Abstract:We are developing an embedded hybrid firewall prototype which combines an embedded CPU (MPC8260) with a specifically designed FPGA-based packet classification coprocessor. The packet header matching between the input packets and a pre-defined rule set is fully achieved by the hardware coprocessor on-line. The embedded CPU under Linux operation system takes charge of the remaining data-path processing and the management of the firewall, including receiving input packets, sending them to the coprocessor, forwarding the packet according to the classifying results from the coprocessor, and the rule set updating and management. After a brief introduction to our hybrid firewall, we will focus on the software implementation of the firewall. The Linux-2.4.4 has been ported into out system. By modifying the Linux kernel to utilize the hook functions of Linux net filter, input packets are intercepted and their headers are sent to the coprocessor meanwhile the packets are queued in a buffer until the classifying results come out from the coprocessor. A daemon process running at the embedded CPU was designed for updating the filter rule sets so that a remote computer as a client can visit the firewall and manipulate the running of the firewall. A simple demo program running on a PC (under windows OS) was also designed to demonstrate the proper operations of the firewall.

DESIGN OF FIREWALL BASED ON IXP2400 NETWORK PROCESSOR

The design of firewall based on intel IXP2350 and autopartitioning mode c

Implementation of Network Processor-Based Content Filtering

Design for Firewall Based on Network Processor and Its Implementation of NAT Function

Study on Fast Packet Filter under Network Processor IXP2400

Research of a Comprehensive IPv4/IPv6 Firewall System Based on Network Processor

Fastpath-based VPN Gateway over Network Processor

Design Of Firewall Hardware Platform For Small Office And Home Office

Design for Firewall Integrating with Intrusion Detection

Firewall Traffic Control Based on Network Processor

An XML Firewall on Embedded Network Processor

Research and Implementation of Intrusion Detection on Network Processor

Design of Multi-access Residential Gateway Based on Intel IXP425

Architecture-Aware Session Lookup Design for Inline Deep Inspection on Network Processors

A Software Implementation for a Hybrid Firewall Using Linux Netfilter

Design of a network-processor-based intelligent secure IAD

Design of Concurrent Immune IDS System with Three Protection-Layers Based on IXP2350

Network Information Audit System Based on Network Processor

The Fire Wall Based on Linux

Design and Implementation of a Firewall IPS Module

Design of RPR Integrated Service Access System Based on IXP2400