基于龙芯处理器的网络防火墙系统的设计与实现  

Design and implementation of network firewall system based on Godson CPU

作　　者：李青[1] 吴少校[1] 乔崇[2] 史岗[2] 刘金刚[1] 

机构地区：[1]首都师范大学计算机科学联合研究院,北京100037 [2]中国科学院计算技术研究所,北京100080

出　　处：《计算机应用》2008年第6期1372-1375,共4页journal of Computer Applications

基　　金：国家863计划项目(2005AA1100102006AA010201);中法合作90纳米工艺龙芯CPU设计项目(2005AA119020)

摘　　要：设计并实现了一个网络防火墙计算机系统方案。该方案采用国产高性能龙芯2E处理器和L inux操作系统,并对防火墙系统软件的核心策略、硬件结构设计、高速信号完整性设计、网络数据包吞吐率和延时的测试方法等关键问题给出了相应的解决方法。针对信号完整性问题提出了先期约束后期仿真的布线机制,提高了高速信号系统板级设计的可靠性。给出了网口数据包吞吐率和延迟这两项评估防火墙性能的关键指标的测量和计算方法。板级仿真和实际网络性能测试数据表明,该方案是一个通用且安全可靠的防火墙系统方案。A network firewall system based on Godson2E CPU was designed. This solution used Godson processor as the CPU and a self-designed north bridge. The key technologies of the design such as firewall software strategy, hardware architecture design, signal integrity and the solution of testing the network packet passed ratio and delay were discussed and the corresponding solutions were given too. In order to solve the signal integrity problem, a layout mechanism of restriction in advance and simulation subsequently was put forward, which improved the design reliability of the motherboard with highspeed signals. A testing and computing solution for the network packet passed ratio and delay was also given, which was the key performance parameters of the network firewall computer system. Theoretical and experimental results show that this solution is an all-purpose, secure and reliable firewall system design.

关 键 词：网络防火墙 龙芯2E处理器 信号完整性 网络数据包吞吐率 网络数据包延时 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP303[自动化与计算机技术—计算机科学与技术]