Parallel Firewall Team

1
Parallel Firewall Team
2
Problem Description

• Firewall need
• Firewall cost
• Firewall speed

Traditional Architecture
Internet
Firewall
LAN
3
Potential Solution

• Parallel Framework
• Speed advantage?
• Cost Savings?

4
(No Transcript)
5
What weve done

• Research
• Acquisitions (aka Scrounging)
• Configuration

6
Research

• Load Distributing Algorithms
• Pre-Processor Communication

7
Load Distributing Algorithms

• Simple Round-Robin

• Is Simple
• Perfect Balance
• No Overhead
• No Session Tracking

• Easy Implementation
• No Overhead
• Might flood single firewall
• Static Nature

• Accurate Balance
• Session Tracking
• Complex
• High Overhead

• Hash Function

• Dynamic Traffic Counter

8
Pre-Processor Communication

• IP Header fields
• Either the Options field
• or
• The TOS field

9
Acquisitions

• Space
• Systems
• Ethernet Connections

10
Configuration

• OS installation
• Network Drivers(unmodified)
• Routing
• IOS Firewall Set

11
Whats not done yet?

• Testing
• More Testing
• Even More Testing
• Algorithm Implementation