A Lock-Controlled Session Table Partitioning Scheme With Dynamic Resource Balancing for Multi-Core Architecture

Connection tracking by manipulating session tables is essential for stateful inspection capable applications such as stateful firewalls, Network-based Intrusion Prevention Systems (NIPS), traffic accounting and monitoring to process packets according to session state information. With the prevalence of multi-core computing, it is crucial to optimize the existing connection tracking structures and algorithms to fully utilize the underlying parallelism. In this paper, the authors propose a lock-controlled session table partitioning scheme accompanied with a dynamic resource balancing algorithm for session-aware multi-core networking systems.