Research of UMTS core network firewall base on IXP1200

摘要

The 3G network security was a problem in the practice. The particularity of the 3G core network determined that the new firewall technology must be adopt in order to protect the core network. The development of the network processor (NP) technology offered a high-performance realization platform for core network firewall. On the basis analyzing the shelter method of the attack to each interface in the 3G core network, a scheme of 3G core network firewall design was put forward. It was on the network processor hardware platform. How to use IPSEC protocol to protect the GPRS tunnel protocol (GTP) and implement on the NP was discussed in detail. The aggregated bit vector algorithm was applied on NP for packet classification. In the end result table of firewall performance test with SMART BIT instrument was provided.