The Design and Implementation of Multi-network Security Isolation-Exchange System
Yongjun Wang · Journal of Xiamen University · 2007
Based on the technology of isolation network-gap, we design and implement a multi-network security isolation-exchange system.The system adopts the technologies such as multi-thread,ARP buffer and NAT.So it can be connected with more than one outside networks simultaneously,and permit the outside networks to access the inside network safely at the same time.Moreover,the system adopts zero-copy and optimizes the rule-match algorithm to improve process performance.It can be proved that the multi-network security isolation-exchange system not only implement physical isolation between the inside network and the outside networks,in-depth detect and security control the datagram on networks,but also attain high network process performance.