摘要： 传统的网闸设计主旨是为隔离2个不同的网络环境，不支持高并发量和高速连接的应用需求。为此，提出一种通过扩展网闸设备软件部分的方法，在网闸两侧设计基于“池”策略的前端子和后端子作缓冲和优化网络连接，将前后端并发连接的新建和断开，通过网闸网络连接的新建和断开及线程的新建和销毁作为池中的资源进行管理。通过池策略降低系统调度的负荷，完成高并发连接的网络安全隔离。实验结果证明，该方法可行有效，能弥补网闸不支持高并发网络连接的缺点和不足。

关键词: 安全隔离, 并发连接, 连接池, 多线程

Abstract: The target of implementation of traditional gap is to isolate two different network environment, it does not support high concurrent applications and high speed connectivity. To propose a software method of extending gap device, this paper designs a forward adapter and a backward adapter based on pool strategy around the device, they can be set as a buffer and connection-optimized accessories, it is designed to manage the resource of connecting and disconnecting of backward adapter and forward adapter with security gap, creating and destroying of threading. Therefore, it can reduce the dispatch load, isolate high concurrent connection of networking. Experimental results show that the method is feasible and effective, it can greatly makes up for the shortcoming and deficiencies of high concurrent connection.

Key words: security isolation, concurrent connection, connection pool, multi-thread

中图分类号: 

• TP393