Quick method for realizing authentication function of firewall

Abstract

The invention overcomes issues of that when there is lot of users for authentications, rules inside firewall are increased continuously; system operation performance is dropped quickly; finally, integral performance of users' network is influenced. The method includes steps: (1) defining label; (2) binding label to role information; (3) setting up label; (4) process based on label. In order to raise speed for setting up labels, the disclosed technical scheme puts forward quick mapping algorithm to ensure that when there is lot of users for authentications, system performance will not be dropped evidently. Thus, the scheme prevents looking up speed from obvious descent when data quantity is increased.

Description

Technical field:

[0001] The invention relates to the technical field of firewalls, in particular to a method for realizing a fast firewall authentication function. Background technique:

[0002] The firewall organizes rules mainly according to the packet header information of the network layer and the transport layer, that is, sets rules according to information such as IP addresses and ports. During processing, the IP packets to be forwarded are matched against the rules sequentially, and corresponding processing actions are taken according to the matching results. At present, a small number of firewalls have an authentication function. In its implementation, ACL rules are often dynamically added to the firewall according to user authentication information. As the number of users continues to increase, the system's operating performance decreases rapidly, which eventually affects the overall performance of the user network. Invention content:

[0003] The purpose of the...