Based On The Ipv6 Network Processor Hardware Firewall Control Plane Procedures And Research

The rapid development of Internet leads to the burst of the network nodes number. In order to offer sufficient IP addresses and improve network security capability, Ipv4, which is currently used Internet protocol, should be inevitably replaced by IPv6. As one of most important network equipments, the firewall should be accordingly upgraded along with the Internet protocol. The advanced firewall should protect internal network better and should be with better integration capacity.According to the "IPv6 hardware firewall based on network processor technology" project, this paper detailed introduces development trend of firewall and protocol characteristics of IPv6. Relating to the outstanding characteristics of network processor and IXA (Intel Internet Exchange) architecture, this paper puts forward a solution to develop a high performance firewall and specially introduces the implementation of control plane in detail.This paper can be divided into five parts.The first part (the 2nd chapter) introduces background technology of the firewall, including firewall, IPv6 and NP.The second part (the 3rd chapter) begins to introduce the design of the system. It describes the system architecture including hardware structure, software structure, the flow chart, and task scheduling on microengines.The third part (the 4th and the 5th chapter) particularly describes what the author did in the project. The fourth chapter is about the design of Control Plane. The fifth chapter is about the implementation of Control Plane.The fourth part (the 6th chapter) is about the test of the firewall system.The fifth part (the 7th chapter) is the conclusion of the paper. It describes the characteristics and the disadvantages of the system, gives improvement suggestions, and raised issues which need to be further studied.Throughout the firewall development process, we could find that the network processor has combined the hardware capability advantage and the software facility advantage. The network processor combined advantages lead to not only better firewall capability but also rapid development speed in firewall development process. Therefore the network processor platform is the best choice for kilomega firewall development.