Let $\operatorname{cl}_{D}(v)$ denote the parser-visible ancestor closure of candidate FIB prefix $v$. The incremental object cost of adding $v$ to a current selection $S$ is

This is not a fixed item cost. If some ancestors are already selected, the same deep prefix becomes cheaper.

Lemma 1 (Ancestor reuse). If $S\subseteq S^{\prime}$, then $c_{S^{\prime}}(v)\leq c_{S}(v)$ for every candidate $v$.

Proof. Because $S\subseteq S^{\prime}$, removing $S^{\prime}$ from the same closure can only remove at least as many already-present nodes as removing $S$. $\square$

This tiny observation has a large algorithmic consequence: a static ranking such as “traffic divided by depth” cannot capture the true marginal cost. Previously selected ancestors create reuse, and the greedy score must be recomputed after every commit.

The repository contains an exact dynamic program, PCT-DP, for the memory-only prefix-closed subproblem. For a selected node $v$, let $F_{v}(k)$ be the maximum exact-LPM weight obtainable from the subtree of $v$ with $k$ selected nodes, conditioned on selecting $v$ (the root is free). If $w_{v}$ is $v$’s FIB weight or zero for a structural node, then the recurrence is a tree convolution:

where $u_{1},\ldots,u_{r}$ are children of $v$ and the zero option means not selecting a child subtree. The implementation realizes this recurrence by repeatedly merging child budget tables.

PCT-DP is useful conceptually because it separates two facts. Prefix closure alone is structured enough for exact dynamic programming on a tree; adding bank assignment and certificate-aware state-dependent value destroys that clean one-dimensional budget structure.

Fix selected state $S$ and parser depth $D$. Every trace packet has a unique deepest selected match $s=\operatorname{HW}(x,S)$ and a unique true LPM $t=\operatorname{LPM}(x)$. If $s\neq t$ and $a(s)=a(t)$, the packet contributes to exactly one candidate pair $(s,t)$.

Define the weight of a pair as

for action-valid pairs only.

Proposition 1 (Optimal certificate selection for fixed $S$). Under uniform certificate cost and a budget of at most $m_{C}$ certificates, selecting the $m_{C}$ pairs with largest $q_{S}(s,t)$ maximizes certificate hits for the fixed prefix set $S$.

Proof. Each eligible trace packet contributes to exactly one pair because both $\operatorname{HW}(x,S)$ and $\operatorname{LPM}(x)$ are unique. Therefore the traffic covered by distinct certificate pairs is disjoint, and total certificate hits are the sum of selected pair weights. Under equal cost, the maximum-weight subset of cardinality $m_{C}$ is exactly the top-$m_{C}$ weights. $\square$

This is one of the useful structural simplifications in the implementation. The certificate subproblem does not require another approximate solver once $S$ is known.

Although fixed-$S$ certificate choice is simple, $q_{S}$ itself changes when $S$ changes. If a deeper selected prefix is added, the deepest selected match for some packets moves from an ancestor $s$ to the newly selected prefix $s^{\prime}$. Existing pairs $(s,t)$ can disappear, new pairs $(s^{\prime},t)$ can appear, and some traffic can become exact. Thus certificate value is not an independent item value attached permanently to a FIB node.

This is why BPC-Greedy evaluates a candidate by replaying its joint exact-plus-certificate effect. The relevant marginal gain is

where $K^{\star}_{S}$ is the optimal top-$m_{C}$ certificate set for fixed $S$.

For a candidate selected set, the implementation sorts selected nodes by decreasing $\lambda(s)$ and places each next item into the currently least-loaded bank, then checks Eq. (5). This is an LPT-style load-balancing heuristic. BankRepairOnly adds a local repair layer that can remove low-density selected leaves when memory or bank constraints are violated.

The bank layer therefore acts as a feasibility filter on a selected prefix set; it is not part of the certificate top-$k$ proof and it is not a simulation of the packet lookup schedule.

Proposition 2 (Model-level dominance of the generalized feasible region). Let $\mathrm{OPT}_{\mathrm{exact}}$ be the best feasible coverage with $K=\emptyset$, and let $\mathrm{OPT}_{\mathrm{cert}}$ be the optimum of the generalized model with certificates allowed under the same resource semantics. Then $\mathrm{OPT}_{\mathrm{cert}}\geq\mathrm{OPT}_{\mathrm{exact}}$.

Proof. Every exact-only feasible solution remains feasible in the generalized problem by choosing the same $S$, $b$ and $K=\emptyset$. $\square$

This is a statement about the optimization model, not the heuristic. BPC-Greedy has no approximation guarantee and can in principle miss a better exact-only construction; BPC-Portfolio partly mitigates that risk by explicitly including exact-heavy candidates.

TopK. A popularity-only sanity baseline ranks FIB prefixes by trace weight without reasoning about bank pressure or certificate opportunities. It is intentionally simple and is not the headliner baseline.

PCT-DP. The exact memory-only dynamic program described above maximizes exact-prefix weight subject to parser depth, budget, and prefix closure. It serves as a useful oracle for small/memory-only settings.

BankGreedy. BankGreedy scores a candidate using its exact FIB-weight gain divided by missing closure cost plus a bank-balance penalty. Candidates that cannot be feasibly assigned to banks are skipped.

BankRepairOnly. The main exact-only hardware baseline begins from BankGreedy and performs conservative local search. For each candidate closure, if the trial exceeds the node budget or bank capacity, the algorithm repeatedly removes low-density selected leaves that are not part of the new closure. Restricting removal to leaves preserves prefix closure. Density is

The repaired trial is accepted only when it is feasible and improves exact-prefix value.

BPC-Greedy is the main proposed heuristic. The released code and raw logs retain the historical label BPC-Repair; the final name BPC-Greedy matches the current behavior because a bank-infeasible BPC trial is skipped rather than repaired.

The outer loop tries certificate budget options $m_{C}\in\Omega$. For each split,

The inner greedy loop starts from $S=\emptyset$ and evaluates every parser-visible FIB prefix. For candidate $v$, it computes missing closure $\Delta_{v}=\operatorname{cl}_{D}(v)\setminus S$, rejects a trial exceeding $m_{P}$, rejects a bank-infeasible trial, exactly chooses the top-$m_{C}$ certificate pairs for the trial, and measures the resulting increase in certified hits.

The implemented score is

The coefficient 0.15 is heuristic; no approximation ratio is claimed. The best positive-gain trial is committed, the certificate set is recomputed, and the process repeats until no feasible positive-gain candidate remains. Finally, the best budget split is retained.

This distinction is central. An exact-first heuristic scores a prefix by traffic for which that prefix is itself the true LPM. BPC scores a prefix by the total safe traffic enabled after certificates are recomputed. A shallow prefix can therefore win even if it has little direct exact traffic.

For example, consider a selected candidate $s$ with three descendant true-LPM classes $t_{1},t_{2},t_{3}$ of weights 40, 25, and 20, with actions A, A, B while $a(s)=A$. With two certificate slots, $s$ can enable 65 certificate hits through $(s,t_{1})$ and $(s,t_{2})$, while $t_{3}$ remains fallback. Exact-only scoring would not see this value unless it stores $t_{1}$ and $t_{2}$ themselves.

BPC-Portfolio evaluates structurally different candidate generators under the same final validation. Fig. 3 shows the branches.

BPC-Greedy branch. Jointly values prefix closures by certificate-aware marginal safe coverage. This is the branch selected by the portfolio in every reported real-name configuration.

BankRepair+Cert. Reserves $m_{C}$ certificate slots, uses BankRepairOnly to construct a strong exact-prefix solution under the reduced prefix budget $m_{P}$, then adds the best certificates available to that fixed $S$. Certificates do not influence which prefixes are selected.

ExactGreedy+Cert. Sorts FIB prefixes by exact trace weight, greedily inserts closures while they fit the prefix budget, then attaches certificates. This branch intentionally favors concentrated exact-LPM traffic.

ShallowShortcut+Cert. Sorts candidates primarily by shallow depth and secondarily by descendant FIB-weight mass. It deliberately seeks cheap ancestors that may act as certificate anchors for large same-action regions. It is the most shortcut-biased portfolio branch.

The portfolio uses lexicographic tie-breaking: higher certified coverage, then higher exact prefix value, then fewer selected nodes.

Let $n=|P_{D}|$ be the parser-visible FIB prefix count, $N=|T|$ the trace size, $h$ maximum relevant name depth, $r=|\Omega|$ the number of budget splits, and $I$ the number of committed greedy rounds. A straightforward candidate evaluation scans the trace to compute certificate-aware coverage and performs a bank assignment for the trial. Ignoring small constants, a conservative implementation-level bound is

which explains why the full 50k BPC sweep is an offline design-space exploration rather than a runtime algorithm.

Several speedups are natural: cache ancestor closures, precompute exact LPM labels, maintain certificate-pair counts incrementally, use lazy-greedy upper bounds, prune dominated budget splits, and compress action-homogeneous regions. These are algorithm-engineering opportunities rather than changes to the semantic model.

We use two complementary workloads. First, a synthetic structured trace isolates parser visibility: 1,200 Interests, 48 FIB prefixes, seed 7, and Zipf parameter $\alpha=1.1$. Second, we replay public NDN testbed names from the TNTech-NGIN dataset [5]. The combined public data contains 265,925 names; the reported run samples 50,000 with seed 1, of which 49,961 have a matched FIB LPM.

The public packet traces do not contain a complete forwarding-state snapshot. We therefore derive a pruned FIB from observed prefixes at depths 1–4 and assign each retained prefix an action class from its first name component. This yields 143 FIB prefixes and six synthetic action classes; the sampled trie contains 14,976 nodes. At $D=8$, 34,076 matched Interests are parser-visible. The experiment is therefore a real-name replay under a reproducible synthetic forwarding-action snapshot, not a replay of a live router’s routing state.

The two bank regimes separate different abstract capacity assumptions. In fixed-total, increasing $B$ partitions fixed total capacity. In fixed-per-bank, each bank retains fixed capacity, so total capacity grows with $B$.

Certified coverage counts exact hits plus accepted same-action certificate hits. All remaining traffic falls back. The would-be unsafe rate is the subset of fallback that matches selected shallow state but is neither exact nor certified. Prefix-bank feasibility is reported separately.

Fig. 5 shows the synthetic parser sweep. Parser-visible traffic rises from 36.83% at $D=6$ to 91.92% at $D=8$, reaching 100% at $D=10$. This effect occurs before placement: a prefix or certificate cannot help a packet whose necessary name structure is not visible to the bounded parser.

At $M=16$, the best exact-only BankRepairOnly coverage is 23.36%, while BPC-Portfolio reaches 39.45%. At $M=32$, the values are 36.45% and 55.26%. At $M=48$, coverage rises from 46.48% to 64.06%, an absolute gain of 17.58 percentage points (approximately 37.8% relative).

The selected BPC states at $M=16,32,48$ contain respectively 4, 8, and 16 trie nodes with certificate budgets 12, 24, and 32. At $M=48$, the normalized budget is therefore

This split should not be read as a physical claim that one certificate occupies exactly the same number of bits as one trie node; $\gamma=1$ is the reference normalization used in this experiment.

Fig. 7 reproduces the bank-model sensitivity at $M=48$. Exact-only coverage is strongly affected by the tested regime, whereas BPC remains at 64.06% because its selected prefix state is small enough to be feasible in every tested setting.

This result is intentionally interpreted conservatively. The current bank model has three important simplifications:

1. 1.

   only selected trie nodes are assigned bank load; certificate metadata and guard accesses are not;

2. 2.

   a shallow selected node is charged its trace-derived true-LPM load, not all descendant packets that may logically use it through certificates;

3. 3.

   the bank assignment is an offline feasibility partition; runtime addressing, parallel probing, arbitration, and deepest-match reduction across banks are not simulated.

Consequently, the bank experiments are best viewed as one abstract resource-pressure dimension of the placement study. A bank-free sensitivity run and a concrete certificate-table datapath are natural follow-up evaluations; their results cannot be inferred from the present CSVs without rerunning the mapper.