Performance optimization of internet firewalls

Tzi-cker Chiueh; Allen Ballman

doi:10.1117/12.263388

17 January 1997 Performance optimization of internet firewalls

Tzi-cker Chiueh, Allen Ballman

Proceedings Volume 2915, Video Techniques and Software for Full-Service Networks; (1997) https://doi.org/10.1117/12.263388
Event: Photonics East '96, 1996, Boston, MA, United States

Abstract

Internet firewalls control the data traffic in and out of an enterprise network by checking network packets against a set of rules that embodies an organization's security policy. Because rule checking is computationally more expensive than routing-table look-up, it could become a potential bottleneck for scaling up the performance of IP routers, which typically implement firewall functions in software. in this paper, we analyzed the performance problems associated with firewalls, particularly packet filters, propose a good connection cache to amortize the costly security check over the packets in a connection, and report the preliminary performance results of a trace-driven simulation that show the average packet check time can be reduced by a factor of 2.5 at the least.

Citation Download Citation

Tzi-cker Chiueh and Allen Ballman "Performance optimization of internet firewalls", Proc. SPIE 2915, Video Techniques and Software for Full-Service Networks, (17 January 1997); https://doi.org/10.1117/12.263388

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available