Based On Ixa Of Ipv4/ipv6 Dual High-performance Hardware Firewall

A simple and effective way for information sharing has been provided by the fast development of internet, which has improved work efficiency of many industries including business, science research, education etc. At the same time, network security has been attached importance to by people. As an application technology of information security, firewall separates internal network and external network of enterprise effectively and provides special information to outside. Firewall usually is configured with router of network protected in series, in order to protect the whole network. So the connecting rate between the network and outside is affected by the performance of firewall. Not only internal network behind firewall should be protected by the new generation firewall, but also the new generation firewall should be with better performance.According to "IPv6 hardware fire wall based on network processor technology" project that author participated, detailed introduction about IXA (Intel Internet Exchange) and protocol characteristics of IPv6 are given by this thesis. Combining the requirement of development trend of firewall and the outstanding characteristics of network processor, a scheme developing a high performance firewall is put forward and key technique of this firewall is introduced in detail by this thesis.The text commenced from the technique background of the firewall, which introduced the IXA architecture of the network processor first, including the total architecture characteristics, internal technique, hardware etc.; Then described the whole hardware structure and the software structure of the firewall, and development environment; After that introduced the conception of network security and firewall technique, and gave analysis of characteristics of IPv6 protocol in detail; With the firewall design immediately after at every step thorough, put forward the requirement of the IPv6 firewall project first, including design target, technique innovation, application situation etc., described software and hardware architecture of the whole system, the internal connection and total flow later on, elaborated function and realization of six modules of control plane, including VPN, packet filter core, application proxy, configuration and management, URL filter, Log, and referred to the database that the...