基于深度包检测的防火墙系统设计

System Design of Firewall Based on Deep Packet Inspection

随着互联网的飞速发展,防火墙作为网络安全防护的重要手段已经成为了人们研究的重点。为了能够高效地过滤无关数据报文、抵御恶意攻击、保障网络的安全稳定运行,在研究深度包检测技术的基础上,提出了一种基于现场可编程门阵列、三态内容可寻址寄存器架构而实现的硬件防火墙系统。测试表明,该系统能够满足实际要求。

With the rapid development of the Internet,as an important means of network security,firewall has become the focus of research.In order to effectively filter the irrelevant data packets,resist the malicious attacks,and ensure the safe and stable operation of the network,on the basis of researching on the deep packet inspection (DPI) technology,a firewall system based on field programmable gate array (FPGA) and ternary content addressable memory (TCAM) was presented.The test results show that the designed firewall system based on deep packet inspection technology can meet the actual requirements.