Research And Implementation Of SGAP Master Software System

With the increasing methods of network attack, traditional network security products cannot satisfy higher level network and data transmission requirements. Customers, such as financial organizations, governments, and research institutes, require both secure isolation and information exchange between their internal network and the distrusted external network. Fortunately, GAP technology is developed to fulfill these requirements.This article first introduces the presentation of network security and its relevant products, then expounds the idea and principle of the GAP. We describe the function of the SGAP (Special GAP). To meet the function and performance requirements of the users, SGAP adopts the architecture of the separating the Control Panel and Data Panel. SGAP is made up of Master Unit, Isolation Unit, Internal Network Unit and External Network Unit.The article first discuss the function and components of the Master Unit. The Master Unit is used to control the Isolation Unit, to communicate with the RCP Client and the Internal/External Network Unit, and to configure the system. We describe critical modules (communication module, configuration module and rule-managing module) in detail. The communication module completes the communication between the several Units and Threads in the Master software; the configuration module parses the commands, calls the relevant handier and stores the configuration; rule managing module control the security rules. We describe the managing methods of large numbers of rules, and tests performance of different rule management methods.At last, something in the architecture need improvement is expounded, and the feasible solution is introduced.