全新一代硬件防火墙的功能与性能分析  

Function and Performance Analysis of New Generation Hardware Firewall

作　　者：羊尚波 徐胜超 Yang Shangbo;Xu Shengchao(School of Data Science,Guangzhou Huashang College,Guangzhou 511300,China)

机构地区：[1]广州华商学院数据科学学院,广东广州511300

出　　处：《科学技术创新》2022年第23期95-98,共4页Scientific and Technological Innovation

基　　金：广东省教育厅重点建设学科科研能力提升项目(2021ZDJS136);广东省高等学校科学研究特色创新项目(2021KTSCX167)。

摘　　要：目的:探究全新一代硬件防火墙的功能与性能。方法:选用Smart-bits测试工具、IXIA测试工具、BPS测试工具、Avalanche测试工具,部署防火墙测试环境,对全新一代硬件防火墙的功能、吞吐量、延迟、最大并发连接数等性能进行测试。结果:在实际应用中,全新一代硬件防火墙具有有效抵御外部环境攻击的功能,可实现对外部攻击的安全防护。防火墙吞吐量测试结果满足>90.0 MBit/s的条件,并实现将其数据帧传输延迟控制在200.0us~300.0us之间,保证最大并发连接数为240000个。结论:全新一代的防火墙现有功能与性能基本可以满足网络安全防护需求,但延迟性能仍有提升空间,可通过优化硬件防火墙结构,进一步缩短其延迟。Objective:Explore the function and performance of a new generation of hardware firewall.Method:Use smart-bits test tool,IXIA test tool,BPS test tool,and Avalanche test tool to deploy a firewall test environment to test the functions,throughput,latency,maximum number of concurrent connections,and other performance of the new-generation hardware firewall.Results:In practical application,the new generation of hardware firewall has the function of effectively resisting external environment attack,and can realize the security protection against external attack.The firewall throughput test results meet the requirements of>90.0 MBit/s.The transmission delay of data frames is controlled between 200.0us and 300.0us,and the maximum number of concurrent connections is 240,000.Conclusion:The existing functions and performance of the new generation firewall can basically meet the requirements of network security protection,but there is still room to improve the delay performance.The hardware firewall structure can be optimized to further shorten its delay.

关 键 词：防火墙 并发连接数 吞吐量 测试条件 功能分析 性能分析 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]