Study For The Realization Mode Of HEF Firewall

As realize network and information safe important guarantee, for inside network while bringing firewall safely, Have produced certain side effect too 桼educe the operational efficiency of the network. People have already required higher network safety coefficient at the time of enjoying resources of the network, Require the transmission speed of the quicker network again. In order to meet this demand, the fire wall is while meeting online security performance , Solve the transfer rate bottleneck, realize that the security, efficiency pair are broken through .This thesis analyse domestic and international firewall on the technological foundation, regard raising the efficiency as object synthetically, to traditional deficiency that firewall exist in the technology, discuss the efficiency method of firewall of raising from 3. Main content of "HEF (High Efficient Firewall) firewall realize mode study" have:(1) Emulation experiment and IPv6/TunnelBroker model set up through Transproxy, explain Transproxy method, improved structure of RFC3053 emphatically, Act for technology about solution of efficiency, make their suitable for different need of ISP of scale;(2) On the basis of analysing IPSec agreement security question, to ISAKMPSA varying load attacks and improves in consulting, Carry on form analyses, proved, design VPN high-efficient safe model based on IP/IPSec concept finally;(3) On the basis of IDS dynamic characteristic of system, for remedy firewall static deficiency of defence, Design one method that the two combine , offer a good foundation for high-efficient online security system;(4)Through theory design and emulation experiment, the above-mentioned three part can make and imbed fire wall of the system for module, Offer certain theoretical foundation to domestic fire wall design of product.