高吞吐量协作防火墙的双向去冗余方法

针对协作防火墙中冗余规则会降低其吞吐量的问题,提出一种基于双向去冗余的高吞吐量协作防火墙优化方法.该方法通过比对协作防火墙中双方的防火墙规则,双向去除域内防火墙之间的冗余规则,提高整个协作防火墙的数据包过滤能力.仿真实验结果表明,该方法的冗余率达到了22.7％,提高了8.2％吞吐量,明显优于已有协作防火墙优化方法.

A Bidirectional Redundancy Deletion Approach to High-throughput Cooperative Firewall

In order to solve the problem that redundant rules in cooperative firewall will reduce the throughput, a bidirectional redundancy deletion approach to high-throughput cooperative firewall was presented to explore cooperative firewall with one administrative domain. This approach removes redundant rules of two firewalls in cooperative firewall by comparing the rules of two firewalls, and simultaneously enhance the throughput of whole cooperative firewall. The result of the simulation experiment shows that, redundancy rate of the approach reached 22.7%, and the cooperative firewall throughput was improved 8.2%. Compared with the existing methods, the approach benefits more in removing the redundancy rules of cooperative firewall and improving the cooperative firewall throughput.