Distributed multi-processing security gateway

摘要

A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit core from a plurality of central processing unit cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session and the host side session. By assigning central processing unit cores in this manner, higher capable security gateways are provided.

主权项

1. A method for network security by a plurality of multi-core processors comprising:
determining a first multi-core processor of the plurality of multi-core processors using a first data packet received from a host side session; assigning the first data packet to the first multi-core processor for processing, the processing including:
substituting a host network address in the first data packet with a proxy network address, the proxy network address being used to establish a server side session with a server; determining a second multi-core processor of the plurality of multi-core processors using the proxy network address received in a second data packet from the server side session; and assigning the second data packet to the second multi-core processor for processing, the processing including:
substituting the proxy network address in the second data packet with the host network address.