Research and Design for Stateful Firewall on Multi-core Network Processors

Stateful firewalls are a well-established security mechanism to restrict the traffic exchanged between networks to a certain subset of users and applications. In order to cope with new type processors types like multiple cnMIPs cores, we design an improvement high-performance software architecture based on multi-core network processor. It implements the ldquolow-layer processingrdquo strategy to design an efficient and flexible kernel performance. The paper design control plane/data plane and fast path /slow path on kernel to implement stateful firewall.