Distributed Parallel Firewall System Flow Control And Distribution Technologies, Research And Implementation

With the rapid development of the computer network, the network securities become more important. Because of its inherent shortcomings, traditional single point firewall system limits the development of network service more and more, people also turn to use distributed parallel firewall system slowly. Using distributed firewall system has many advantages, such as sharing resource,improving system reliability and reducing business cost. With the development of distributed and parallel firewall system, the scalar of the system has become larger, the land balance become more important. We have developed a distributed and parallel system based on Linux kernel, named DPFW. DPFW is server-oriented, on which we can build a distributed and parallel server system.This thesis will discuss the research of the traffic control functionality of the Linux. We'll also discuss the overload balance capability of distributed parallel firewall system. After these discussions, we'll focus on the implementation of traffic control on the Linux operating system, including the new queue processing, new packet classify processing, the interface to the traffic control, the modification of network adapter driver.This thesis consists of five chapters. The first chapter analyzes the rapid development and the traffic control requirements of the distributed parallel firewall system, and points out the necessity for the implementation of load balance in distributed parallel firewall system. The second chapter gives an introduction to the Linux traffic control architectures, namely the TC. The next chapter presents the new traffic control mechanism in Linux kernel. The fifth chapter concludes the thesis with a discussion of next step in our work and the general statement of the future research in distributed parallel firewall system.