.png){kind=icon}
Return
Hyperflex: A SIMD-Based DFA Model for Deep Packet Inspection
.png){kind=icon}
PRE
AI
DOI：10.1109/TNSM.2025.3636946.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Deep Packet Inspection (DPI) has been extensively employed for network security. It examines traffic payloads by searching for regular expressions (regex) with the Deterministic Finite Automaton (DFA) model. However, as the network bandwidth and ruleset size are increasing rapidly, the conventional DFA model has emerged as a significant performance bottleneck of DPI. Leveraging the Single-Instruction-Multiple-Data (SIMD) instruction to perform state transitions can substantially boost the efficiency of the DFA model. In this paper, we propose Hyperflex, a novel SIMD-based DFA model designed for high-performance regex matching. Hyperflex incorporates a region detection algorithm to identify regions suitable for acceleration by SIMD instructions across the whole DFA graph. Also, we design a hybrid state transition algorithm that enables state transition in both SIMD-accelerated and normal regions, and ensures seamless state transition across the two types of regions. We have implemented Hyperflex on the commodity CPU and evaluated it with real network traffic and DPI regexes. Our evaluation results indicate that Hyperflex reaches a throughput of 8.89Gbit/s, representing an improvement of up to 2.27 times over Mcclellan, the default DFA model of the prominent multi-pattern regex matching engine Hyperscan. As a result, Hyperflex has been successfully deployed in Hyperscan, significantly enhancing its performance.
Keywords:
Deep packet inspection
regular expression
deterministic finite automata
Journal
IF:
5.4
Papers:
650
Citations:
9.2K
Organization
Cited Papers
ShareSaveShareSaveShareSaveShareSaveA Scalable Solution for Rule-Based Part-of-Speech Tagging on Novel Hardware Accelerators.png)
Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining
OAAI
Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data MiningIF0
OAAIShareSaveShareSave
View more