Abstract:
PROBLEM TO BE SOLVED: To provide a distributed multi-processing security gateway having a higher capability.SOLUTION: A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit (CPU) core from a plurality of CPU cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that the same CPU core is assigned to process data packets from the server side session and the host side session.
Abstract:
PROBLEM TO BE SOLVED: To provide a distributed multi-processing security gateway with a higher performance.SOLUTION: A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit (CPU) core from a plurality of CPU cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that the same CPU core is assigned to process data packets from the server side session and the host side session.
Abstract:
PROBLEM TO BE SOLVED: To support specific processing of various header fields and subheader fields by a special hardware processing module, in order to reduce a calculation request for processing a special Cookie.SOLUTION: In processing of an HTTP header, a packet preprocessor is set by at least one prescribed header field identifier. The packet preprocessor detects at least one header field identifier in the header filed of an HTTP packet which is received in an HTTP session between a host and a server, performs matching of a prescribed header field identifier and the header field identifier in the HTTP packet, generates a header report block having information which corresponds to the header field identifier in the HTTP packet, and transmits the header report block to a processor module to process the HTTP packet on the basis of the header report block.
Abstract:
PROBLEM TO BE SOLVED: To provide a distributed multi-processing security gateway with higher performance.SOLUTION: A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit core (CPU) from a plurality of central processing unit cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session and the host side session.
Abstract:
A system and method for a distributed multi-processing security gateway (270) establishes a host side session (259), selects a proxy network address for a server, uses the proxy network address to establish a server side session (265), receives a data packet ((285),(288)), assigns a central processing unit core from a plurality of central processing unit cores in a multi- core processor of the security gateway to process the data packet ((285),(288)), processes the data packet ((285),(288)) according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session (265) and the host side session (269). By assigning central processing unit cores in this manner, higher capable security gateways are provided.