Distributed firewall system and method for realizing content diction of firewall

Abstract

The invention discloses one distribution firewall system, which comprises dialogue transfer system and connected content monitor filter module, wherein, the content monitor filter module is to monitor filter condition according to preset content and to filter on the message content and to send the filter result to the dialogue transfer system; the content monitor filter module and dialogue transfer system are operated in first and second processors. The invention also discloses one method to realize firewall content test.

Description

Technical field [0001] The invention relates to the field of network security, in particular to a distributed firewall system and a method for realizing firewall content detection. Background technique [0002] With the development of network technology, the requirements for firewalls are also increasing. The hardware logic diagram of the existing firewall is shown in Figure 1. The detection and forwarding of the received message content is completed by a single-core CPU processor. That is, all the software of the firewall runs on a single-core CPU processor to form a session forwarding system. As shown in Figure 2, the process of firewall detection is: the message receiving module receives the message and caches it, and sends it at the same time. Interrupt notification packet filtering module; the packet filtering module filters the packets according to the filtering rules configured by the management control module, such as checking each incoming packet and viewing the basic in...

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a distributed firewall system and a method for realizing firewall content detection, which solves the problems of network congestion, low throughput and poor system stability in firewall deep detection in the prior art

Images