A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have implemented a Firewall with this architecture in reconflgurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results in both speed and area improvement when it is implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields. High throughput classification invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly in terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for the worst case packet size. The Firewall rule update involves only memory re-initialization in software without any hardware change.

A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have Implemented a Firewall with this architecture in reconfigurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using, our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results In both speed and area Improvement when It is Implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields.High throughput classification Invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly In terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware Implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for file worst case packet size. The Firewall rule update Involves only memory re-initialiization in software without any hardware change.

Space and time efficiency of the forest-of-quadtrees representation

A forest of quadtrees is a refinement of a quadtree data structure that is used to represent planar regions. A forest of quadtrees provides space savings over regular quadtrees by concentrating vital information. The paper presents some of the properties of a forest of quadtrees and studies the storage requirements for the case in which a single 2m × 2m region is equally likely to occur in any position within a 2n × 2n image. Space and time efficiency are investigated for the forest-of-quadtrees representation as compared with the quadtree representation for various cases.

Cooking in the ungra area: Fuel efficiency, energy losses, and opportunities for reducing firewood consumption

Cooking efficiency and related fuel economy issues have been studied in a particular rural area of India. Following a description of the cooking practices and conditions in this locale, cooking efficiency is examined. A cooking efficiency of only 6% was found. The use of aluminium rather than clay pots results in an increased efficiency. In addition, cooking efficiency correlates very well with specific fuel consumption. The latter parameter is much simpler to analyse than cooking efficiency. The energy losses during cooking are examined in the second part of this case study. The major energy losses are heating of excess air, heat carried away by the combustion products, heat transmitted to the stove body and floor, and the chemical energy in charcoal residue. The energy loss due to the evaporation of cooking water is also significant because it represents about one-third of the heat reaching the pots.

Study on the pH dependence of diffraction efficiency of phase holograms in dye sensitized dichromated gelatin

Dichromated gelatin is thought to be a good substitute for photographic emulsions in some uses. The results of a systematic study of the effect of the pH of the developer on the diffraction efficiency of volume holographic gratings recorded in dye sensitized dichromated gelatin are presented.

A novel method of current efficiency determination

A simple and rapid method, based on the open-circuit decay of potential, is described for the determination of the current efficiency with which metals are electrodeposited. The advantages and disadvantages of the method are discussed.

Running-in wear of a compression ignition engine: Factors influencing the conformance between cylinder liner and piston rings

The conformance between the liner and rings of an internal combustion engine depends mainly on their linear wear (dimensional loss) during running-in. Running-in wear studies, using the factorial design of experiments, on a compression ignition engine show that at certain dead centre locations of piston rings the linear wear of the cylinder liner increases with increase in the initial surface roughness of the liner. Rough surfaces wear rapidly without seizure during running-in to promote quick conformance, so an initial surface finish of the liner of 0.8 μm c.l.a. is recommended. The linear wear of the cast iron liner and rings decreases with increasing load but the mass wear increases with increasing load. This discrepancy is due to phase changes in the cast iron accompanied by dimensional growth at higher thermal loads. During running-in the growth of cast iron should be minimised by running the engine at an initial load for which the exhaust gas temperature is approximately 180 °C.

Carbon sequestration versus bioenergy: A case study from South India exploring the relative land-use efficiency of two options for climate change mitigation

This case study has been carried out as a comparison between two different land-use strategies for climate change mitigation, with possible application within the Clean Development Mechanisms. The benefits of afforestation for carbon sequestration versus for bioenergy production are compared in the context of development planning to meet increasing domestic and agricultural demand for electricity in Hosahalli village, Karnataka, India. One option is to increase the local biomass based electricity generation, requiring an increased biomass plantation area. This option is compared with fossil based electricity generation where the area is instead used for producing wood for non-energy purposes while also sequestering carbon in the soil and standing biomass. The different options have been assessed using the PRO-COMAP model. The ranking of the different options varies depending on the system boundaries and time period. Results indicate that, in the short term (30 years) perspective, the mitigation potential of the long rotation plantation is largest, followed by the short rotation plantation delivering wood for energy. The bioenergy option is however preferred if a long-term view is taken. Short rotation forests delivering wood for short-lived non-energy products have the smallest mitigation potential, unless a large share of the wood products are used for energy purposes (replacing fossil fuels) after having served their initial purpose. If managed in a sustainable manner all of these strategies can contribute to the improvement of the social and environmental situation of the local community. (C) 2009 Elsevier Ltd. All rights reserved.

Towards optimum diffraction efficiency for methylene blue sensitized dichromated gelatin holograms

A systematic investigation has been carried out into the optimization of diffraction efficiency (η) of methylene blue sensitized dichromated gelatin (MBDCG) holograms. The influence of the following parameters on η have been studied: prehardener concentration (CH), concentrations of ammonium dichromate (CA) and methylene blue (CM) as photosensitizers, and exposure (E). This study revealed that with CH similar, equals 0.5, CA similar, equals 30, CM similar, equals 0.3, and E similar, equals 400–600, optimum diffraction efficiency of over 80%, can be easily achieved in MBDCG holograms.

High efficiency infrared antireflection coatings (ARCs) for space optics

Simple ARC designs for germanium (Ge) optics useful in spaceborne electro-optical systems have been generated. It is seen that the designs which are non-quarterwave in nature are efficient in terms of spectral coverage and residual reflection loss. They have been realised experimentally and the resulting ARCs are found to have very good spectral and durability properties.