Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Comparative Analysis of Iptables and Shorewall
Blekinge Institute of Technology, School of Engineering.
2012 (English)Student thesis
Abstract [en]

The use of internet has increased over the past years. Many users may not have good intentions. Some people use the internet to gain access to the unauthorized information. Although absolute security of information is not possible for any network connected to the Internet however, firewalls make an important contribution to the network security. A firewall is a barrier placed between the network and the outside world to prevent the unwanted and potentially damaging intrusion of the network. This thesis compares the performance of Linux packet filtering firewalls, i.e. iptables and shorewall. The firewall performance testing helps in selecting the right firewall as needed. In addition, it highlights the strength and weakness of each firewall. Both firewalls were tested by using the identical parameters. During the experiments, recommended benchmarking methodology for firewall performance testing is taken into account as described in RFC 3511. The comparison process includes experiments which are performed by using different tools. To validate the effectiveness of firewalls, several performance metrics such as throughput, latency, connection establishment and teardown rate, HTTP transfer rate and system resource consumption are used. The experimental results indicate that the performance of Iptables firewall decreases as compared to shorewall in all the aspects taken into account. All the selected metrics show that large numbers of filtering rules have a negative impact on the performance of both firewalls. However, UDP throughput is not affected by the number of filtering rules. The experimental results also indicate that traffic sent with different packet sizes do not affect the performance of firewalls.

Place, publisher, year, edition, pages
2012. , 62 p.
Keyword [en]
Linux Iptables, Firewall Performance, Comparison of Linux Firewalls
National Category
Computer Science
Identifiers
URN: urn:nbn:se:bth-6181Local ID: oai:bth.se:arkivex07E0B25787EFF951C1257ACB00394C1DOAI: oai:DiVA.org:bth-6181DiVA: diva2:833610
Uppsok
Technology
Supervisors
Note
Muhammad Zeeshan Ahmad: +46-700228942Available from: 2015-04-22 Created: 2012-12-05 Last updated: 2015-06-30Bibliographically approved

Open Access in DiVA

fulltext(2298 kB)824 downloads
File information
File name FULLTEXT01.pdfFile size 2298 kBChecksum SHA-512
9ef17bad3fc2e7e834f0bd7dcfb03be660b6a90ea1af76bd2f48d3a5e0145d37509e16aafa4aef997ca216d7a6de8c7202e0a5891a70155ab49159caaab4c81c
Type fulltextMimetype application/pdf

By organisation
School of Engineering
Computer Science

Search outside of DiVA

GoogleGoogle Scholar
Total: 824 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 382 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf