{"id":"https://openalex.org/W7224838059","doi":"https://doi.org/10.21203/rs.3.rs-11234466/v1","title":"Port-Range Rule Management and Matching-Path Measurement for eBPF-Based Network Functions","display_name":"Port-Range Rule Management and Matching-Path Measurement for eBPF-Based Network Functions","publication_year":2026,"publication_date":"2026-10-30","ids":{"openalex":"https://openalex.org/W7224838059","doi":"https://doi.org/10.21203/rs.3.rs-11234466/v1"},"language":"en","primary_location":{"id":"doi:10.21203/rs.3.rs-11234466/v1","doi":"https://doi.org/10.21203/rs.3.rs-11234466/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11234466/v1","pdf_url":"https://www.researchsquare.com/article/rs-11234466/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"volume":null,"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.researchsquare.com/article/rs-11234466/latest.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101195368","display_name":"Xie Bo","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Bo Xie","raw_affiliation_strings":["Wuhan Digital Engineering Research Institute"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan Digital Engineering Research Institute","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5101195368"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.04149999842047691,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ebpf","display_name":"eBPF","score":0.9800000190734863},{"id":"https://openalex.org/keywords/network-functions","display_name":"network functions","score":0.628000020980835},{"id":"https://openalex.org/keywords/early-termination","display_name":"early termination","score":0.8429999947547913},{"id":"https://openalex.org/keywords/firewall","display_name":"firewall","score":0.5270000100135803},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.6909999847412109},{"id":"https://openalex.org/keywords/rule-management","display_name":"rule management","score":0.5659999847412109},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.5130000114440918}],"concepts":[{"id":"https://openalex.org/C176809094","wikidata":"https://www.wikidata.org/wiki/Q15401496","display_name":"Traverse","level":2,"score":0.7121999859809875},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6305999755859375},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.6177999973297119},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.5117999911308289},{"id":"https://openalex.org/C197640229","wikidata":"https://www.wikidata.org/wiki/Q2534066","display_name":"Predictability","level":2,"score":0.48069998621940613},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4510999917984009},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.42910000681877136},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.4074000120162964},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3644999861717224},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.3635999858379364},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.36230000853538513},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33000001311302185},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.32659998536109924},{"id":"https://openalex.org/C119404949","wikidata":"https://www.wikidata.org/wiki/Q4503","display_name":"Network switch","level":2,"score":0.3100000023841858},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3050000071525574},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.2822999954223633},{"id":"https://openalex.org/C137471899","wikidata":"https://www.wikidata.org/wiki/Q11381","display_name":"Local area network","level":2,"score":0.2736000120639801},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.26409998536109924},{"id":"https://openalex.org/C9395851","wikidata":"https://www.wikidata.org/wiki/Q177929","display_name":"Stack (abstract data type)","level":2,"score":0.25279998779296875},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21203/rs.3.rs-11234466/v1","doi":"https://doi.org/10.21203/rs.3.rs-11234466/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11234466/v1","pdf_url":"https://www.researchsquare.com/article/rs-11234466/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.21203/rs.3.rs-11234466/v1","doi":"https://doi.org/10.21203/rs.3.rs-11234466/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11234466/v1","pdf_url":"https://www.researchsquare.com/article/rs-11234466/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7224838059.pdf","grobid_xml":"https://content.openalex.org/works/W7224838059.grobid-xml"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W1979866793","https://openalex.org/W1994926493","https://openalex.org/W2040340473","https://openalex.org/W2104914168","https://openalex.org/W2139751271","https://openalex.org/W2143377393","https://openalex.org/W2159669151","https://openalex.org/W2260783129","https://openalex.org/W2903038868","https://openalex.org/W3006615558","https://openalex.org/W3216686227","https://openalex.org/W4243943037"],"related_works":["https://openalex.org/W2978019044","https://openalex.org/W7222041620","https://openalex.org/W4366493286","https://openalex.org/W4411688763","https://openalex.org/W4293499229","https://openalex.org/W2887913556","https://openalex.org/W4415124764","https://openalex.org/W2896320468","https://openalex.org/W4408869788","https://openalex.org/W4385993948"],"abstract_inverted_index":{"Abstract":[0],"eBPF":[1,228],"is":[2,138],"increasingly":[3],"used":[4],"to":[5,97,152,185,203,210],"implement":[6],"programmable":[7],"network":[8,23,51,240],"functions":[9,28],"on":[10],"Linux":[11],"hosts,":[12],"including":[13],"boundary":[14],"filtering,":[15],"transparent":[16],"proxying,":[17],"and":[18,24,53,110,149,156,172,206,239],"firewall-like":[19],"access":[20],"control.":[21],"For":[22],"systems":[25],"management,":[26,230],"such":[27],"require":[29],"not":[30],"only":[31],"correct":[32],"policy":[33],"installation":[34],"but":[35],"also":[36],"predictable":[37],"rule-processing":[38],"behavior":[39],"in":[40,68,122,187],"the":[41,61,81,128,135,141,177,188,225],"data":[42],"path.":[43,59],"This":[44],"paper":[45],"studies":[46],"ZFW,":[47],"an":[48,55],"open-source":[49],"eBPF-based":[50],"function,":[52],"identifies":[54],"insertion-order-sensitive":[56],"port-range":[57,64,120],"matching":[58,82],"In":[60],"original":[62],"implementation,":[63],"entries":[65],"are":[66,95],"kept":[67],"insertion":[69,109],"order,":[70],"so":[71],"hot-port":[72],"traffic":[73,87],"may":[74],"traverse":[75],"many":[76],"unrelated":[77],"ranges":[78,94],"before":[79],"reaching":[80],"rule,":[83],"while":[84,127,231],"selected":[85],"miss":[86],"cannot":[88],"terminate":[89],"early":[90,112],"even":[91],"when":[92],"later":[93],"impossible":[96],"match.":[98],"We":[99,144],"propose":[100],"a":[101],"lightweight":[102,220],"management-plane":[103],"optimization":[104],"that":[105,176,219],"combines":[106],"ordered":[107],"rule":[108,116,163,221],"data-plane":[111],"termination.":[113],"The":[114,216],"user-space":[115],"maintenance":[117],"path":[118,131],"keeps":[119],"indexes":[121],"ascending":[123],"order":[124],"of":[125,227],"low_port,":[126],"TC-BPF":[129],"hot":[130],"stops":[132],"scanning":[133],"once":[134],"destination":[136],"port":[137],"smaller":[139],"than":[140],"current":[142],"low_port.":[143],"further":[145],"add":[146],"scan-step":[147],"instrumentation":[148],"reset/read":[150],"interfaces":[151],"support":[153],"measurement-driven":[154],"operation":[155],"ablation":[157,173],"analysis.":[158],"Experiments":[159],"covering":[160],"hit":[161],"position,":[162],"scale,":[164],"public-cloud":[165],"access,":[166],"local":[167,195],"netns/veth":[168],"environments,":[169],"mixed":[170],"workloads,":[171],"variants":[174],"show":[175,218],"method":[178],"reduces":[179],"average":[180,198],"scan":[181],"steps":[182],"from":[183,200,207],"100.00":[184],"1.00":[186],"core":[189],"N":[190],"=":[191],"100":[192],"scenario.":[193],"Controlled":[194],"tests":[196],"reduce":[197],"latency":[199,233],"8.10":[201],"ms":[202,205,209,212],"6.63":[204],"3.98":[208],"2.63":[211],"under":[213],"lower":[214],"concurrency.":[215],"results":[217],"organization":[222],"can":[223],"improve":[224],"predictability":[226],"network-function":[229],"end-to-end":[232],"remains":[234],"affected":[235],"by":[236],"external":[237],"system":[238],"noise.":[241]},"counts_by_year":[],"updated_date":"2026-11-01T11:40:01.658920","created_date":"2026-10-31T00:00:00"}