多核防火墙分层内容过滤的时延分析

防火墙时延分析对于防火墙设计和提升防火墙性能有着重要的意义。分别建立了多核IP级防火墙和多核应用级防火墙的数学模型，并基于排队论，推导出相应的内容过滤时延计算公式，分析并比较了这两类防火墙的时延特性。分析结果表明，IP级内容过滤防火墙时延特性明显优于应用级防火墙。

Latency analysis of multi-core firewall in hierarchical content filtering

Latency analysis of the firewall has the vital significance for designing the firewall and improving the firewall performance.This paper sets up respectively mathematical models for multi-core IP-layer firewalls and multi-core applicationlayer firewalls, and based on the queuing theory,the corresponding latency formulas are derived for content filtration,the la- tency characteristics of these two types of firewalls are analyzed and Compared.The analysis results indicate that the latency characteristic of the IP-layer firewall is better than the one of the application-layer firewall obviously in content filtration.