基于IXP2400千兆防火墙包分类算法的设计与实现

Design and Implementation of Packet Classification in Gigabit Firewall Based on IXP2400

针对千兆网下包过滤防火墙,提出了HSB IPG(Hash Search Based on IP Group)包分类算法,并分析了算法的优缺点,基于该算法用IXP2400实现了线速千兆包过滤防火墙,通过实验证明了此算法是可行和高效的。

This article focuses on packet filtering firewall used on gigabit network and presents a packet classification algorithm called HSBIPG（ Hash Search Based on IP Group）. Then we analyze advantages and disadvantages of this algorithm. Finally, we implement a line rate gigabit packet filtering firewall using this algorithm on IXP2400 network processor and it proved to be feasible and efficient by experiment.