Real-time optimisation of access control lists for efficient internet packet filtering

Grout, Vic, Davies, John and McGinn, John (2006) Real-time optimisation of access control lists for efficient internet packet filtering.

[img]
Preview
PDF
fulltext.pdf

Download (344kB) | Preview

Abstract

This paper considers an optimisation problem encountered in the implementation of traffic policies on network routers, namely the ordering of rules in an access control list to minimise or reduce processing time and hence packet latency. The problem is formulated as an objective function with constraints and shown to be NP-complete by translation to a known problem. Exact and heuristic solution methods are introduced, discussed and compared and computational results given. The emphasis throughout is on practical implementation of the optimisation process, that is within the tight constraints of a production network router seeking to reduce latency, on-line, in real-time but without the overhead of significant extra computation.

Item Type: Article
Additional Information: Original document can be found at http://dx.doi.org/10.1007/s10732-007-9019-1Copyright © 2007, Springer Science+Business Media, LLC
Keywords: Access control lists, Internet packet filters, Real-time, optimisation, traffic policies
Divisions: ?? GlyndwrUniversity ??
Depositing User: ULCC Admin
Date Deposited: 05 Oct 2011 09:14
Last Modified: 11 Dec 2017 20:06
URI: https://glyndwr.repository.guildhe.ac.uk/id/eprint/330

Actions (login required)

Edit Item Edit Item