Firewall based on multiprocessor architecture

Abstract

A firewall based on a multiprocessor architecture comprises a main processor for processing a management flow of the firewall and a coprocessor which is used for carrying out parallel processing on the service flow of the firewall, and the main processor and the coprocessor are independent of each other and communicate with each other through a communication interface. The firewall provided by theinvention adopts a double-processor architecture, the two processors are independent of each other and are in limited communication through the communication interface, and when the main processor isattacked by a network or the main processor cannot work normally, the service processing unit of the coprocessor can still process the service flow normally. Compared with other industrial control firewalls, the firewall disclosed by the invention has the advantages that the reduced processing time reaches several orders of magnitudes, and the 100% throughput is achieved under the conditions of gigabit rate linear speed and 64-byte Ethernet message through the modules such as message deep analysis, basic strategy matching, industrial control protocol function code matching, industrial controlprotocol parameter matching, alarm information uploading and the like.

Description

technical field [0001] The invention relates to the technical field of firewalls, in particular to a firewall based on a multi-processor architecture. Background technique [0002] Hardware-based traditional industrial control firewalls generally adopt several mainstream architectures in terms of hardware: X86, ASIC, NP, MIPS and ARM. Because most of the commonly used operating systems are based on general-purpose operating systems, and the general-purpose operating systems do not fully consider the security of the operating system itself, and the security mechanism is not perfect, resulting in many security loopholes and hidden dangers. For example, firewalls suffer more and more Attacks based on operating system vulnerabilities, backdoor viruses and Trojan horses. It is very difficult to modify the core code of the operating system, and adding various security technologies and protective measures around the operating system without modifying the core code of the operating...

AI Technical Summary

Problems solved by technology

[0005] (1) Because the general-purpose operating system does not fully consider the security of the operating system itself, and the security mechanism is not perfect, there are many security loopholes and hidden dangers. When the security loopholes and backdoors of the operating system are exploited, the firewall equipment will be abnormal, restart or security Mechanism failure, etc.;

[0006] (2) Because the processors of traditional firewalls are mostly executed sequentially, and industrial control firewalls need to analyze in-depth packet analysis of industrial protocol data packets and perform legality checks on industrial protocol instructions and operands, resulting in increased firewall processing delays, cannot Applied in industrial control systems with very high requirements for real-time transmission feedback

Images