{"id":"https://openalex.org/W4205123077","doi":"https://doi.org/10.1109/tpds.2021.3136575","title":"CoFilter: High-Performance Switch-Accelerated Stateful Packet Filter for Bare-Metal Servers","display_name":"CoFilter: High-Performance Switch-Accelerated Stateful Packet Filter for Bare-Metal Servers","publication_year":2021,"publication_date":"2021-12-20","ids":{"openalex":"https://openalex.org/W4205123077","doi":"https://doi.org/10.1109/tpds.2021.3136575"},"language":"en","primary_location":{"id":"doi:10.1109/tpds.2021.3136575","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpds.2021.3136575","pdf_url":null,"source":{"id":"https://openalex.org/S97130795","display_name":"IEEE Transactions on Parallel and Distributed Systems","issn_l":"1045-9219","issn":["1045-9219","1558-2183","2161-9883"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Parallel and Distributed Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020341873","display_name":"Jiamin Cao","orcid":"https://orcid.org/0000-0001-5314-6378"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiamin Cao","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5314-6378","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100414241","display_name":"Ying Liu","orcid":"https://orcid.org/0000-0002-4919-1130"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Liu","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4919-1130","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055714653","display_name":"Yu Zhou","orcid":"https://orcid.org/0000-0002-3469-0906"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Zhou","raw_affiliation_strings":["Alibaba Infrastructure Service, Alibaba Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-3469-0906","affiliations":[{"raw_affiliation_string":"Alibaba Infrastructure Service, Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076436127","display_name":"Lin He","orcid":"https://orcid.org/0000-0002-7348-5833"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin He","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7348-5833","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055168329","display_name":"Chen Sun","orcid":"https://orcid.org/0000-0002-6783-9631"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Sun","raw_affiliation_strings":["Alibaba Infrastructure Service, Alibaba Group, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alibaba Infrastructure Service, Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100345141","display_name":"Yangyang Wang","orcid":"https://orcid.org/0000-0003-2713-0748"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yangyang Wang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2713-0748","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100771111","display_name":"Mingwei Xu","orcid":"https://orcid.org/0000-0002-4847-4585"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingwei Xu","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","Department of Computer Science, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4847-4585","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","institution_ids":["https://openalex.org/I4210156423"]},{"raw_affiliation_string":"Department of Computer Science, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9126,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.76207084,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"33","issue":"9","first_page":"2249","last_page":"2262"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.9829716682434082},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.790629506111145},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6455455422401428},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6297208070755005},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5012054443359375},{"id":"https://openalex.org/keywords/packet-processing","display_name":"Packet processing","score":0.49244651198387146},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3326939344406128}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.9829716682434082},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.790629506111145},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6455455422401428},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6297208070755005},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5012054443359375},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.49244651198387146},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3326939344406128}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tpds.2021.3136575","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpds.2021.3136575","pdf_url":null,"source":{"id":"https://openalex.org/S97130795","display_name":"IEEE Transactions on Parallel and Distributed Systems","issn_l":"1045-9219","issn":["1045-9219","1558-2183","2161-9883"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Parallel and Distributed Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.4399999976158142}],"awards":[{"id":"https://openalex.org/G6365998414","display_name":"\u57fa\u4e8eRPKI\u7684\u57df\u95f4\u6e90\u5730\u5740\u9a8c\u8bc1\u5173\u952e\u6280\u672f\u53ca\u90e8\u7f72\u4f18\u5316\u7814\u7a76","funder_award_id":"61772307","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6502765690","display_name":null,"funder_award_id":"2018YFB1800405","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322392","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1738135513","https://openalex.org/W1979866793","https://openalex.org/W2072811945","https://openalex.org/W2134519279","https://openalex.org/W2157614013","https://openalex.org/W2164740236","https://openalex.org/W2168595508","https://openalex.org/W2465793152","https://openalex.org/W2487095677","https://openalex.org/W2565612087","https://openalex.org/W2605823630","https://openalex.org/W2744693751","https://openalex.org/W2751108192","https://openalex.org/W2761338514","https://openalex.org/W2798534715","https://openalex.org/W2798641544","https://openalex.org/W2834288129","https://openalex.org/W2868447023","https://openalex.org/W2899771383","https://openalex.org/W2951243021","https://openalex.org/W2976817218","https://openalex.org/W2992877761","https://openalex.org/W3046440678","https://openalex.org/W3101335188","https://openalex.org/W6750453510","https://openalex.org/W6750782330"],"related_works":["https://openalex.org/W4381744925","https://openalex.org/W2743409560","https://openalex.org/W2047113772","https://openalex.org/W4290991465","https://openalex.org/W2345672066","https://openalex.org/W4387147583","https://openalex.org/W2114510630","https://openalex.org/W2734900520","https://openalex.org/W2071891813","https://openalex.org/W2598371515"],"abstract_inverted_index":{"As":[0],"one":[1],"of":[2,28,86,88,119,151,163],"the":[3,35,63,117],"most":[4],"critical":[5],"cloud":[6,44],"services,":[7],"Bare-Metal":[8],"Servers":[9],"(BMS)":[10],"introduce":[11,47],"stringent":[12],"performance":[13,49,105],"requirements":[14],"on":[15,78],"data":[16,128],"center":[17,129],"networks":[18],"(DCN).":[19],"Stateful":[20],"packet":[21,38,65,75,96,114,154],"filter":[22,66,115],"is":[23],"an":[24],"integral":[25],"DCN":[26],"component":[27],"ensuring":[29],"connection":[30],"security":[31],"for":[32,43,67],"BMS.":[33],"However,":[34],"off-the-shelf":[36],"stateful":[37,64,74,113],"filters":[39],"either":[40],"are":[41],"costly":[42],"DCNs":[45],"or":[46],"significant":[48,161],"bottlenecks.":[50],"In":[51],"this":[52],"article,":[53],"we":[54],"presentCoFilter,":[55],"which":[56],"leverages":[57],"low-cost":[58],"programmable":[59,120],"switches":[60],"to":[61],"accelerate":[62],"BMS.CoFilteruses":[68],"(1)stateful":[69],"process":[70],"partitionto":[71],"enable":[72],"complex":[73],"filtering":[76],"logic":[77],"programmability-limited":[79],"switching":[80,121],"ASICs,":[81],"(2)state":[82],"compressionto":[83],"track":[84],"tens":[85],"millions":[87],"connections":[89],"with":[90,132,166,174],"constrained":[91],"hardware":[92],"memory,":[93],"and":[94,99,123,158],"(3)per-tenant":[95],"rate":[97,148],"limit":[98],"tenant-aware":[100],"flow":[101,134],"migrationto":[102],"achieve":[103],"efficient":[104],"isolation":[106],"among":[107],"different":[108],"tenants.":[109],"Overall,CoFilterimplements":[110],"a":[111,160],"high-performance":[112],"via":[116],"co-design":[118],"ASIC":[122],"CPU.":[124],"We":[125],"evaluateCoFilterunder":[126],"various":[127],"traffic":[130],"traces":[131],"real-world":[133],"distributions.":[135],"The":[136],"evaluation":[137],"results":[138],"show":[139],"thatCoFilterremarkably":[140],"outperforms":[141],"NetFilter,":[142],"i.e.,":[143,171],"forwarding":[144],"packets":[145],"at":[146],"line":[147],"(13x":[149],"throughput":[150],"NetFilter),":[152],"keeping":[153],"delay":[155],"within":[156],"1us,":[157],"freeing":[159],"quantity":[162],"CPU":[164],"cores,":[165],"rather":[167],"small":[168],"memory":[169],"usage,":[170],"accommodating":[172],"over$10^7$connections":[173],"only":[175],"16MB":[176],"SRAM.":[177]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}