A performance-optimized firewall rules matching algorithm

摘要：

　　The algorithm of firewall rules matching designed in this paper is based on the idea of divide-and-conquer the rulesset.The rules set are divided into multiple sub-sets in accordance with the protocol type.Then,accordance with the relationship between two rules,each sub-set is divided into two groups:disordered group and queue group.Furthermore,hash function is designed to match rules in disorder group,while indexing algorithm is proposed to match rules in the queue group.The analysis shows that the efficiency of the algorithm is much better than similar algorithms,greatly improving the performance of the firewall.

关键词： firewall rule matching divide-and-conquer hash

作者: Li Zhong Li Xiao

作者单位: Institute of Information Science and Technology Zhengzhou Zhengzhou,P.R.China

会议类型: 国际会议

会议名称: 2013 2nd International Conference on Computer Science and Electronics Engineering(ICCSEE2013)(2013年第二届计算机科学与电子工程国际会议)

会议地点: 杭州

会议语种:英文

页码: 1423-1426

在线出版日期: 2013-03-22（万方平台首次上网日期，不代表论文的发表时间）