Feature Description

Overview

Hyperscan is a high-performance regular expression matching library. It is developed based on Perl Compatible Regular Expressions (PCRE) and is open-source under the Berkeley Software Distribution (BSD) license. It follows the regular expression syntax of the commonly-used libpcre library but has its own C interfaces. Based on the official Hyperscan release and Kunpeng microarchitecture, the implementation mechanism of core interfaces is redesigned, the development and performance are optimized, and the software package suitable for the Kunpeng platform is released. Users of the Kunpeng platform can download this software package based on their service requirements to improve the stability and performance of services on the Kunpeng platform.

The following functions are added to the Hyperscan version dedicated for the Kunpeng platform:

• The Kunpeng platform is supported and fully compatible with the Armv8-A architecture. In addition, the compatibility and user experience on the x86 platform are not affected.
• It boosts application performance on the Kunpeng platform by leveraging multi-dimensional technical methods, including NEON instructions, inline assembly, data alignment, instruction alignment, memory prefetch, static branch prediction, and code restructuring.
• The Kunpeng Hyperscan Enhanced Library (KHSEL) software enhancement package is released, including the KHSEL_ops and KHSEL_core sub-libraries.
  • KHSEL_ops provides the ReplaceAllAcc function, which accelerates the ReplaceAll function of the C++ standard library in a fixed rule. The optimization effect can be obtained on Kunpeng 920 series processors.
  • KHSEL_core optimizes the large-pattern matching algorithm FDR, small-pattern quick matching algorithm Shufti, and long-rule verification, and enhances the scan performance of Hyperscan for processing datasets such as snort_literal and snort_pcre.

For more information about Hyperscan, visit Kunpeng Gitcode.

Constraints

Hyperscan can function properly on Kunpeng 920 series processors running openEuler 22.03.

Application Scenarios

Hyperscan is suitable for scenarios such as network security data distribution, fine-grained data distribution for carriers, data distribution for public security and technical investigation, IDP, web application firewall (WAF), and foundation model application firewalls.