支持防火墙规则扩展的匹配算法HERAM

Arithmetic(HERAM) of Matching Firewall Rule Supporting its Extension

防火墙是一种重要的网络安全技术,但随着网络规模的发展,遇到了许多急需解决的问题,其中就有防火墙网络瓶颈的问题。提出一种新的规则匹配算法来解决这个问题,把多维的问题进行降维处理,根据规则之间有无关联性把规则进行分类处理,另外把新添加的规则运用散列表进行组织,从而做到在增加扩展性的同时,使时间效率不受大的影响。

Firewall is an important network security technology. However, with its development, many problems occur, especially the speed of firewall . Some people suggest solving the problem by using loading balance or distributing ideas. This essay brings a new arithmetic of matching firewall rule to solve the problem by reducing the dimension of multidimensional problem. This arithmetic classifies the rules according to their relationship and organizes the added rules with hash table with the result that its time efficiency is not influenced much with its extension increased.