Improving Distributed Firewalls Performance through Vertical Load Balancing

In this paper we present an extension to an existing hash based packet classification technique in order to improve its performance in a distributed network access control environment. We show that such architecture can be modified so that flow states can be kept in a distributed fashion thus reducing the space needed for packet filtering in each component of the architecture. We also show how such approach can, in some cases, improve the overall time complexity of packet filtering operations by reducing the number of packet classification operations.

• Type: Conference
• Year: 2004
• Where: NETWORKING
• Authors: Olivier Paul
• Keywords: NETWORKING 2004, NETWORKING 2007, Packet Classification, Packet Classification Technique, Packet Filtering