The increasing use of computers in various fields has led to the popularization of cloud computing due to its advantages, such as large scale, high performance, low power consumption, high reliability, and low cost. However, the rapid growth of business volume and kinds of computer hardware resources, along with complex computer architecture, poses challenges in allocating hardware resources. Traditional methods struggle to meet the varying requirements of different businesses, hinder automatic tuning, and limit the improvement of overall system performance. In this regard, we propose an automatic QoS-aware resource partitioning framework that aims to maximize the overall performance of the system. Our contributions include an automatic performance tuning framework for cloud environments, a Deep Q-learning Network (DQN) based performance optimization method, and achieving a speed-up of at most 1.73 times compared to uniform partitions for CPU overload scenarios involving throughput-aware and latency-critical workloads. The proposed framework addresses the challenges faced by cloud computing by adopting different allocation methods for hardware resources that maximize performance in different application scenarios. The framework efficiently utilizes emerging hardware resource control capabilities to improve hardware and system performance. The use of DQN in performance optimization allows the framework to learn from past experiences and adapt to different situations, resulting in better resource allocation decisions. The proposed framework can significantly reduce the waste of resources and unnecessary expenditures for governments and enterprises. Our framework can serve as a guide for future research in cloud computing and related fields.
KEYWORDS: Field programmable gate arrays, Data transmission, Network security, Data conversion, Clocks, Inspection, Computing systems, Structural design, Lithium, Internet
The Internet environment is becoming more and more complex with the increasing scale of users and richness of network applications recent years. Malicious network flows are difficult to be inspected with only five-tuple information contained in the network packet header, and application layer traffic analysis has become an important basis for network security. Deep packet inspection (DPI) is an application layer-based flow monitoring and identification technology, which inspects and analyzes each network data packet through a regular expression matching system to check the compliance and security of network data packets. However, with the continuous increment of Internet bandwidth, limited by the computing capability of the processor and the computational complexity of regular expressions, the content recognition subsystem based on the central processing unit (CPU) is hard to identify malicious network flows in a high-speed network environment with large traffic so that the regular expression matching system became a bottleneck in network security. A filed programmable gate array (FPGA)-based regular expression matching acceleration system with high computing parallelism is proposed this paper. And the regular expressions are converted into state transition tables and transferred into Verilog HDL through lexical analysis. The data throughput and development efficiency are rapidly improved with innovation design upon hardware structure and compilation tools. The function and performance of the system were verified with simulation software and it is proved that the throughput of the system based on Xilinx Alevo U200 acceleration card will reach at over 50Gbps under condition that more than 10,000 regular expressions with thirtytransition-state implemented. This work will greatly improve the entire performance of the firewall and shorten the system iteration and upgrade cycle.
Access to the requested content is limited to institutions that have purchased or subscribe to SPIE eBooks.
You are receiving this notice because your organization may not have SPIE eBooks access.*
*Shibboleth/Open Athens users─please
sign in
to access your institution's subscriptions.
To obtain this item, you may purchase the complete book in print or electronic format on
SPIE.org.
INSTITUTIONAL Select your institution to access the SPIE Digital Library.
PERSONAL Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.