| 基于加速引擎的防火墙部署方案 |
| |
| 引用本文： | 魏家好,侯整风,张娜. 基于加速引擎的防火墙部署方案[J]. 合肥工业大学学报(自然科学版), 2006, 29(8): 976-979 |
| |
| 作者姓名： | 魏家好 侯整风 张娜 |
| |
| 作者单位： | 合肥工业大学,计算机与信息学院,安徽,合肥,230009;合肥工业大学,计算机与信息学院,安徽,合肥,230009;合肥工业大学,计算机与信息学院,安徽,合肥,230009 |
| |
| 摘 要： | 文章提出一种提升防火墙数据吞吐量的新方法,引入一台加速引擎的设备,通过实时学习模仿防火墙的安全策略,协同防火墙共同处理网络数据包,降低需要防火墙处理的数据包数量,克服了传统防火墙易于产生性能瓶颈的问题;同时基于Linux/netfilter实现了一个原型系统,并验证了该方案的有效性和可行性。
|
| 关 键 词： | 防火墙 加速引擎 包过滤 |
| 文章编号： | 1003-5060(2006)08-0976-04 |
| 修稿时间： | 2005-09-12 |
Improving the firewall through the accelerator engine |
| |
| WEI Jia-hao,HOU Zheng-feng,ZHANG Na. Improving the firewall through the accelerator engine[J]. Journal of Hefei University of Technology(Natural Science), 2006, 29(8): 976-979 |
| |
| Authors: | WEI Jia-hao HOU Zheng-feng ZHANG Na |
| |
| Abstract: | A new approach of increasing the throughput of the firewall is proposed.An implementor,the so-called firewall accelerator engine is introduced.It can learn the behavior of the firewall and cooperate with it by greatly decreasing the amount of the packets delivered to the firewall.A prototype system based on Linux/netfilter is built to test and verify the scheme.The feasibility of implementing the accelerator engine in real networks is also discussed. |
| |
| Keywords: | firewall accelerator engine packet filtering |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
