【作者】 张丽果；

【导师】 郝跃；

【作者基本信息】 西安电子科技大学 ， 集成电路系统设计， 2014， 博士

【摘要】 作为Internet网络的核心设备，路由器对整个网络系统的性能起到了关键作用。一方面，随着大数据时代的到来，当前的路由器体系结构难以解决目前路由器所面临的容量、效率、扩展性和功耗等问题。另一方面，伴随着网络的快速发展，网络的安全性面临着巨大挑战，需要在路由器中快速发现网络进攻行为，保护网络数据安全。针对路由器在网络传输效率和数据安全两方面的需求，本文对路由器SoC（System on Chip）体系结构、片内通信、互连结构诊断技术、深度包检测技术中特征（模式）匹配技术以及功能验证等关键技术进行了深入的研究，提出一些新的解决思路，为下一代网络路由器的性能和数据安全提升提供借鉴。论文的主要研究内容和创新性成果包括：1.对路由器SoC的片内通信机制进行了深入的研究，提出了Mobius立方体的最短路径算法，该算法相对于Cull P提出的算法能快速找到一条最短路径；在此基础上，提出了查找Mobius立方体中任意源/目的节点之间所有最短路径查找算法。2.基于0型/1型-2维Mobius立方体，提出了一种适于硬件实现的路由器SoC互连结构分层路由交叉互连Mesh结构HRCM，以及适用于该结构的分层路由算法HXY。该结构具有良好的系统性能和可扩展性，易于实现IP路由器中的以完成路由器中的分布式转发和交换。实验结果表明，与Xmesh和Mesh相比，HRCM不论是在系统吞吐量、丢包率还是系统平均延时上都具有较大优势。3．提出了一种带有容错的分层双环形路由器SoC拓扑结构，该结构中链路分为两组环网，其中有一组环网为备用环网。为该结构设计了一种时分和空分复用的路由算法，分离控制和数据，去除了数据缓存，消除了链路拥塞。仿真结果表明该结构可以有效避免拥塞、死锁和饥饿，保证带宽充分利用。4.提出一种在PMC模型下HRCM的快速条件诊断算法，通过广度优先搜索遍历整个HRCM网络，在遍历过程中通过相邻节点之间的诊断结果将HRCM中的节点分成若干个集合，再通过集合之间的关系和集合中所含元素的数量识别出故障集合和无故障集合，对于N*N的HRCM网络，该算法的时间复杂度为O (N2)。本文还将该算法有效的推广到超立方体中，用来诊断由多个路由器组成的路由器系统。5.针对网络安全提出了一种用于深度包检测系统的模式匹配算法基于分布式存储的正则表达式并行匹配算法REPMBDS。实验表明，该算法在处理时间上相比现有的串行匹配算法至少可以提高5倍以上，可以有效地处理在高速、大容量的Internet对网络入侵的实时检测。6.基于NetFPGA开发板设计了路由器SoC的功能仿真验证平台。该平台通过软件模块对其进行动态系统配置，实现了不同路由器SoC系统的功能仿真与验证。设计了4*4的HRCM路由器SoC系统并进行了仿真。在验证平台上对基于HRCM互连结构的路由器SoC进行了验证，并将深度包检测系统嵌入到该路由器SoC结构中对其完成功能及性能验证。更多还原

【Abstract】 In order to meet the increasing requirement of higher network transmissionefficiency, various further studies about the Internet Protocol Router, the core equipmentof Internet, whose performance directly determines the performance of whole networksystem, have been taken by researchers. Meanwhile, as the security situation isbecoming serious, many security policies were proposed by researchers to ensure thenormal operation of the network. In this paper, our researches mainly focus on theproblems of current network data transmission efficiency and data security. Based onthe analyses and summarizations of those key technologies such as the deep packetinspection technology of network security, feature (schema) matching techniques, routerSoC architecture, on-chip communication, diagnosis technology for interconnectstructure and function verification, a novel solution idea is proposed, which providessome useful reference for improving the router data transmission efficiency and datasecurity of new network.The major contributions of this dissertation are as follows.1. Further researches of the on-chip communication scheme of router SoC aretaken based on the network on chip technology. A shortest path algorithm based onMobius cube which can find a shortest path quickly is proposed in this paper, and onthis basis, a multiple shortest path search algorithm is proposed, which can find all theshortest paths between the source node and destination mode at the same time.2. A router SoC architecture based on the0-Mobius and1-Mobius cubes ofdimension2, i.e. Hierarchical Routing Cross-Connected Mesh(HRCM), is proposed inthis paper, then a hierarchical routing algorithm HXY (Hierarchical XY) is derived fromthis architecture to perform the functions of switching and forwarding and realize thedistributed forwarding and switching. The simulation results show this structure hasgood performance and scalability.3. A hierarchical fault-tolerance ring NoC topology is proposed in this paper, inwhich links are divided into two groups rings. One group is used for fault-tolerance incase of the other group fails. Ring network adopts Time-Division Multiplexing andpriority mechanism to implements space-division-multiplexing of bandwidth and fairrouting. Simulation results show that the architecture can avoid traffic congestion,deadlock and hungry and ensure use of bandwidth effectively.4. A fast condition diagnosis algorithm of HRCM topology under the condition of the PMC model is proposed in this paper. First, traverse all the HRCM by using thebreadth-first search and categorize the HRCM nodes into several sets based on thediagnosis results between adjacent nodes, then identify the fault set and fault-free setthrough the relationship between sets and the amount of the elements contained in thesets. As for the n-level HRCM, the time complexity of this algorithm isO (N2). Thealgorithm can be extended to multi-dimensional cube，ie. Hypercube，Used to diagnoserouter system.5. A pattern matching algorithm aiming at network content detection is proposedfor deep packet inspection system, i.e. regular expression pattern matching based ondistributed storage (REPMBDS). Simulation results show the proposed algorithmcompared to conventional matching algorithm can improve at least five times inprocessing time performance, which makes it effectively to handle the real-timedetection of the network intrusion in high-speed, large-capacity Internet.6. A general router SoC functional verification testbench based on NetFPGA isdesigned and implemented in this paper. This testbench achieves the functionalverification of different router SoC systems by performing dynamic systemconfiguration on its software module. The router SoC based on4*4HRCM is designed,and verified. meanwhile, the router SoC with deep packet inspection system is verifiedusing this test platform.更多还原