Name
Abstract | ||
|---|---|---|
This paper presents Swift, a packet filter for high performance packet capture on commercial off-the-shelf hard-ware. The key features of Swift include (1) extremely low filter update latency for dynamic packet filtering, and (2) Gbps high-speed packet processing. Based on complex instruction set computer (CISC) instruction set architecture (ISA), Swift achieves the former with an instruction set design that avoids the need for compilation and security checking, and the latter by mainly utilizing SIMD (single instruction, multiple data). We implement Swift in the Linux 2.6 kernel for both i386 and x86_64 architectures. The Swift userspace library supports two sets of application programming interfaces (APIs): a BPF-friendly API for backward compatibility and an object oriented API for simplifying filter coding. We extensively evaluate the dynamic and static filtering performance of Swift on multiple machines with different hardware setups. We compare Swift with BPF (the BSD packet filter)--the de facto standard for packet filtering in modern operating systems--and hand-coded optimized C filters that are used for demonstrating possible performance gains. For dynamic filtering tasks, Swift is at least three orders of magnitude faster than BPF in terms of filter update latency. For static filtering tasks, Swift outperforms BPF up to three times in terms of packet processing speed, and achieves much closer performance to the optimized C filters. |
Year | Venue | Keywords |
|---|---|---|
2008 | NSDI | gbps high-speed packet processing,bsd packet filter,hand-coded optimized c filter,filter update latency,filter coding,swift userspace library,packet filter,packet processing speed,fast dynamic packet filter,dynamic packet,high performance packet capture,instruction set architecture,application program interface,code optimization,operating system,complex instruction set computer,single instruction multiple data,object oriented |
Field | DocType | Citations |
x86,Packet analyzer,Swift,Instruction set,Computer science,SIMD,Filter (signal processing),Real-time computing,Packet processing,Computer hardware,Backward compatibility,Distributed computing | Conference | 21 |
PageRank | References | Authors |
1.03 | 16 | 3 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Zhenyu Wu | 1 | 661 | 30.31 |
| Mengjun Xie | 2 | 212 | 23.46 |
| Haining Wang | 3 | 2574 | 160.07 |