NDLI: A Software Implementation for a Hybrid Firewall Using Linux Netfilter

Content Provider	IEEE Xplore Digital Library
Author	Yang Yang Wang Yonggang
Copyright Year	2010
Abstract	We are developing an embedded hybrid firewall prototype which combines an embedded CPU (MPC8260) with a specifically designed FPGA-based packet classification coprocessor. The packet header matching between the input packets and a pre-defined rule set is fully achieved by the hardware coprocessor on-line. The embedded CPU under Linux operation system takes charge of the remaining data-path processing and the management of the firewall, including receiving input packets, sending them to the coprocessor, forwarding the packet according to the classifying results from the coprocessor, and the rule set updating and management. After a brief introduction to our hybrid firewall, we will focus on the software implementation of the firewall. The Linux-2.4.4 has been ported into out system. By modifying the Linux kernel to utilize the hook functions of Linux net filter, input packets are intercepted and their headers are sent to the coprocessor meanwhile the packets are queued in a buffer until the classifying results come out from the coprocessor. A daemon process running at the embedded CPU was designed for updating the filter rule sets so that a remote computer as a client can visit the firewall and manipulate the running of the firewall. A simple demo program running on a PC (under windows OS) was also designed to demonstrate the proper operations of the firewall.
Starting Page	18
Ending Page	21
File Size	524262
Page Count	4
File Format	PDF
ISBN	9781424492879
DOI	10.1109/WCSE.2010.124
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-12-19
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Linux Hook functions Fires Netfilter Classification algorithms Hybrid firewall Kernel Coprocessors
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Network processor acceleration for a Linux* netfilter firewall

Network processor acceleration for a Linux* netfilter firewall

Design of a New Firewall Based on Netfilter

A research and model of host-firewall based on Windows Hook technology

Method of handling the contents of TCP packets on router via netfilter

Using NetFPGA to Offload Linux Netfilter Firewall

A Network Management System Based on DPI

A Study on Application Layer Classification for Firewalls Using Regular Expression Matching

Research and implementation of ForCES redirect channel based on Linux kernel

A Software Implementation for a Hybrid Firewall Using Linux Netfilter

Similar Documents

Network processor acceleration for a Linux* netfilter firewall

Network processor acceleration for a Linux* netfilter firewall

Design of a New Firewall Based on Netfilter

A research and model of host-firewall based on Windows Hook technology

Method of handling the contents of TCP packets on router via netfilter

Using NetFPGA to Offload Linux Netfilter Firewall

A Network Management System Based on DPI

A Study on Application Layer Classification for Firewalls Using Regular Expression Matching

Research and implementation of ForCES redirect channel based on Linux kernel

A Software Implementation for a Hybrid Firewall Using Linux Netfilter