Based On The Ixp2400 Content Filtering System Design And Realization

Content filtering is indispensable to network security. It analyses the information transported in application layer protocol and controls the forwarding of the information based on the filtering rules. Network Processor is a newly born high-rate programmable processor for carrying out data processing and transmitting. With its obvious advantages in network data processing, network processor becomes an essential component in high-rate network equipment that supports network functions such as operation management, security and network monitoring, etc.Based on the advantages of network processor, the paper presents the devising as well as implementation of an Intel IXP2400-network-processor-based content filtering system.Chapter1 begins with an introduction to the basic concepts and the two most common techonologies concerning content filtering. And with an elaboration on current research within the line both at home and abroad, it lays out the setting against which the system develops. Then it deals with the concept of BT-downloading and its impact on network, carrying out a detailed analysis of the possibility for BT data filtering. The chapter also puts forward the concept of network processor and displays the numerous advantages it enjoys for the developing of content filtering system.Chapter2 expouds on the core technologies and hardware for the developing process, including the hardware architecture of Intel IXP2400 network processor, the board structure and developing environment of Radisys ENP-2611 developing board and IXP-related technologies (programmability and developing environment).Chapter3 provides the architecture of IXP2400-based content filtering system. It incorporates within the system hardware environment design, software microblock design and its functional classificiation, system resources distribution as well as key data structure, Core Component design etc.Chapter4 expatiates on the implementation of the in-system software microblock from such aspects as microblock function overview, data structure and algorithm, microblock design and data flow.Chapter5 evaluates the system from the following two aspects: simulation environment and hardware environment.Chapter6 draws a conclusion of the present paper with an expection for the research work to follow.