Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-13577

Optimize ip address handling in flow classification engine

    XMLWordPrintable

    Details

    • Type: Enhancement
    • Status: Resolved (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 29.0.0
    • Component/s: None
    • Security Level: Default (Default Security Scheme)
    • Labels:
      None
    • Sprint:
      Horizon 2021 - Sep 15 - 29

      Description

      The flow classification engine uses a decision tree to classify flows. At each node the protocol, src/dst port, or src/dst address of a flow is compared to some threshold.

      This works well in case for protocols and ports because they are represented by single integer numbers. Comparison is cheap. In case of ip addresses comparison is expensive because a byte array representation of ip addresses is used for comparison. It would be much more performant to use an integer (for IPv4) or 2 longs (for IPv6) for representing ip addresses.

      The ClassificationEngineBenchmark can be used to check classification performance.

        Attachments

          Activity

            People

            Assignee:
            swachter Stefan Wachter
            Reporter:
            swachter Stefan Wachter
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Git Integration