高负载环境下基于Linux系统的防火墙软中断性能改善研究

摘要

当网络负载增大到一定程度后，基于Linux防火墙的数据转发性能开始下降。最常见的瓶颈是系统软中断在单一CPU上耗用达到100％。本文对这一问题进行了分析并提出了一种易于实现且性能改善明显的解决方案。%When the network load increases to a certain extent, data forwarding performance begin to decline on linux-based firewall system. The most common bottleneck is the consumption of system software interrupt on a single CPU approach 100%. This paper analyzes the problem and proposes an easy to implement and obvious solution to improve performance.