高速防火墙的研究与实现

随着宽带网络的日益普及，网络安全已成为信息技术领域一个重要的议题，现有的防火墙架构已无法满足高速网络环境下的应用。网络处理器是专为IP网络包处理设计的芯片，能够以线速处理网络传输数据。文中论述了网络处理器的体系结构和功能，并通过分析防火墙的几种不同架构，给出一种基于网络处理器的实现方案，为千兆网络提供了路由、过滤，以及网络地址转换等安全防护措施的实现。最后指出了该方案在网络安全领域的应用前景以及网络安全设备的发展方向。

Research and Implementation of High Performance Firewall

It is insufficient to implement firewall now available in high speed network. Network processor is a specific chipset for processing network packets at line-speed. Network processor's architecture and functions are described. Main architectures of firewall are analyzed, and a feasible solution based on network processor is presented for providing routing, filtering, and NAT to high speed network. In the end, the future applications of this solution and the future of network security equipments are provided.