多网安全隔离交换系统的设计与实现

以隔离网闸技术为基础,设计并实现了一个多网安全隔离交换系统.系统采用了多线程、ARP缓存、网络地址转换等技术,使多个外网能够并行接入系统,对内网进行安全访问;采用了零拷贝技术,并优化了规则匹配算法以提高处理性能.经验证,设计实现的多网安全隔离交换系统能够对内外网络进行物理隔离,并对网络数据进行深度内容检查和安全控制,且具有较高的网络处理性能.

The Design and Implementation of Multi-network Security Isolation-Exchange System

Based on the technology of isolation network-gap, we design and implement a multi-network security isolation-exchange system. The system adopts the technologies such as multi-thread, ARP buffer and NAT. So it can be connected with more than one outside networks simultaneously, and permit the outside networks to access the inside network safely at the same time. Moreover, the system adopts zero-copy and optimizes the rule-match algorithm to improve process performance. It can be proved that the multi-network security isolationexchange system not only implement physical isolation between the inside network and the outside networks, in-depth detect and security control the datagram on networks, but also attain high network process performance.