Author Login Editor-in-Chief Peer Review Editor Work Office Work

Computer Engineering ›› 2006, Vol. 32 ›› Issue (21): 136-138. doi: 10.3969/j.issn.1000-3428.2006.21.047

• Security Technology • Previous Articles     Next Articles

Design and Implementation of Protocol Stack Driver Module in NP-based Firewall System

HAN Zhigeng, LUO Junzhou   

  1. (Department of Computer Science and Engineering, Southeast University, Nanjing 210096)
  • Received:1900-01-01 Revised:1900-01-01 Online:2006-11-05 Published:2006-11-05

NP防火墙协议栈驱动模块的设计与实现

韩志耕,罗军舟   

  1. (东南大学计算机科学与工程系,南京 210096)

Abstract: Stack driver can lead to get through downright the path between the hardware interfaces and TCP/IP stack. The paper brings forward a scheme of implementing stack driver on Linux platform after having discerned its basic components and mechanism inside of the stack driver and following the principle of the hierarchy design of the Intel IXA software. It gives analysis at large and points out key technology in the course of the implementation. And the test of getting through hardware interface of light on Enp2611 evaluation board indicates that the implementation satisfies the demand in advance.

Key words: Stack driver, Firewall, Network processor, Packet classification, Active secure defence system

摘要: 彻底打通网络处理器光口到本地协议栈间通路需要协议栈驱动提供支持。针对协议栈驱动基本组成和内在驱动机制,同时确保遵循Intel IXA软件架构分层设计原则,该文提出了在Linux平台上的实现方案并进行了分析,指出了实现过程中牵涉的关键技术。Enp2611评估板上硬件光口打通测试表明设计达到了预先要求。

关键词: 协议栈驱动, 防火墙, 网络处理器, 包分类, 主动式安全防范系统

CLC Number: