期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

千兆线速防火墙SOFTWall8000的设计与实现

Design and implementation of gigabit wire-speed firewall SOFTWall8000
下载PDF
导出
摘要 随着千兆网络开始在国内大规模普及,对千兆线速防火墙等高性能网络安全产品的需求日益迫切。利用XpeediumTM CXE-16芯片、pp1200、TCAM和CPCI2.16技术开发了千兆线速防火墙硬件平台,并基于该平台设计并实现了千兆线速级防火墙系统SOFTWall8000。该防火墙系统与使用网络处理器(NP)和ASIC技术实现的千兆防火墙系统相比,具有结构开放、灵活,综合计算能力强,可靠性高等优势。 A universal hardware platform based on XpeediumTM CXE- 16, ppl200, TCAM chip and CPCI 2.16 technology is proposed. On this platform, a ftrewaU system with gigabit wire-speed is designed and implemented, Compared to others using NP and ASIC technique, this firewall system is better in structure, flexibility, integrated compute and reliability.
作者 石聪聪 蔡圣闻 谢俊元
机构地区 南京大学 计算机科学技术系
出处 《计算机工程与设计》 CSCD 北大核心 2007年第24期5858-5862,共5页 Computer Engineering and Design
基金 江苏省软件和集成电路专项基金项目(2003031190006)
关键词 千兆 线速 防火墙 负载均衡 并行 gigabit wire-speed firewall load equalization concurrence
分类号 TP393.08 [自动化与计算机技术—计算机应用技术]
  • 相关文献

参考文献9

  • 1Steve Carr, Philip Sweany.Automatic data partitioning for the agere payload plus network processor [C]. USA: ACM, 2004: 238-247.
  • 2Shrikumer H.40Gbps delayered silicon protocol engine for TCP record[C], Germany:System Design Records,2006:188-193.
  • 3Xuehong Sun, SartajK Sahni, Yiqiang Q Zhao.Paeket classification consuming small amount of memory[C]. USA:IEEE/ACM Transactions on Networking,2005:1135-1145.
  • 4Wright C Cowan,Morris J.Linux security modules: General security support for the Linux kernel [C]. San Francisco, CA: USENIX Association, USENIX Security Symposium, 2002: 17-31.
  • 5Mangione-Smith W H,Memik G,Network processor technologies [EEOL]. http:/www. cs.ucr. edu/-bhuyan/cs162/LECTURE8.ppt, 2001.
  • 6Gleen Herrin. Linux IP networking [EBOL] .http://www.cs. unh.edu/cnrg/gherrin/inux-net.html.
  • 7蔡圣闻,黄皓,谢俊元.内核级透明代理TPF的设计与实现[J].计算机科学,2004,31(4):69-73. 被引量：1
  • 8王宇.千兆防火墙的3大体系架构[J].中国计算机用户,2004(32). 被引量：1
  • 9曾宇.千兆防火墙的技术发展分析[J].计算机安全,2003(33):56-56. 被引量：1

二级参考文献14

  • 1Herrin G. Linux IP Networking. May 2000. http://kernelnewbies. org/documents/ipnetworking/linuxipnetworking. html
  • 2Anand V, Hartner B. TCP/IP Network Stack Performance in Linux Kernel 2.4 and 2.5 2002. http://www. linuxsymposium.org/2002/view_txt. php?text = abstract&talk = 91
  • 3Stevens W R. TCP/IP Illustrated, Volume 2: Implementation.Addison Wesley Longman, Inc, 2000
  • 4Payne C, Markhan T. Articeture and Application for a Distributed Embedded Firewall. 2002. www. acsac. org/2001/papers/73. pdf
  • 5Cisto Systems, Evolution of the Firewall Industry 2002 http://www. cisco. com/univercd/cc/td/doc/product/iaabu/centri4/user/scf4ch3. htm
  • 6Srinivasan V.Fast and efficient internet lookups[D]:[Ph.D Thesis].Washington University,1999
  • 7Gallatin A, Chase J, Yocum K. Trapeze/IP:TCP/IP at NearGigabit Speeds, 1999 USENIX Annual Technical Conference
  • 8Epstein J, Thomas L, Monteith E. Using Operating System Wrappers to Increase the Resiliency of Commercial Firewalls. In:16th Annual Computer Security Applications Conf. 2000
  • 9Kang J-M, et al. Extended BLP Security Model Based on Process Reliability for Secure Linux Kernel. 2001. http://www.computer. org/proceedings/prdc/1414/1414toc. htm
  • 10Barford P, Crovella M. Critical Path Analysis of TCP Transactions. In:Proc. of the 2000 ACM SIGCOMM Conf. Sep.2000
计算机工程与设计
2007年 第24期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部