching and n-independence are sufficient to fix the indices of composite representations. The third requirement, namely that of decoupling relations, follows from these two constraints in such models and hence is inessential.

Design and Performance Evaluation of EXMAN: An EXtended MANchester Data Flow Computer

Data flow computers are high-speed machines in which an instruction is executed as soon as all its operands are available. This paper describes the EXtended MANchester (EXMAN) data flow computer which incorporates three major extensions to the basic Manchester machine. As extensions we provide a multiple matching units scheme, an efficient, implementation of array data structure, and a facility to concurrently execute reentrant routines. A simulator for the EXMAN computer has been coded in the discrete event simulation language, SIMULA 67, on the DEC 1090 system. Performance analysis studies have been conducted on the simulated EXMAN computer to study the effectiveness of the proposed extensions. The performance experiments have been carried out using three sample problems: matrix multiplication, Bresenham's line drawing algorithm, and the polygon scan-conversion algorithm.

Finite element analysis of moving contact in mechanically fastened joints

The Finite Element Method (FEM) has made a number of otherwise intractable problems solvable. An important aspect for achieving an economical and accurate solution through FEM is matching the formulation and the computational organisation to the problem. This was realised forcefully in the present case of the solution of a class of moving contact boundary value problems of fastener joints. This paper deals with the problem of changing contact at the pin-hole interface of a fastener joint. Due to moving contact, the stresses and displacements are nonlinear with load. This would, in general, need an interactive-incremental approach for solution. However, by posing the problem in an inverse way, a solution is sought for obtaining loads to suit given contact configuration. Numerical results are given for typical isotropic and composite plates with rigid pins. Two cases of loading are considered: (i) load applied only at the edges of the plate and (ii) load applied at the pin and reacted at a part of the edge of the plate. Load-contact relationships, compliance and stress-patterns are investigated. This paper clearly demonstrates the simplification achieved by a suitable formulation of the problem. The results are of significance to the design and analysis of fastener joints.

Compressive Sensing For Sparsely Excited Speech Signals

Compressive sensing (CS) has been proposed for signals with sparsity in a linear transform domain. We explore a signal dependent unknown linear transform, namely the impulse response matrix operating on a sparse excitation, as in the linear model of speech production, for recovering compressive sensed speech. Since the linear transform is signal dependent and unknown, unlike the standard CS formulation, a codebook of transfer functions is proposed in a matching pursuit (MP) framework for CS recovery. It is found that MP is efficient and effective to recover CS encoded speech as well as jointly estimate the linear model. Moderate number of CS measurements and low order sparsity estimate will result in MP converge to the same linear transform as direct VQ of the LP vector derived from the original signal. There is also high positive correlation between signal domain approximation and CS measurement domain approximation for a large variety of speech spectra.

Finite element analysis of moving contact in mechanically fastened joints

The Finite Element Method (FEM) has made a number of otherwise intractable problems solvable. An important aspect for achieving an economical and accurate solution through FEM is matching the formulation and the computational organisation to the problem. This was realised forcefully in the present case of the solution of a class of moving contact boundary value problems of fastener joints. This paper deals with the problem of changing contact at the pin-hole interface of a fastener joint. Due to moving contact, the stresses and displacements are nonlinear with load. This would, in general, need an interactive-incremental approach for solution. However, by posing the problem in an inverse way, a solution is sought for obtaining loads to suit given contact configuration. Numerical results are given for typical isotropic and composite plates with rigid pins. Two cases of loading are considered: (i) load applied only at the edges of the plate and (ii) load applied at the pin and reacted at a part of the edge of the plate. Load-contact relationships, compliance and stress-patterns are investigated. This paper clearly demonstrates the simplification achieved by a suitable formulation of the problem. The results are of significance to the design and analysis of fastener joints.

Relaminarization in highly accelerated turbulent boundary layers

The mean flow development in an initially turbulent boundary layer subjected to a large favourable pressure gradient beginning at a point x0 is examined through analyses expected a priori to be valid on either side of relaminarization. The ‘quasi-laminar’ flow in the later stages of reversion, where the Reynolds stresses have by definition no significant effect on the mean flow, is described by an asymptotic theory constructed for large values of a pressure-gradient parameter Λ, scaled on a characteristic Reynolds stress gradient. The limiting flow consists of an inner laminar boundary layer and a matching inviscid (but rotational) outer layer. There is consequently no entrainment to lowest order in Λ−1, and the boundary layer thins down to conserve outer vorticity. In fact, the predictions of the theory for the common measures of boundary-layer thickness are in excellent agreement with experimental results, almost all the way from x0. On the other hand the development of wall parameters like the skin friction suggests the presence of a short bubble-shaped reverse-transitional region on the wall, where neither turbulent nor quasi-laminar calculations are valid. The random velocity fluctuations inherited from the original turbulence decay with distance, in the inner layer, according to inverse-power laws characteristic of quasi-steady perturbations on a laminar flow. In the outer layer, there is evidence that the dominant physical mechanism is a rapid distortion of the turbulence, with viscous and inertia forces playing a secondary role. All the observations available suggest that final retransition to turbulence quickly follows the onset of instability in the inner layer.It is concluded that reversion in highly accelerated flows is essentially due to domination of pressure forces over the slowly responding Reynolds stresses in an originally turbulent flow, accompanied by the generation of a new laminar boundary layer stabilized by the favourable pressure gradient.

Rapid in situ processing for real-time holographic interferometry

Experiments are described which show that a monobath can be used for rapid in situ processing in a liquid gate for real-time holographic interferometry. This also permits utilization of a very simple solution handling system. Changes in emulsion thickness are reduced to an acceptable level and problems of matching refractive indices are eliminated by exposing and viewing the holograms in water. Excellent null patterns are obtained and real-time holographic interferometry can be carried out over long periods of time.

Fracture Behavior of Multidirectional DCB Specimen: Higher-Order Beam Theories

Mathematical models, for the stress analysis of symmetric multidirectional double cantilever beam (DCB) specimen using classical beam theory, first and higher-order shear deformation beam theories, have been developed to determine the Mode I strain energy release rate (SERR) for symmetric multidirectional composites. The SERR has been calculated using the compliance approach. In the present study, both variationally and nonvariationally derived matching conditions have been applied at the crack tip of DCB specimen. For the unidirectional and cross-ply composite DCB specimens, beam models under both plane stress and plane strain conditions in the width direction are applicable with good performance where as for the multidirectional composite DCB specimen, only the beam model under plane strain condition in the width direction appears to be applicable with moderate performance. Among the shear deformation beam theories considered, the performance of higher-order shear deformation beam theory, having quadratic variation for transverse displacement over the thickness, is superior in determining the SERR for multidirectional DCB specimen.