Matching circuits can be small: Partial evaluation and reconfiguration for FPGA-based packet processing

摘要

Abstract Network functions like routing or firewalling require specialized hardware such as FPGAs to process packets at high rates. Such hardware must be fast enough to process packets at line rate, and it must be programmable to update the installed packet processing policy. However, these goals are conflicting because a generic programmable circuit must provide sufficient resources to support a wide range of policies, which can lead to unused circuitry and low clock rates. Also, it misses logic optimization opportunities with regard to the structure of the installed policy. In this work, we investigate the optimization potential of policy-specific generated network processing circuits. Using the example of router forwarding information bases (FIBs), we demonstrate that FIB-specialized circuits need significantly fewer logic resources than equivalent generic forwarding circuits. In combination with the partial reconfiguration capability of FPGAs, we obtain efficient low-latency forwarding engines whose matching circuitry can be replaced on demand. Highlights • We propose to specialize packet matching circuits on processing policies. • The specialized circuits are logic optimized and therefore small. • We evaluate this approach at the example of an IP forwarding circuit. • We use partial reconfiguration to hot-swap specialized circuits at runtime. • No device shutdown is required for a policy update.