防火墙并行工作的实现

Realization of firewall parallel working

越来越多的关键应用运行在计算机网络上,作为计算机网络安全防护基础设施的防火墙充当着越来越重要的角色.应用的逐渐扩展,用户的不断增加使得单台防火墙的处理能力不断下降,处理速度不断减慢,防火墙已经影响到网络的正常运行,成为网络之间数据传输的瓶颈.介绍了多台防火墙并行工作的必要性和实际中常用的两种防火墙并行工作的方法,并说明了两种方法在实际中的优点和不足.重点阐述了多台防火墙动态并行工作的原理和实现及如何消除网络中防火墙的单点故障.

More and more important applications are running on computer networks. Firewalls, as the basic security facilities of computer networks, play an increasingly important role. The ability and handle speed of single firewall decrease with development of applications and increase of users, which has effects on applications and formed a choke point of computer networks. Under this circumstance, necessary of employing muhi-firewall that working in parallel way and two approaches used in practice have been described, merits and defects of two approaches were also analyzed. Principle and realization of parallel dynamic working firewalls were given and single fault elimination method in network firewall were emphasized strongly.