Institute of Electrical & Electronic Engineers
Deep Packet Inspection (DPI) provides the ability to perform Quality of Service (QoS) and intrusion detection on network packets. But since the explosive growth of Internet, performance and scalability issues have been raised due to the gap between network and end-system speeds. This paper describes how a desirable DPI system with multi-gigabits throughput and good scalability should be like by exploiting parallelism on network interface card, network stack and user applications. Connection-based parallelism, Affinity-based Scheduling and lock-free data structure are the main technologies introduced to alleviate the performance and scalability issues.