Journal of Beijing University of Posts and Telecommunications

  • EI核心期刊

JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM ›› 2006, Vol. 29 ›› Issue (4): 90-93.doi: 10.13190/jbupt.200604.90.lix

• Reports • Previous Articles     Next Articles

An Algorithm for Detecting Firewall Filters Conflicts

LI Xin, JI Zhen-zhou, LIU Wei-chen, HU Ming-zeng   

  1. School of Computer Science and Technology, Harbin Institute of Technology, Harbin 150001, China
  • Received:2005-03-08 Revised:1900-01-01 Online:2006-08-30 Published:2006-08-30
  • Contact: LI Xin

Abstract:

To improve the efficiency and scalability of conflict detection for multi-dimensional classifiers, a new algorithm, based on grid of trie (GoT) algorithm, was proposed. The new algorithm uses Patricia trie, constricts the length of Internet protocol (IP) prefix in order to use Hashing technology, and improves the performance of the algorithm by adding ingress and egress of firewall for each filter.

Key words: packet classification, filter conflict, conflict detect

CLC Number: