【文章內(nèi)容簡介】
應(yīng)用級的重新檢查 Already in Connection Table Firewall1 NG AI Nokia OS HW INT Calling and queuing overhead Connection Table Rule Base Calling and queuing overhead Connection Table Rule Base Firewall1 NG AI Route Lookup Route Lookup Connection Table amp。 Route Lookup 18 169。 NOKIA 2022 “ 性能 /靈活性” Build Internal Development team for ASIC designs will cost significantly more, and can they do better than purchasing from vendors who specialize. Buy purchase Network Processors on the mercial market from vendors who specialize in optimizing in this area. High risk usage in security systems due to lack of flexibility Ideal for high performance security systems – easier to add new acceleration features 12 to 18 month ASIC design cycles. Once the ASIC is burned, it is essentially unchangeable. As with any system, there is a high probability that reliability/security issues will ultimately arise. Rapid time to market, due to mon code usage ie: C++, and the ability to easily alter and tune design Hard wired. One time use only. Reprogrammable (patches, upgrades, innovations) – essential for security systems Designed for high performance applications – raw throughput exceptionally high. Designed for high performance applications – raw throughput exceptionally high ASICs Network Processors 19 169。 NOKIA 2022 Nokia IPSO Slow Path CP Applications IPSO Fast Path Motherboard I/O Card I/O Card 防火墻包轉(zhuǎn)發(fā)技術(shù)的發(fā)展 Application Forwarding – Slow Path 傳統(tǒng)路徑 Nokia IPSO Forwarding (2022) – Firewall Flows 第一代 Flows技術(shù) Kernel Forwarding – SecureXL amp。 Nokia IPSO 第二代加速技術(shù) FW amp。 VPN 20 169。 NOKIA 2022 傳統(tǒng)轉(zhuǎn)發(fā)路徑 TCP or UDP IP FW Inbound FW Outbound Check Point SecureXL Slow Path N