IP Packing Technique for High-speed Firewall Rule Verification,ERICDATA高等教育知識庫
高等教育出版
熱門: 崔雪娟  王美玲  李明昆  王善边  黃昱倫  黃乃熒  
高等教育出版
首頁 臺灣期刊   學校系所   學協會   民間出版   大陸/海外期刊   政府機關   學校系所   學協會   民間出版   DOI註冊服務
閱讀全文
篇名
IP Packing Technique for High-speed Firewall Rule Verification
並列篇名
IP Packing Technique for High-speed Firewall Rule Verification
作者 Suchart Khummanee
英文摘要
A network bottleneck is often caused by firewalls installed between network gateways. As a result, the overall performance of networks is significantly dropped. The following solution to resolve such the problem can be achieved by increasing the speed of firewall rule verification. Nowadays, there is an open-source matching framework which is the fastest of rule verification, namely IPSets. It can verify a number of firewall rules against huge packets with O(1) worst case access time. However, IPSets still displays several drawbacks of usability such as rule management, subnet IP address, rule conflicts, and memory usage. This paper proposes a novel firewall structure that can resolve all drawbacks of IPSets, and obtains the optimal speed of firewall rule verification at O(1) of access time, called IPack. According to IPack implementation, the paper applies the sparse matrix to be data structures to maintain firewall rules, the Path Selection Diagram (PSD) to eliminate rule conflicts and IP packing technique to reduce the size of memory space. The experimental results show that IPSets drawbacks can be solved by IPack. Especially, the size of memory space is reduced from O(2n) to be O(n) with the same optimal access time and the speed of IPack is still equal to IPSets.
起訖頁 1737-1751
關鍵詞 FirewallHigh-speed firewallFirewall rule matchingIP packingPath selection diagram
刊名 網際網路技術學刊  
期數 201911 (20:6期)
出版單位 台灣學術網路管理委員會
DOI 10.3966/160792642019102006006   複製DOI
QR Code
該期刊
上一篇
Polynomial-Time Algorithms for Path Movement Problems on Trees and Unicyclic Graphs
該期刊
下一篇
LCRec: Learning Content Recommendation (Wiki-based Skill Book)

高等教育知識庫  閱讀計畫  教育研究月刊  新書優惠  

教師服務
合作出版
期刊徵稿
聯絡高教
高教FB
讀者服務
圖書目錄
教育期刊
訂購服務
活動訊息
數位服務
高等教育知識庫
國際資料庫收錄
投審稿系統
DOI註冊
線上購買
高點網路書店 
元照網路書店
博客來網路書店
教育資源
教育網站
國際教育網站
關於高教
高教簡介
出版授權
合作單位
知識達 知識達 知識達 知識達 知識達 知識達
版權所有‧轉載必究 Copyright2011 高等教育文化事業股份有限公司  All Rights Reserved
服務信箱:edubook@edubook.com.tw 台北市館前路 26 號 6 樓 Tel:+886-2-23885899 Fax:+886-2-23892500