基于网络处理器高速防火墙的设计与实现

本文首先介绍了高速防火墙目前存在了两种设计思路，通过对比后，采用了基于网络
处理器的方式实现。然后阐述了该防火墙总体设计思想以及系统框架，并对采用的网络处理器型号简要介绍，作为该防火墙的重点部分，控制层的设计也有详细介绍，最后给出了该防火墙的测试结果。
关键词: 防火墙；IXP1200；Strong ARM；微引擎
The Design and Implementation of the High Speed Firewall Based on Networks Processors LIU Wei12, CUI Yong-feng2 (1.Control Science Engineering Department, Huazhong University of Science Technology ,Wuhan,China 430074; 2.Network Centre, Zhoukou Normal University, Zhoukou,China 466000) Abstract: At first,this paper introduced two kinds of design mentalities of the high speed firewall ,after the contrast, design the firewall based on the network processor. Then elaborated the system structure and the system frame of this firewall, and give a brief introduction of the network processor model, the control level design which as an important of the firewall,also has the detailed introduction, finally has produced this firewall test result.
Keyword: firewall ,IXP1200；Strong ARM；Micro engine