Firewalls White Papers
Performance Analysis of the Linux Firewall in a Host
Overview Firewalls are one of the most commonly used security systems to protect networks and hosts. Most researchers have focused on analyzing the latency and throughput of router firewalls. Different from this approach, this research focuses on studying the performance impact and the sensitivity of the Linux firewall (iptables) for a single host. In order to be able to measure the performance and the sensitivity of the firewall, the authors designed and instrumented each layer of the Linux TCP/IP stack. This instrumentation was used to test the host's firewall under two scenarios: In the first scenario, the path and the latency of one single packet are captured; in the second scenario, the latency of multiple packets sent to the host at various transmission rates is captured.
| Publisher | California Polytechnic State University | File Format | |
|---|---|---|---|
| Date Published | June 2002 | ||
| Format | White Papers | ||
| Topics | |||



