基于龙芯处理器的网络防火墙系统的设计与实现

设计并实现了一个网络防火墙计算机系统方案。该方案采用国产高性能龙芯2E处理器和Linux操作系统，并对防火墙系统软件的核心策略、硬件结构设计、高速信号完整性设计、网络数据包吞吐率和延时的测试方法等关键问题给出了相应的解决方法。针对信号完整性问题提出了先期约束后期仿真的布线机制，提高了高速信号系统板级设计的可靠性。给出了网口数据包吞吐率和延迟这两项评估防火墙性能的关键指标的测量和计算方法。板级仿真和实际网络性能测试数据表明，该方案是一个通用且安全可靠的防火墙系统方案。

Design and implementation of network firewall system based on Godson CPU

A network firewall system based on Godson2E CPU was designed. This solution used Godson processor as the CPU and a self-designed north bridge. The key technologies of the design such as firewall software strategy, hardware architecture design, signal integrity and the solution of testing the network packet passed ratio and delay were discussed and the corresponding solutions were given too. In order to solve the signal integrity problem, a layout mechanism of restriction in advance and simulation subsequently was put forward, which improved the design reliability of the motherboard with high-speed signals. A testing and computing solution for the network packet passed ratio and delay was also given, which was the key performance parameters of the network firewall computer system. Theoretical and experimental results show that this solution is an all-purpose, secure and reliable firewall system design.