| 摘要 |
A method of speeding up packet filtering that utilizes a search filter in compliance with the rules of the firewall, includes the following steps of presenting a mask characteristic value set in a first hash space with regard to all specific masks in need of being filtered in the firewall rules; presenting a packet characteristic value set in a second hash space with regard to each packet received by the firewall; performing a specific Boolean operation in use of the first and second hash spaces with the same size; and as long as the result of the specific Boolean operation determine that the packet characteristic value set is out of the mask characteristic value set, rapidly allowing the packet to pass through the firewall so as to reduce calculation time of all of the firewall rules, decrease system loading and prevent network congestion.
|
