Extending Firewall Session Table to Accelerate NAT, QoS Classification and Routing

TL;DR

This paper proposes extending the firewall session table to improve processing speed for NAT, QoS classification, and routing, aiming to balance security and performance in network systems.

Contribution

It introduces a novel extension to the firewall session table that accelerates key network functions without compromising security.

Findings

Significant reduction in processing delay for NAT, QoS, and routing.

Maintains security level while improving performance.

Enhances network efficiency by optimizing session management.

Abstract

security and QoS are the two most precious objectives for network systems to be attained. Unfortunately, they are in conflict, while QoS tries to minimize processing delay, strong security protection requires more processing time and cause packet delay. This article is a step towards resolving this conflict by extending the firewall session table to accelerate NAT, QoS classification, and routing processing time while providing the same level of security protection. Index Terms ? stateful packet filtering; firewall; session/state table; QoS; NAT; Routing.