In high-speed networks, real-time monitoring of heavy flows is vital for reliable communication and rapid anomaly detection (e.g., DDoS). This task is challenging due to limited fast memory and the inefficiency of existing sketches, which struggle with skewed traffic and hardware constraints. We present Harmonia, a sketch for efficient and accurate heavy flow detection. Unlike prior methods that use multi-dimensional features at high memory cost, Harmonia leverages traffic skewness: once a flow’s frequency exceeds a threshold, it is deemed heavy and protected from eviction during hash collisions. Implemented on CPU, programmable switches, and FPGA, and evaluated on real-world traces, Harmonia improves detection accuracy by up to 27.83% while requiring at most 18% and 10% of available resources on switches and FPGAs.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Harmonia: A Swift and Accurate Approximate Data Structure for Real-Time Heavy Flow Detection in High-Speed Networks

  • Weihe Li,
  • Tianyue Chu,
  • Christos-Savvas Bouganis,
  • Paul Patras

摘要

In high-speed networks, real-time monitoring of heavy flows is vital for reliable communication and rapid anomaly detection (e.g., DDoS). This task is challenging due to limited fast memory and the inefficiency of existing sketches, which struggle with skewed traffic and hardware constraints. We present Harmonia, a sketch for efficient and accurate heavy flow detection. Unlike prior methods that use multi-dimensional features at high memory cost, Harmonia leverages traffic skewness: once a flow’s frequency exceeds a threshold, it is deemed heavy and protected from eviction during hash collisions. Implemented on CPU, programmable switches, and FPGA, and evaluated on real-world traces, Harmonia improves detection accuracy by up to 27.83% while requiring at most 18% and 10% of available resources on switches and FPGAs.