Research Of IPv6Firewall Based On Multiprocessing Implement And Performance Optimizing

Since the depletion of IPv4address being coming, deployment of IPv6becomes imperative. Therefore, security for IPv6is more and more important. So, as the core of network security, support of IPv6in firewall determined the infrastructure of IPv6security. But, domestic firewall product cannot support IPv6perfectly. So the purpose of research in the thesis is to implement IPv6firewall on multicore hardware platform, and optimize the new connection rate&throughput performance to the advanced of industry.In the research process described by the thesis, we implemented the prototype of multicore firewall rapidly, and various feature and performance requirement, by incremental and agile development method.The innovation point of the thesis includes these items:implementing fundamental feature of IPv6firewall; Achieve the goal of rapid interconnection of IPv4and IPv6network by developing high performance NAT64feature on multicore platform; and provide the smooth evolution interfaces for updating the firewall system to ASIC/NP based or distributed system.The mainly work accomplished by author includes these items:analyzing and design the interfaces between modules of the multicore firewall system; design the method of load balancing of multi-processing; Porting the ASPF/NAT/ALG module from single core platform to multicore platform; Add the fast-forwarding process and optimized it specialized for spinlock/cache/co-processor in multicore processor;The conclusion of this thesis is that the IPv6firewall based on XLP832multicore MIPS processor, could provide8Gbps (minimum packet)/20Gbps (Maxium packet) throuput and60kcps new connection rate performance, and reached the advanced level of the industry, which could meet the requirement of high performance enterprise level firewall.