高吞吐量协作防火墙的双向去冗余方法  

A Bidirectional Redundancy Deletion Approach to High-throughput Cooperative Firewall

作　　者：秦拯[1] 欧露[1] 张大方[1] Alex X.Liu 

机构地区：[1]湖南大学信息科学与工程学院,湖南长沙410082 [2]密歇根州立大学计算机科学与工程系,密歇根兰西488241266

出　　处：《湖南大学学报（自然科学版）》2013年第1期93-97,共5页Journal of Hunan University:Natural Sciences

基　　金：国家自然科学基金资助项目(61070194;61272546);湖南省科技计划重点资助项目(2011FJ2003)

摘　　要：针对协作防火墙中冗余规则会降低其吞吐量的问题,提出一种基于双向去冗余的高吞吐量协作防火墙优化方法.该方法通过比对协作防火墙中双方的防火墙规则,双向去除域内防火墙之间的冗余规则,提高整个协作防火墙的数据包过滤能力.仿真实验结果表明,该方法的冗余率达到了22.7%,提高了8.2%吞吐量,明显优于已有协作防火墙优化方法.In order to solve the problem that redundant rules in cooperative firewall will reduce the throughput, a bidirectional redundancy deletion approach to high-throughput cooperative firewall was presented to explore cooperative firewall with one administrative domain. This approach removes redun- dant rules of two firewalls in cooperative firewall by comparing the rules of two firewalls, and simultane- ously enhance the throughput of whole cooperative firewall. The result of the simulation experiment shows that, redundancy rate of the approach reached 22. 7%, and the cooperative firewall throughput was im- proved 8.2 %. Compared with the existing methods, the approach benefits more in removing the redundan- cy rules of cooperative firewall ＇and improving the cooperative firewall throughput.

关 键 词：网络安全 协作防火墙 吞吐量 冗余 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]