| 基于IP流本地性的状态检测性能优化方法 |
| |
| 引用本文： | 郑卫斌,段中兴,高磊,张德运. 基于IP流本地性的状态检测性能优化方法[J]. 西安交通大学学报, 2004, 38(4): 413-416 |
| |
| 作者姓名： | 郑卫斌 段中兴 高磊 张德运 |
| |
| 作者单位： | 西安交通大学电子与信息工程学院,710049,西安 |
| |
| 基金项目： | 国家“八六三”网络安全管理与测评技术资助项目 (863 - 3 0 1 - 0 5- 0 3 ) |
| |
| 摘 要： | 提出了一种哈希表优化算法(MTH)以提高状态检测的速度．该算法根据IP流本地性，即最近访问过的会话节点很有可能被再次访问的特点，将刚访问的节点放置在Bucket链表头部，以减少哈希表的整体内存访问次数，提高会话表的速度．历史流量驱动的性能仿真实验表明，MTH算法的性能明显优于原哈希表算法，能够满足高速状态检测防火墙的速度要求．
|
| 关 键 词： | 防火墙 状态检测 哈希表算法 本地性 |
| 文章编号： | 0253-987X(2004)04-0413-04 |
| 修稿时间： | 2003-07-07 |
Performance Optimization of State Inspection Based on IP Traffic Locality |
| |
| Zheng Weibin,Duan Zhongxing,Gao Lei,Zhang Deyun. Performance Optimization of State Inspection Based on IP Traffic Locality[J]. Journal of Xi'an Jiaotong University, 2004, 38(4): 413-416 |
| |
| Authors: | Zheng Weibin Duan Zhongxing Gao Lei Zhang Deyun |
| |
| Abstract: | An optimized hash table algorithm-move-to-head (MTH) is introduced to improve the state inspection speed. Due to the IP traffic locality, the recently accessed session nodes have higher probability to be accessed once again. In MTH, they are moved to the head of the bucket chain to reduce the number of the entire memory accesses in the hash table and improve the session table speed. The trace-driven simulations demonstrate that MTH has a better performance than the original hash table algorithm, which suits the high-speed state inspection firewall well. |
| |
| Keywords: | firewall state inspection hash table algorithm locality |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
