Abstract
With the use of policy based security being implemented in Access Control Lists (ACLs) at the distribution layer and the increased speed of interfaces the delays introduced into networks by routers are becoming significant. This paper investigates the size of the problem that is encountered in a typical network installation. Additionally since specialized hardware is not always available a hybrid approach to optimizing the order of rules in an ACL is put forward. This approach is based on the off-line pre-processing of lists to enable them to be reordered dynamically based on the type of traffic being processed by the router.
Disciplines
Computer Engineering
Recommended Citation
Davies, J.N., Grout, V. & Picking, R., (2010) ‘Improving the Performance of IP Filtering using a Hybrid Approach to ACLs’. (Proceedings of the Eighth International Network Conference INC 2010, 6-8 July 2010 pp85-95). Held in Heidelberg, Germany: Plymouth University
Digital Commons Citation
Davies, John N.; Grout, Vic; and Picking, Rich, "Improving the Performance of IP Filtering using a Hybrid Approach to ACLs" (2010). Computing. Paper 30.
http://epubs.glyndwr.ac.uk/cair/30
Comments
This paper was presented at the Eighth International Network Conference INC 2010, July 6-8 2010, which was held in Heidelberg, Germany. It was published by the University of Plymouth and the symposium proceedings will be available at http://www.cscan.org