Parallel Firewall Framework Project

1
Parallel Firewall Framework Project
2
Introduction

• Benefits of parallelization
• reliability
• reduced load
• overall speed increase

Traditional Architecture
Internet
Firewall
LAN
3
Our Solution
4
Previous solution (no true balance loading)
 
5
What weve done so far

• Research
• Acquisitions (a.k.a. Scrounging)
• Set-up and Configuration
• Troubleshooting

6
Research

• Load Distributing Algorithms
• Simple Round-Robin
• Hash Function
• Dynamic Traffic Counter
• Pre-Processor Communication

7
Load Distributing Algorithms

• Easy Implementation
• No Overhead
• Might flood single firewall
• Static Nature

• Accurate Balance
• Session Tracking
• Complex
• High Overhead

• Simple Round-Robin

• Is Simple
• Perfect Balance
• No Overhead
• No Session Tracking

• Hash Function

• Dynamic Traffic Counter

8
Pre-Processor Communication

• IP Header fields
• Either the Options field
• or
• The TOS field

9
Acquisitions

• Space
• Systems
• Ethernet Connections

10
Current Bridging Problem

• DCL network connectivity
• IP subnet split between networks
• Not a routing failure, a bridge is required.

Part 1
Part 2
11
Whats not done yet? Plan for Next Semester

• Solve the bridging issue
• Testing
• Algorithm Implementation
• More Testing
• Product Delivery
• Get a job at Cisco ?