摘要
包过滤的效率极大地影响防火墙的性能。提出了一个基于INTEL IXP2400网络处理器高效的包过滤方案。此方案通过动态规则表,静态规则树及哈希硬件加速单元实现对包过滤的优化,使得基于INTEL IXP2400的防火墙能真正达到千兆线速。
The efficiency of packet filter is vital for firewalls. An efficient packet filter solution based on INTEL IXP2400 was talked about. This solution optimized packet filter through dynamic nile table, static nile tree and hardware hash unit. The firewall designed in this way can reach 1000M line speed.
出处
《计算机应用》
CSCD
北大核心
2005年第11期2568-2570,共3页
journal of Computer Applications
关键词
防火墙
包过滤
网络处理器
静态规则树
动态规则表
firewall
packet filter
Network Processor（NP）
static rule tree
dynamic nile table
