| The technology of firewall separates the private network from the public network and protects the private information and entities. It has been widely applied to the interconnected environments of the dedicated network and public network. The appearance of the firewall restrains the freedom of data in the networks from flowing effectively and improves the security of networks. The design and implementation of high speed firewall is a big problem that we must resolve. Network processor is the trend of high speed network devices which have the merits of ASIC and general processors. Intel has created a kind of architecture of packet processing based on Intel network processor, which is called IXA (Internet eXchange Architecture). This architecture conform the programmable ability of IXP and the powerful packet processing ability for the fast development of the intelligence network devices. IXP2350 is the new generation network processor of Intel. It has high performance of packet processing and suitable for several local networks and remote communications devices. This paper introduces a design of firewall based on Intel Network Processor IXP2350. The functions of this firewall include packet filtering, state inspection, VPN, NAT/PT and etc.This dissertation consists of three parts, firewall research, Intel network processor and the design and implementation of firewall.In the first part, network security problem and firewall theory are introduced. Then, current problems of firewall system are also mentioned in this part.In the second part, we mainly introduce Intel network processor and its principle. The hardware structure of IXP2350 and its advantage as platform of firewall are also described in details.The last part, the most important part of this dissertation, concentrates on the design and implementation of firewall, including packet filtering, state inspection, VPN, NAT/PT and etc.In this dissertation, we attach importance to firewall system, IXP2350 and codes of... |
PDF Full Text Request