Firewall strategies using network processors

摘要: The emergence of network processors provides a broad range new applications, particularly in the field security. Firewalls have become one basic building blocks implementing network's security policy; however, firewall can potentially lead to bottleneck network. Therefore, improving performance means also protected With ability direcdy monitor and modify packet information at wire speeds, processor avenue for pursuit faster, more efficient products. This paper describes implementation two simulated based firewalls. first architecture, filtering firewall, utilizes tree-based structures manipulating IP transport level rules while utilizing parallelism available during rule look-ups. In second parallel is created using based, load-balancing switch along with machines, both filter operations architecture. When added existing routing software, these implementations demonstrate feasibility creating dynamic packet-filtering routers technology.