Research & Implementation Of Loading Balance On Firewall

Network security was an important issue in Computer Science. Firewall, as the basic structure on the network security, have improved and updated in the recent ten years. In the characters of firewall, such as security, flexibility and availability, high availability is a target in the future of firewall.Research of loading balance on firewall is a sub-project of researching and implementing on the security platform of banking information system, a key state-level technology development project in the Tenth Five Year Plan period. Based on this project, we do lots of research, thus benefit from both theory and practice.In this paper, we gave the definition, character, class, key technology of firewall and its development. According to loading balance on firewall, we described loading balance's conception, transport link polymerization, exchange technology, especially LVS cluster and balance algorithms.From the design object of this sub-project, we expound the design thinking, system structure and core technology. And based on this, we address the design and method of Servers Loading Balance module and Hot Standby module, including DNAT, LC algorithms, heartbeat inspection, and synchronization policy.Although we have improved performance of firewall using modules of Servers Loading Balance and Hot Standby, we can't settle single entry point of firewall. In order to more improve firewall performance, after researching and analyzing distributed firewall and firewall cluster, we present the development prototype of firewall cluster system,difficulties.At last, we summarize of our design and purpose the development direction of futurefirewall.