A GPU-assisted NFV framework for intrusion detection system
Artikel i vetenskaplig tidskrift, 2021

The network function virtualization (NFV) paradigm advocates the replacement of specific-purpose hardware supporting packet processing by general-purpose ones, reducing costs and bringing more flexibility and agility to the network operation. However, this shift can degrade the network performance due to the non-optimal packet processing capabilities of the general-purpose hardware. Meanwhile, graphics processing units (GPUs) have been deployed in many data centers (DCs) due to their broad use in, e.g., machine learning (ML). These GPUs can be leveraged to accelerate the packet processing capability of virtual network functions (vNFs), but the delay introduced can be an issue for some applications. Our work proposes a framework for packet processing acceleration using GPUs to support vNF execution. We validate the proposed framework with a case study, analyzing the benefits of using GPU to support the execution of an intrusion detection system (IDS) as a vNF and evaluating the traffic intensities where using our framework brings the most benefits. Results show that the throughput of the system increases from 50 Mbps to 1 Gbps by employing our framework while reducing the central process unit (CPU) resource usage by almost 40%. The results indicate that GPUs are a good candidate for accelerating packet processing in vNFs.

CUDA

IDS

GPGPU

NFV

Författare

Igor Araujo

Universidade Federal do Para

Carlos Natalino Da Silva

Chalmers, Elektroteknik, Kommunikations- och antennsystem, Optiska nätverk

Diego L. Cardoso

Universidade Federal do Para

Computer Communications

0140-3664 (ISSN)

Vol. 169 92-98

Ämneskategorier

Datorteknik

Kommunikationssystem

Datorsystem

DOI

10.1016/j.comcom.2021.01.024

Mer information

Senast uppdaterat

2021-02-19