{"id":"https://openalex.org/W2976817218","doi":"https://doi.org/10.1109/icccn.2019.8846955","title":"CoFilter: A High-Performance Switch-Accelerated Stateful Packet Filter for Bare-Metal Servers","display_name":"CoFilter: A High-Performance Switch-Accelerated Stateful Packet Filter for Bare-Metal Servers","publication_year":2019,"publication_date":"2019-07-01","ids":{"openalex":"https://openalex.org/W2976817218","doi":"https://doi.org/10.1109/icccn.2019.8846955","mag":"2976817218"},"language":"en","primary_location":{"id":"doi:10.1109/icccn.2019.8846955","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn.2019.8846955","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 28th International Conference on Computer Communication and Networks (ICCCN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020341873","display_name":"Jiamin Cao","orcid":"https://orcid.org/0000-0001-5314-6378"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiamin Cao","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100779193","display_name":"Liu Ying","orcid":"https://orcid.org/0000-0002-2736-8978"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Liu","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055714653","display_name":"Yu Zhou","orcid":"https://orcid.org/0000-0002-3469-0906"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Zhou","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100722240","display_name":"Chen Sun","orcid":"https://orcid.org/0000-0003-2480-2350"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Sun","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100345141","display_name":"Yangyang Wang","orcid":"https://orcid.org/0000-0003-2713-0748"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yangyang Wang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076480986","display_name":"Jun Bi","orcid":"https://orcid.org/0000-0002-8695-1047"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Bi","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.9805010557174683},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7756121158599854},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6603264212608337},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6175369620323181},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5852451324462891},{"id":"https://openalex.org/keywords/packet-forwarding","display_name":"Packet forwarding","score":0.45096591114997864},{"id":"https://openalex.org/keywords/packet-processing","display_name":"Packet processing","score":0.4497697651386261},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.42128023505210876},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.4206158518791199},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.4135701358318329},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.33150237798690796},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.27682816982269287},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.09203311800956726}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.9805010557174683},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7756121158599854},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6603264212608337},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6175369620323181},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5852451324462891},{"id":"https://openalex.org/C120317029","wikidata":"https://www.wikidata.org/wiki/Q874048","display_name":"Packet forwarding","level":3,"score":0.45096591114997864},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.4497697651386261},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.42128023505210876},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.4206158518791199},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.4135701358318329},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.33150237798690796},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.27682816982269287},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.09203311800956726},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icccn.2019.8846955","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn.2019.8846955","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 28th International Conference on Computer Communication and Networks (ICCCN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1979866793","https://openalex.org/W2072811945","https://openalex.org/W2134519279","https://openalex.org/W2157614013","https://openalex.org/W2164740236","https://openalex.org/W2168595508","https://openalex.org/W2465793152","https://openalex.org/W2487095677","https://openalex.org/W2565612087","https://openalex.org/W2605823630","https://openalex.org/W2627048543","https://openalex.org/W2743093301","https://openalex.org/W2744693751","https://openalex.org/W2751108192","https://openalex.org/W2761338514","https://openalex.org/W2798641544","https://openalex.org/W2868447023","https://openalex.org/W2901633439","https://openalex.org/W2951243021","https://openalex.org/W3101335188","https://openalex.org/W3102982213","https://openalex.org/W4237515752","https://openalex.org/W4242648275","https://openalex.org/W4253731216","https://openalex.org/W6750453510"],"related_works":["https://openalex.org/W4381744925","https://openalex.org/W2743409560","https://openalex.org/W2047113772","https://openalex.org/W4318619432","https://openalex.org/W4290991465","https://openalex.org/W2110769762","https://openalex.org/W2345672066","https://openalex.org/W4387147583","https://openalex.org/W2114510630","https://openalex.org/W2734900520"],"abstract_inverted_index":{"As":[0],"one":[1],"of":[2,27,77,123,160,195,207],"the":[3,35,68,95,166],"most":[4],"critical":[5],"cloud":[6,48],"services,":[7],"Bare-metal":[8],"Servers":[9],"introduce":[10,51],"stringent":[11],"performance":[12,53],"requirements":[13],"on":[14,165],"data":[15,171],"center":[16,172],"networks":[17],"(DCN).":[18],"Stateful":[19],"packet":[20,41,70,86,97,198],"filter":[21,71],"is":[22],"an":[23,150],"integral":[24],"DCN":[25],"component":[26],"ensuring":[28],"connection":[29,130,146],"security":[30],"for":[31,47,72,129,153],"bare-metal":[32,73],"servers.":[33,74],"However,":[34],"off-the-shelf":[36],"hardware-based":[37],"and":[38,103,148,162,202,215],"software-based":[39],"stateful":[40,69,85,96],"filters":[42],"either":[43],"are":[44,108],"prohibitively":[45],"costly":[46],"DCNs":[49],"or":[50],"significant":[52,205],"bottlenecks.":[54],"In":[55],"this":[56],"paper,":[57],"we":[58],"present":[59],"CoFilter,":[60],"which":[61],"employs":[62,142],"cheap":[63],"programmable":[64,101],"switches":[65],"to":[66,82,114,126,133,144],"accelerate":[67],"CoFilter":[75,93,141,161,183,211],"consists":[76],"two":[78],"key":[79],"designs.":[80],"First,":[81],"support":[83],"complex":[84],"filtering":[87,98],"logic":[88,99],"in":[89,111],"programmability-limited":[90],"switching":[91,112],"ASICs,":[92],"partitions":[94],"between":[100],"ASICs":[102,113],"switch":[104,127,168],"CPU.":[105],"Most":[106],"packets":[107,124,189],"directly":[109],"processed":[110],"achieve":[115],"high":[116],"performance,":[117],"while":[118],"only":[119,222],"a":[120,158,204],"small":[121],"number":[122],"go":[125],"CPU":[128,208],"tracking.":[131],"Second,":[132],"track":[134],"massive":[135],"connections":[136,220],"with":[137,175,221],"constrained":[138],"hardware":[139],"memory,":[140],"hash":[143,154],"compress":[145],"states":[147],"provides":[149],"efficient":[151],"settlement":[152],"collisions.":[155],"We":[156],"build":[157],"prototype":[159],"evaluate":[163],"it":[164],"Tofino":[167],"under":[169],"various":[170],"traffic":[173],"traces":[174],"real-world":[176],"flow":[177],"distribution.":[178],"The":[179],"evaluation":[180],"shows":[181],"that":[182],"largely":[184],"outperforms":[185],"NetFilter,":[186],"i.e.,":[187],"forwarding":[188],"at":[190,200],"line":[191],"rate":[192],"(13x":[193],"throughput":[194],"NetFilter),":[196],"keeping":[197],"delay":[199],"1us,":[201],"freeing":[203],"quantity":[206],"cores.":[209],"Furthermore,":[210],"presents":[212],"great":[213],"scalability":[214],"accommodates":[216],"over":[217],"ten":[218],"million":[219],"16MB":[223],"SRAM.":[224]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}