Efficient Cluster Security Gateway Architecture for per-packet load balanced IP filtering on switched clusters

摘要

This paper describes the design and implementation of a new firewall architecture by applying the concept of security gateway to switched clusters of computers. The idea is to build a cluster security gateway that performs per-packet filtering on IP traffic emanating from or going towards, the switched cluster. To this end, a combination of tools like the Linux firewall facility, IP-Tables, Ebtables, Bridge-utils, features like Cisco switch Access-Control Lists (ACLs) and Routing Information Protocol (RIP) per-packet-based load balancing on a Cisco router, are used.