Distributed Parallel To The Research And Design Of The Firewall System

With the development of Internet technology, network is imperiled by more and more various attacked. People pay more attention to network securities. Furthermore, as the content increased, firewall needs quicker speed and deals more throughout. Firewall is an important measure assured network security and its dealing speed affects directly network throughout. So, improving firewall speed of dealing data and eliminating network failure bottleneck are an important network technology developing direction. Distributed and Parallel Firewall(DPFW) is a distributed system applying distributed and parallel technology on firewall to improving firewall dealing speed and throughout. DPFW system is made up of several single firewall, adopting distributed and parallel technology. Comparing with normal single firewall, DPFW processes many advantages. For example, the system configures numbers of firewall according to requirement of bandwidth. It can automatically implement dynamic load balance and eliminate Single-Point-of-Failure bottleneck. Moreover, it is provided with reasonable price. The paper describes the technologies related with firewall and distributed and parallel firstly, introduces two architectures of DPFW: DPFW based-on flux dispatch mechanism and DPFW based on Negotiation-Mechanism. The paper analyzes the theory research of the former, described the latter's implementation in detail, then discusses the key technology of implementation. Finally, the paper describes applications of DPFW based on Negotiation-Mechanism in practice and analyzed it in theory. The innovative things in the paper lie in providing a new technology of DPFW based on Negotiation-Mechanism, the technology resolves effectively the problem of distributing data in DPFW and parallelizing data in DPFW. The system is developed on the platform based on Linux and is proved as a reliable and stable distributed and parallel firewall system.