Performance Comparison and Simulink Model of Firewall Free BSD and Linux
- 1 University of Fianarantsoa, Fianarantsoa, Madagascar
- 2 University of Fianarantsoa, Fianarantsoa, Madagascar
Abstract
In recent years, the number of users connected to the Internet has experienced a phenomenal growth. The security of systems and networks become essential. That is why the performance of Linux firewall and Berkeley Software Distribution (BSD) are of paramount importance in security systems and networks in all businesses. The following evaluates the firewall based tool that we have developed in Python and Scapy, which performs time measurements by serving packets traversing the firewall test. Several results were presented: the speed of the firewall under FreeBSD in terms of service time compared to the speed of the firewall under Linux as the number of rules increases; the speed of the filtering rule of a firewall stateless in terms of service time compared to the filtering rule of an active firewall gradually as the number of rules increases. Then, for care of simplicity, we have presented the queue M/M/1/K to model the performances of firewalls. The resulting model was validated using Simulink and mean squared error. The analytical model and Simulink of the firewalls are presented in the article.
- Al-Shaer, E. and Hamed, H. (2004) Modeling and Management of Firewall Policies. IEEE Transactions on Network and Service Management, 1, 2-10.
- Fulp, E.W. (2005) Optimization of Network Firewalls Policies Using Directed Acyclic graphs. Proceedings of the IEEE Internet Management Conference, Wake Forest University, 1-2.
- Zaliva, V. (2008) Firewall Policy Modeling, Analysis and Simulation: A Survey Source-Forge. Tech Rep.
- Wagner, A. and Consecom, A.G. (2012) Firewall Analysis by Symbolic Simulation, Bern University of Applied Sciences, Biel Switzerland. Ulrich Fiedler, Berlin, Zurich.
- Schuba, C.L. (1997) On the Modeling, Design, and Implementation of Firewall Technology. Purdue University, West Lafayette.
- Qui, L.L., Varghese, G. and Suri, S. (2001) Fast Firewall Implementations for Software and Hardware-Based Routers. Proceedings Ninth International Conference on Network Protocols, ICNP 2001, Riverside, 11-14 November 2001.
- Srinivasan, V., Suri, S. and Varghese, G. (1999) Packet Classification Using Tuple Space Search. Computer ACM SIGCOMM Communication Review.
- Al-Shaer E.S., Woo, T., et al. (2004) Modeling and Management of Firewall Policies. IEEE Transactions on Network and Service Management, 1, 2-10.
- Eppstein, D. and Muthukrishnan, S. (2001) Internet Packet Filter Management and Rectangle Geometry. Proceedings of the Twelfth Annual ACM-SIAM Symposium on Discrete Algorithms, Washington DC, 7-9 January 2001, 827-835.
- Hari, B., Suri, S. and Parulkar, G. (2000) Detecting and Resolving Packet Filter Conflicts. Proceedings IEEE INFOCOM 2000 Conference on Computer Communications, Tel Aviv, 26-30 March 2000.
- Atkinson, R. (1995) RFC-1825 Security Architecture for the Internet Protocol. Network Working Group.
- Avolio, F.M. and Ranum, M.J. (1994) A Network Perimeter with Secure External Access. Internet Society (ISOC).
- Al-Shaer, E. and Hamed, H. (2002) Design and Implementation of Firewall Policy Advisor Tools.
- Bartal, Y., Mayer, A., Nissim, K. and Wool, A. (1999) Firmato: A Novel Firewall Management Toolkit. Proceedings of the 1999 IEEE Symposium on Security and Privacy, Oaklan, 6 August 2002, 3-4.
- Chapman, D. and Zwicky, E. (2000) Building Internet Firewalls. 2nd Edition, Orielly & Associates Inc., Newton.