关键词: 防火墙, 规则优化, 数据包过滤

Abstract: With the increasing of the network function， the filtration ruleset in the firewall becomes more and more, which has affected the overall performance of network seriously. This paper proposes an optimization method that adjusts the rules in the firewall accord to the characteristics of network traffic dynamically. In this way, data packets matches the rules that have matched more data packets firstly, then reduces the time of filtering data packets.


Key words: firewall, rule optimization, filtering of data packet