A Firewall System with User Mode Pipeline Architecture

Abstract

The invention discloses a firewall system with a user-mode assembly line architecture. The control plane is responsible for the management and control functions of the system, and redirects the messages sent from the management port to the kernel protocol stack; the data plane is responsible for the main business functions, and the data plane works in the In user mode, it can bypass the complex Linux kernel protocol stack and directly obtain packets from the network card. The data plane decomposes the firewall function software into multiple functional modules, and each functional module is bound to an independent CPU core, using one of the CPU cores as the main core, responsible for receiving messages, and implementing data packet sending and receiving in a polling manner , forming a pipeline architecture. The firewall system of the present invention belongs to a software architecture suitable for firewall functions that bypasses the system kernel. The network card driver is usually implemented in the kernel. In the present invention, it is re-implemented in the user mode, and the system directly obtains the message from the network card, effectively solving the problem of traditional firewall Linux. Kernels cause processing inefficiencies.

Description

A User Mode Pipeline Architecture Firewall System technical field The invention belongs to the technical field of digital information transmission, be specifically related to a kind of user state pipeline architecture firewall system system. Background technique With the development of Internet communication technology and the increasing popularity of Internet applications, the network has become the main data transmission system. and information exchange platform. As a basic network security product, firewall technology is a kind of network information security. important means, so the application scenarios of firewalls are very wide. [0003] At present, almost all large-scale network security manufacturers have launched their own firewall products, except that they must have The function of the firewall, the performance of the firewall is also the focus of the promotion of various security manufacturers. For example, many firewall products use FPGA, ASIC, NP an...

AI Technical Summary

Problems solved by technology

[0007] Aiming at the problem that the Linux kernel calling in the existing pure software firewall solutions above leads to low packet processing efficiency of the firewall, objectively, it is necessary to design a set of firewall software architecture system that meets the actual needs in order to make full use of multiple Core CPU resources to improve device processing capabilities

Images