A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have implemented a Firewall with this architecture in reconflgurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results in both speed and area improvement when it is implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields. High throughput classification invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly in terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for the worst case packet size. The Firewall rule update involves only memory re-initialization in software without any hardware change.

Dynamic analysis and simulation of a VSC based Back-to-Back HVDC link

This paper presents the modeling and analysis of a voltage source converter (VSC) based back-to-back (BTB) HVDC link. The case study considers the response to changes in the active and reactive power and disturbance caused by single line to ground (SLG) fault. The controllers at each terminal are designed to inject a variable (magnitude and phase angle) sinusoidal, balanced set of voltages to regulate/control the active and reactive power. It is also possible to regulate the converter bus (AC) voltage by controlling the injected reactive power. The analysis is carried out using both d-q model (neglecting the harmonics in the output voltages of VSC) and three phase detailed model of VSC. While the eigenvalue analysis and controller design is based on the d-q model, the transient simulation considers both models.

Latency, Power and Performance Trade-offs in Network-on-Chips by Link Microarchitecture Exploration

This paper presents a power, latency and throughput trade-off study on NoCs by varying microarchitectural (e.g. pipelining) and circuit level (e.g. frequency and voltage) parameters. We change pipelining depth, operating frequency and supply voltage for 3 example NoCs - 16 node 2D Torus, Tree network and Reduced 2D Torus. We use an in-house NoC exploration framework capable of topology generation and comparison using parameterized models of Routers and links developed in SystemC. The framework utilizes interconnect power and delay models from a low-level modelling tool called Intacte[1]1. We find that increased pipelining can actually reduce latency. We also find that there exists an optimal degree of pipelining which is the most energy efficient in terms of minimizing energy-delay product.

A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have Implemented a Firewall with this architecture in reconfigurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using, our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results In both speed and area Improvement when It is Implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields.High throughput classification Invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly In terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware Implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for file worst case packet size. The Firewall rule update Involves only memory re-initialiization in software without any hardware change.

Conformational transitions in a Pro-Pro peptide on dissolution of single crystals

The peptide t-butyloxycarbonyl-α-aminoisobutyryl-L-prolyl-L-prolyl-N-methylamide has been shown to adopt an extended structure in the solid state. The Pro-Pro segment occurs in the poly-proline II conformation. On dissolution of single crystals at not, vert, similar 233°K, a single species corresponding to the all Image peptide backbone is observed by 270 MHz 1H NMR. On warming, Image to Image isomerization about the Pro-Pro bond is facilitated. Both Image (ψ not, vert, similar−50°) and Image (ψ not, vert, similar 130°) rotamers about the Pro3 Cα---CO bond are detectable in the Pro-Pro Image conformer, at low temperature. These observations demonstrate unambiguously the large differences in the solid state and solution conformations of a Pro-Pro sequence.

A DC-link Capacitor Voltage Balancing with CMV Elimination using only the Switching State Redundancies for a Reduced Switch Count Multi-Level Inverter fed IM Drive

Common mode voltage (CMV) variations in PWM inverter-fed drives generate unwanted shaft and bearing current resulting in early motor failure. Multilevel inverters reduce this problem to some extent, with higher number of levels. But the complexity of the power circuit increases with an increase in the number of inverter voltage levels. In this paper a five-level inverter structure is proposed for open-end winding induction motor (IM) drives, by cascading only two conventional two-level and three-level inverters, with the elimination of the common mode voltage over the entire modulation range. The DC link power supply requirement is also optimized by means of DC link capacitor voltage balancing, with PWM control., using only inverter switching state redundancies. The proposed power circuit gives a simple power bits structure.

A computerized methodology for structural synthesis of kinematic chains: Part 3 - application to the new case of 10-link, three- freedom chains

The unified computer program for structural synthesis and analysis developed in Part 1 has been employed to derive the new and complete collection of 97 10-link, three-freedom simple-jointed kinematic chains. The program shows that of these chains, 3 have total freedom, 70 have partial freedom and the remaining 24 have fractionated freedom and that the 97 chains yield a total of 676 distinct mechanisms.

Case study of a microcomputer-minicomputer link

A microcomputer-minicomputer link, useful in the implementation of network configurations involving microcomputers and minicomputers, is described. The link, between a PDP-11 minicomputer and an 8080 microcomputer is over a serial line between the DZ11 module of the minicomputer and the UART interface of the microcomputer. The details of the essential hardware and software aspects of the link are presented.

Cyclic Peptide Disulfides - Solution And Solid-State Conformation Of Boc-Cys-Pro-Aib-Cys-S-S-Bridge-Nhme,A Disulfide-Bridged Peptide Helix

The solution and solid-state conformations of the peptide disulfide Boc-Cys-Pro-Aib-Cys-NHMe have been determined by NMR spectroscopy and X-ray diffraction. The Cys(4) and methylamide NH groups are solvent shielded in CDCI3 and (CD,),SO, suggesting their involvement in intramolecular hydrogen bonding. On the basis of known stereochemical preferences of Pro and Aib residues, a consecutive @-turn structure is favored in solution. X-ray diffraction analysis reveals a highly folded 310 helical conformation for the peptide, with the S-S bridge lying approximately parallel to the helix axis, linking residues 1 and 4. The backbone conformational angles are Cys(1) 4 = -121.1', $ = 65.6"; Pro(2) 4 = -58.9', 4 = -34.0'; Aib(3) 4 = -61.8', $ = -17.9'; Cys(4) 4 = -70.5', $ = -18.6'. Two intramolecular hydrogen bonds are observed between Cys(1) CO--HN Cys(4) and Pro(2) CO--HNMe. The disulfide bond has a right-handed chirality, with a dihedral angle (xss) of 82'.

Parallel packing of alpha-helices in crystals of the zervamicin IIA analog Boc-Trp-Ile-Ala-Aib-Ile-Val-Aib-Leu-Aib-Pro-OMe.2H2O.

An apolar synthetic analog of the first 10 residues at the NH2-terminal end of zervamicin IIA crystallizes in the triclinic space group P1 with cell dimensions a = 10.206 +/- 0.002 A, b = 12.244 +/- 0.002 A, c = 15.049 +/- 0.002 A, alpha = 93.94 +/- 0.01 degrees, beta = 95.10 +/- 0.01 degrees, gamma = 104.56 +/- 0.01 degrees, Z = 1, C60H97N11O13 X 2H2O. Despite the relatively few alpha-aminoisobutyric acid residues, the peptide maintains a helical form. The first intrahelical hydrogen bond is of the 3(10) type between N(3) and O(0), followed by five alpha-helix-type hydrogen bonds. Solution 1H NMR studies in chloroform also favor a helical conformation, with seven solvent-shielded NH groups. Continuous columns are formed by head-to-tail hydrogen bonds between the helical molecules along the helix axis. The absence of polar side chains precludes any lateral hydrogen bonds. Since the peptide crystallizes with one molecule in a triclinic space group, aggregation of the helical columns must necessarily be parallel rather than antiparallel. The packing of the columns is rather inefficient, as indicated by very few good van der Waals' contacts and the occurrence of voids between the molecules.

CSSI-PRO: a method for secondary structure type editing, assignment and estimation in proteins using linear combination of backbone chemical shifts

Estimation of secondary structure in polypeptides is important for studying their structure, folding and dynamics. In NMR spectroscopy, such information is generally obtained after sequence specific resonance assignments are completed. We present here a new methodology for assignment of secondary structure type to spin systems in proteins directly from NMR spectra, without prior knowledge of resonance assignments. The methodology, named Combination of Shifts for Secondary Structure Identification in Proteins (CSSI-PRO), involves detection of specific linear combination of backbone H-1(alpha) and C-13' chemical shifts in a two-dimensional (2D) NMR experiment based on G-matrix Fourier transform (GFT) NMR spectroscopy. Such linear combinations of shifts facilitate editing of residues belonging to alpha-helical/beta-strand regions into distinct spectral regions nearly independent of the amino acid type, thereby allowing the estimation of overall secondary structure content of the protein. Comparison of the predicted secondary structure content with those estimated based on their respective 3D structures and/or the method of Chemical Shift Index for 237 proteins gives a correlation of more than 90% and an overall rmsd of 7.0%, which is comparable to other biophysical techniques used for structural characterization of proteins. Taken together, this methodology has a wide range of applications in NMR spectroscopy such as rapid protein structure determination, monitoring conformational changes in protein-folding/ligand-binding studies and automated resonance assignment.

Acyclic peptides as conformational models Crystal structure of Boc-Aib-Leu-Pro-NHMe± 2H2O

The tripeptide Boc-Aib-Leu-Pro-NHMe crystallizes in the orthorhombic space group P212121 with a = 9.542, b = 15.200, c = 18.256 Å and Z = 4. Each peptide is associated wth two water molecules in the asymmetric unit of the crystal. The structure has been solved by direct methods and refined to an R-value of 0.069. The peptide adopts a structure without any intramolecular hydrogen bond. The three residues occupy distinctly different regions of the Ramachandran map: Aib in the left-handed 310-helical region (± = 67°, ± = 23°), Leu in the β-sheet region (± = - 133°, ± = 142°) and Pro in the poly (Pro) II region (± = - 69°, ± = 151°). An interesting observation is that each water molecule participates in four hydrogen bonds with distorted tetrahedral coordination about the oxygen atom.

X-Pro peptides. A theoretical study of the hydrogen bonded conformations of (alpha-aminoisobutyryl-L -prolyl)n sequences

Intramolecularly hydrogen bonded conformations of (Aib-Pro)n sequences have been analysed theoretically. Both 4-1 (C10 and 3-1 (C7 hydrogen bonded regular structures are shown to be stereochemically feasible. Conformational energies for the helical structures have been estimated using classical potential energy methods. Both C10 and C7 conformations have very similar energies. Pyrrolidine ring puckering has a pronounced effect on the energies, and only Cv-endo puckered Pro residues can be accommodated. The theoretical calculations using spectroscopic data suggest that the recently proposed novel 310 helical conformation for benzyloxycarbonyl(Aib-Pro)4-methyl ester is in solution, is indeed energetically and stereochemically favourable.

Reversal of handedness in DNA: A stable link between RU and LZ helices

Two types of left-handed zig-zag (LZ) helices were obtained following stereochemical guideline. They are referred to as LZ1 and LZ2 helices. LZ1 helices have conformations similar to those found in the single crystals of d(C-G)3 and d(C-G)25,6. Z-character is more prominent in LZ2 than in LZ1 helix. The conformations of a stable link between RU and LZ helical fragments are given. The link involves inverted stacking arrangement of the bases: a characteristic feature of all RL models proposed by us

X-Pro peptides. A theoretical study of the hydrogen bonded conformations of (a-aminoisobutyryl-L -prolyl)n sequences

Intramolecularly hydrogen bonded conformations of (Aib-Pro)n sequences have been analysed theoretically. Both 4�1 (C10 and 3�1 (C7 hydrogen bonded regular structures are shown to be stereochemically feasible. Conformational energies for the helical structures have been estimated using classical potential energy methods. Both C10 and C7 conformations have very similar energies. Pyrrolidine ring puckering has a pronounced effect on the energies, and only Cγ-endo puckered Pro residues can be accommodated. The theoretical calculations using spectroscopic data suggest that the recently proposed novel 310 helical conformation for benzyloxycarbonyl(Aib-Pro)4-methyl ester is in solution, is indeed energetically and stereochemically favourable.