Cuckoo filter based IP packet filtering using M-tree

Internet protocol (IP) packet filtering as a firewall (FW) technology is one of the most widely researched networks functions over past two decades. IP process incoming and outgoing network packets by matching several headers fields with thousands predefined filters known filter-set. With development modern technologies such software-defined networking (SDN) increase in attacks threatening security, attention has become focused on filtering. growing size number filter-sets, it becomes challenge to perform at wire-speed. In this paper, new method proposed for filtering, where data structures were combined produce structure suitable high performance support dynamic access well approximate membership query. Experimental results show that throughput 10.8 mega per second (MPpS) accuracy low memory requirements working big filter-sets (up 1 filters).