Based On Of Jushi 863 Chip Stateful Firewall Design Realization

With the rapid development of information age, the Internet is becoming more and more popular.China has become the world's largest number of countries using the Internet. Many network services are required to have an extremely high transaction security, such as Internet banking, electronic money, e-commerce, etc; therefore, network security is a very important specific field.While the firewall technology which has a story of three generations'development has been widely used in the protection of network security. Now a new Stateful Inspection Firewall which using state detection technology has become a more promising firewall than ever.As we know, the information security is crucial to the enterprise, livelihood, economy, military, national security and other aspects, if our country's information and security system rely on foreign technology, certainly there will be in perilous situation without security guarantee. At present, the homogenization phenomenon of firewall products is serious in the domestic market. Most of the products not only use the same hardware, but also a number of security manufacturers use the same platform. Most importantly, the firewall platform which used by foreign chips are built on core technology in foreign countries, so there is a back door CPU, serial number leaks and other security hazards. In recent years, the rapid development of China's information industry and the level of self-research, it has manufactured our own CPU products with intellectual property rights, besides that, some models have been mass production. Therefore, desiging and manufacturing the related products on the platform of China-made CPU can not only improve the competitiveness of China's science and technology, but also be able to have complete independent intellectual property products. Thus, providing better service to meet the needs of national security.In this paper, a framework of the state inspection firewall based on domestic Peking University Jushi -863 CPU is proposed, yet we designed and implemented its hardware and software for its modular. Finally, a test is carried out on the function and performance of the firewall. The result demonstrate that Chinese-made CPU-based stateful firewall is able to meet the needs of communication under the Fast network security.