Research On Key Technology In Firewall Based On ASIC Architecture

Hardware firewall is an important network security barrier, and is directly related to the internal network security. At present the main hardware firewall architectures used including based on X86, NP and ASIC, in which the out of common CPU and operating system are ASIC chips and NP. And ASIC-based architecture firewall is better than NP structure in performance, flexibility, functional completeness, cost, difficulty of development and technical maturity. Nevertheless, the existing performance of ASIC-based architecture needs to be improved. Thus, this article focuses on optimization and improvement of exploration in state detection technology and remote management technology of ASIC architecture firewall.This paper analyzes the performance of ASIC based firewall, and in connection with the stateful inspection technology shortcomings we carried out:(1) studying using optimized solutions of hierarchical structure of the state table ASIC chip to solve the problem of insufficient resources; (2) using a dynamic hash tracking algorithms to solve the existing problem of low efficiency. For remote management shortcomings were carried out (1) exploring the use of multiplexed input/output technical supporting concurrent multi-user to resolve the problem of insufficient resources in embedded Web server; (2) application of Ajax technology to improve CGI,and to achieve dynamic information interaction between user and firewall; (3) providing full-featured CLI management configuration, and improving remote managementof ASIC architecture firewall.In this paper, we thoroughly research and analyze the overall optimization design, the division of function modules and various aspects of technology implementation in status detection and remote management of ASIC structure firewall. Tests show that the improved firewall ASIC architecture have been well improved in resources using, query, interactive information and remote management.