Data Filtering Firewall Data Analysis And Flow Optimization

With the rapid development of the computer network and the popularity of network applications ,computer networks have become an essential part in people's lives. We are enjoying many information-based benefits , but we are also faced with information security issue which are more and more serious .Firewall system is a most extensive network security technology in use now .It builds a secure shield between internal network and external network .According to above-mentioned two points ,the researchers have developed a distributed and parallel system which are named DPFW. The DPFW are based on Linux kernel and constructed by many common personal computers. It put to use distributed architecture and processed data packages in parallel. For this reason it doubles the accelerated the proceeding speed. Moreover, DPFW because has used the breakdown fault-tolerant mechanism, eliminated the single pitch point firewall breakdown bottleneck question, breaks down when some or some several firewalls, enables the network connection also to be able to continue to carry on. Therefore distributional parallel firewall system DPFW has the high performance, the redundant reliability, the low cost and the expandable characteristic. But along with the distributional parallel firewall system scale unceasing expansion, how in the system interior realization current capacity load equalization, as well as the single firewall pitch point how during the maintenance highly effective flow control ability, reduces system as far as possible the expenses, has already become the more and more important question. Their serious influence overall system performanceThis paper first describes the system as a whole distributed parallel logic structure, and then analyzed at this stage of its Linux flow control mechanisms and flow distribution technology; Distributed Parallel then describes the firewall system flow control and distribution mechanisms, as well as the overall design of key technologies related to the research and realization .Meanwhile, we carry on an experimental argument combined with the existing network environment of Public Road Transport Management Department of Changzhou city. In under the new flow control frame, the distributional parallel firewall system single pitch point has used improved the flow control mechanism, and passes the Hasche algorithm to come in the balanced system each pitch point current capacity. Also examined the technology take the palpitation to realize in the system breakdown pitch point accurate examination as the method, and has realized the pitch point load balance through the disposition management connection notice load equalization algorithm. Through carries on the happy flow control to the distributional parallel system single pitch point the test. May see the new control frame to maintained to the network data stream effective control, simultaneously reduced the CPU expenses. After the firewall pitch point has used the new flow control mechanism, it cannot have the bad influence to the system load balance. Under the current capacity load equalization mechanism function, each pitch point has achieved approximate complex equilibrium in overall system.