基于S3C2440的嵌入式IPv6防火墙设计

随着网络应用的不断发展，网络安全显得越来越重要。基于X86架构的边界防火墙成本较高，且难以遍布网络的每一个终端设备，无法构建全方位的安全防护网络。本文针对以上问题，设计了一种基于S3C2440嵌入式IPv6防火墙。并且提出了状态跟踪与智能包过滤相结合的动态包过滤方案。该方案通过智能访问控制技术优化包过滤规则集，从而提高了防火墙的吞吐量和安全性。

Design of Embedded IPv6 Firewall Based on S3C2440

With the continuous development of network applications, network security becomes increasingly important. Boundary firewall based on x86 architecture is expensive and difficult to protect each terminal equipment .It can not build comprehensive security network. So this paper designs an embedded IPv6 firewall based on S3C2440 processor to solve the problems. This paper also gives a solution which combines SPI ( Stateful Packet Inspection) and intelligent packet filtering into dynamic packet filtering mechanism. The solution optimizes packet filtering rule set by using intelligent access control technology. It also enhances the throughput of firewall and security.