分布式防火墙的配置与性能分析

随着网络互连的迅速的发展,传统的防火墙由于对网络拓扑结构的依赖,其缺陷日益突出。对此,人们提出了分布式防火墙的概念,但是由于分布式防火墙分布的广泛性与复杂性,使得对防火墙的配置与分析产生一定的难度。针对这些问题,本文设计一种分布式防火墙配置与分析工具,通过该工具,系统管理员可以根据过滤的策略对分布在网络中的所有防火墙进行自动的分析和配置,大大提高了防火墙的防御性能。

Distributed Firewall Configuration and performance Analysis

With rapid development of Internet,Traditional firewalls' limitation look like more and more obvious for its rely on topolo-gy . This has led to the advent of the distributed firewall.As it is, firewalls are extremely hard to analyze and configure correctly due to complexities of network topology, routing, and administrative issues.This paper describes a tool that helps in analysis and configu-ration of distributed firewalls. Using this tool, administrators can automatically generate and analyze configurations for all firewalls in the network by specifying the filtering policy.this tool can improve firellwall performance greatly.