高性能应用层代理防火墙系统的设计与实现

随着Internet的广泛应用，网络安全越来越受到人们重视。对企业来说，有了防火墙和防病毒系统，网络似乎就可以安全了，但事实并非如此，由单纯防火墙和防病毒系统组成的安全系统还存在很多不足，表现在不能防御新型病毒和新型攻击，尤其不能防御通过Web网页、Web邮件、聊天软件、P2P传播的新型威胁。本文分析了传统防火墙存在的不足，提出了“基于NAT的高性能应用层代理防火墙系统”的新的方案，并给出了设计思想和实现方法。

The Design and Implementation of High Performance Application Layer Proxy Firewall

With the widespread of Internet, network security is becoming more and more important. Some enterprises consider that their networks secure if they are equipped with a firewall or anti-virus system. In fact, lots of limitation exists in the security system constituted only by a single firewall or anti-virus. For example, they can not defend from a new type of virus or attacking, especially some new threats through Web Page, Web Email, chatting software or P2P transfer software.The thesis analyzes the shortcomings of traditional firewall and provides a new solution for high performance application layer proxy firewall based on NAT.