Suwichai Phunsa

Traffic-adaptive Field Ordering for Improving Tree-rule Firewall Performance

—Firewall performance depends heavily on the order in which packet fields are examined during rule matching. The Tree-Rule Firewall (TRF) organizes rules as a hierarchical tree whose levels correspond to packet fields, but existing designs fix the field-to-level assignment staticaly at compile time, which is suboptimal...