摘要
随着网络功能的不断增加,防火墙过滤规则集合日益庞大,已严重影响了网络整体性能。本文基于网络流量的特征,提出一种根据网络流量变化动态调整防火墙规则的防火墙规则优化方法,使得匹配网络数据包越多的规则越先与数据包相匹配,从而尽量减少数据包过滤时间。
With the increasing of the network function,the filtration ruleset in the firewall becomes more and more,which has affected the overall performance of network seriously.This paper proposes an optimization method that adjusts the rules in the firewall accord to the characteristics of network traffic dynamically.In this way,data packets matches the rules that have matched more data packets firstly,then reduces the time of filtering data packets.
出处
《计算机与现代化》
2010年第8期207-210,215,共5页
Computer and Modernization
关键词
防火墙
规则优化
数据包过滤
firewall
rule optimization
filtering of data packet
