Firewall Architecture And Key Technologies Based On Multi-core (multi-processing Unit) To Achieve

Internet has been all-pervasive in today's computer world. The computer network has become an important channel to gain the information knowledge for people. While the people enjoy these rich resources, their computers are suffering the security threat which the network brings. Therefore, the people developed many security technologies and systems to much-specific security problem. And among them, the firewall technology is the most important safety technology.Firewall technology, which is one of the cardinal technologies for protecting network, can be used to isolate organization's private network from Internet and exempt it from invasions which come from Internet. In China, developing firewall products with entire intellectual property have significant value for network security. However, firewall's performance already gradually could not meet the needs along with the network traffic continues to increase at present. The emergence of multi-core processors has brought new hope to the firewall technology, the construction firewall on multi-core processors has become the popular technology of current security factory.First, this paper analyzed and discussed the basic knowledge related to the firewall, detailed study the firewall's theory and core technology. Then introduced multi-firewall's system design thought and goal. Discussed some modules achieve in the framework of multi-core firewall technology in detail. Finally analyzed the Distributed Denial of Service (DDoS) attack, and designed the module under the system. DDoS attack is the key question which resolved under this framework.This paper discussed the principle of DDoS attacks, classification and attack process, analyzed the DDoS attack detection and defense technologies, designed and realized the key modules, and has proven its validity and the reliability through the experiment.My main task is to achieve some key technologies in this multi-core architecture such as configuration management ,HOOK mode and so on. This detailed narration in third chapter.At the same time,I design and implementation the anti-DDoS attack system in the multi-core firewall personally.Finally I have tested and verified the system. This work has descripted in fourth chapter and the fifth chapter.