Design of a high-performance ATM firewall

摘要: A router-based packet-filtering firewall is an effective way of protecting enterprise network from unauthorized access. However, it will not work efficiently in ATM because requires the termination end-to-end connections at a router, which incurs huge overhead SAR (Segmentation and Reassembly). Very few approaches to this problem have been proposed literature, none completely satisfactory. In paper we present hardware design high-speed that does require connection middle. We propose novel philosophy, called Quality Firewalling (QoF), applies security measures different strength traffic with risk levels show how can be implemented our firewall. Compared traditional firewalls, performs exactly same packet-level filtering without compromising performance has "look feel" by sitting chokepoint between trusted LAN untrusted WAN. It also easy manage flexible use.