Extending Firewall Session Table to Accelerate NAT, QoS Classification and Routing

Mahmoud Mostafa (1) , Anas Abou El Kalam (1) , Christian Fraboul (1)

1 IRIT-RMESS - Réseaux, Mobiles, Embarqués, Sans fil, Satellites

security and QoS are the two most precious objectives for network systems to be attained. Unfortunately, they are in conflict, while QoS tries to minimize processing delay, strong security protection requires more processing time and cause packet delay. This article is a step towards resolving this conflict by extending the firewall session table to accelerate NAT, QoS classification, and routing processing time while providing the same level of security protection. Index Terms — stateful packet filtering; firewall; session/state table; QoS; NAT; Routing.

Mots clés: QoS; routing; NAT; firewall; Secyrity

Domaines: Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]; Performance et fiabilité [cs.PF]

Mahmoud Mostafa, Anas Abou El Kalam, Christian Fraboul. Extending Firewall Session Table to Accelerate NAT, QoS Classification and Routing. 19th International Conference on Computer Theory and Applications (ICCTA 2009), Oct 2009, Alexandria, Egypt. pp.40-43. ⟨hal-00433854⟩