基于IXP2800和VxWorks的嵌入式病毒防火墙实现*

针对隐蔽在网络流量中的攻击,提出了基于Intel IXP2800网络处理器和VxWorks的嵌入式病毒防火墙(embedded anti-virus firewall)实现方案。该方案将硬件包过滤技术与应用层病毒实时防护相结合,底层数据包的实时响应、过滤转发等处理均由IXP2800的微引擎完成,而使XSCALE主处理器更专注于高层协议的病毒扫描过滤。实验数据表明,这种实现方案运行稳定,具有良好的性能指标。

Implementation of embedded anti virus firewall based on IXP2800 and VxWorks

Focusing on the attack hided in network data stream,this paper proposed a novel architecture for embedded anti-virus firewall based on IXP2800 and VxWorks.The architecture included two sublayers: low hardware packet filtering layer and real-time anti-virus application layer.The former was responsible for processing of low layer packets,such as real-time responsing,filtering and forwarding,these functions were accomplished by the micro engine of IXP2800.As for anti-virus application layer,the XSCALE main processor was applied to be dedicated to scanning and filtering virus hided in high layer.The experimental results show that the architecture can work steadily and efficiently.