DRBE-One Packet Classification Algorithm In IPv6

In the recent years, the technology of Internet is developed at full speed world widely. Internet has supported the function of each domestic field directly, and played more and more important role in the development of national economy.In the network security field, research of firewall and IDS becomes more and more important. Multi-dimension packet classification algorithm, as the kernel algorithm of firewall and IDS catches more and more eyes too.Packet classification can also be based on multiple fields in the header of layer 3 and/or layer 4, such as protocol, source IP address, destination IP address, source port and destination port, or any combination of them. Packet classification is usually used to the firewalls, IDS systems, Routers, etc. Along with the application of new generation IP protocol - IPv6, those algorithms in IPv4 can not apply in IPv6 because of the longer length of IPv6 address and the fast increasing of network bandwidth. So the study on Multi-dimension packet classification algorithm of IPv6 has high theoretic importance and practical value. It has become one of the most important problems in the world.The author brings forward a new algorithm--DRBE(Dimension Reduction and IP Bits Extraction) based on Dimension Reduction technique. It has good behaving in time and memory performance and supports rules updating, but preprocessing time is not so perfect. The works for optimizing of DRBE and research a new algorithm are continuing.