|
Firewalls (August 1997) |
The Gauntlet packet filter code stores the rule data in a form that is trivially searchable with ordering that's designed to quickly skip rules that don't apply. However, the list is linearly searched - rule bases of less than several hundred rules on an Ultra SPARC should be no problem for performance. Your mileage may vary - measurement is your friend ;-) -Rick References:
|