Architecture of High-reliability and High-performance Network-based Firewall for Always-on Internet Access Service

摘要

A network-based firewall for always-on Internet access service has been developed to provide both independent security policies (virtual firewalls) for each user and a large number of multiplexed users, using a method that dynamically allocates users to appropriate virtual firewalls by analyzing the protocol sequences for establishing a PPP session. The filtering rule management in the firewall provides high reliability and high performance, by directly searching the memory address for the next rule to speed up searches and keep other users' services even when the policy of one user is being changed. The searching performance does not depend on the number of users. The advantages of our method increase with the number of users.