 nps BGP Classifier protocol policy acceleration and classification engine, is a high-performance portable multi-field classification engine designed with the flexibility to solve a wide range of classification problems from standard and custom data plane classifiers to control plane routing protocol policy analyzers. nps BGP Classifier has been designed for use in routers and other network devices implementing BGP (Border Gateway Protocol). By starting from the ground up with a design not assuming a particular operating system the porting process has been greatly simplified.
Features Include:
Product Overview The nps BGP Classifier, BGP Access List acceleration functions can be easily added to an existing BGP implementation to increase access list and prefix list processing performance by several orders of magnitude in typical applications. This is accomplished by replacing individual access list linear searches with a single table-lookup search that returns the permit/deny result for all access lists known to BGP. Lookup times are constant and independent of access list size, number of lists and number of peers. For acceleration of BGP ASPath List processing, nps BGP Classifier functions are also easily added into existing code. Traditional ASPath processing requires comparison of an input path with each path string in a list until a match is found. Since this must be repeated for every peer, this approach scales very poorly. In contrast, nps BGP Classifier functions return the lookup result for all strings in all lists in a single pass over the input path. nps BGP Classifier also includes a data packet classifier with tables that can be searched using custom hardware, network processors or nps BGP Classifier provided software capable of classifying 4M packets per second on a 900MHz Pentium class processor. The classifier is used to evaluate a set of rules which are defined as a set of logical AND conditions over a set of user definable fields. Each field supports tests for equality, inequality, range, greater than and less than. Instead of evaluating each rule linearly, the classifier evaluates all rules in a single pass through a set of tables. Search time is independent of both the number of rules and data input. Since only a few memory accesses are required for a search, nps BGP Classifier is well suited for use in high throughput applications requiring packet classification. Standard permit/deny actions can also be augmented with user-definable actions. This feature can be used for assigning diff-serv code points or IPSec identifiers to flows and enables creation of conditional classifiers where output needs to be further qualified. nps BGP Classifier achieves its constant search capability using the Recursive Flow Classification technique of splitting a problem into a set of blocks, or chunks, the output of each block being a mask of the set of rules matched by the inputs to the block. These blocks are interconnected such that the output of the final block specifies which rule the input matches and what action is to be taken. In cases where an input matches multiple rules, the classifier can either return the first rule to match or all matching rules. nps BGP Classifier allows input fields and block interconnection to be defined on a per-classifier basis thereby enabling simple creation of custom classifiers for any application. While other techniques can allow fast search times, they often require extremely long times to compile the necessary tables. This makes them inappropriate for use in applications where rules may change frequently such as dynamically provisioned Differentiated Services. nps BGP Classifier solves this problem by providing incremental rule change capability, which can reduce update times from many seconds or even minutes down into the milliseconds range. Options for full table recompile and change group of rules are also available. License CreekSide Networks' nps BGP Classifier is sold on a one time License, product specific and is Royalty Free. For a price quote please contact our Sales office at the number or email address below. |
||
tel. (239) 415-6631 | fax. (239) 415-6632 | info@creeksidenet.com
| |
||
