The Design And Implementation Of Data Packet Filtering Based On IXP2400 Network Processor

Nowadays Giga networks are used more and more widely, so the development of huge-speed Giga firewalls is always a hot point in the field of network security. A network processor is programmable network equipment which has been designed for high-speed packet forwarding systems. It can fateful the requests of both high performance and high flexibility. It is the best choice for the development of a Giga firewall.In the dissertation we designed and implemented a Giga firewall based on IXP2400 Network Processor. Aims at how to make the best of the characteristic of IXP2400 Network Processor to improve the capability of Giga firewalls, researches on the exploiter of microengine and the problem of more processors more threads parallel disposal. And then implemented in the microengine with data packet filtering, NAT, make the firewall have very high performance.The content is as follow: Analyze the IXP2400 network processor's hardware and software, especially in the problem of parallel disposal. Considered the designs about the concurrency among the microengines of IXP2400 and among the micorengine threads. During the implementation of the firewall, we built a system which could forward packets at line rate in a Giga network. Test to the function of firewall, discuss the superiority of IXP2400 network processor which we choose for firewall.