The function index that measures firewall basically includes number of the rate of transmit of handling capacity, message, biggest intercurrent join, every second to build join number to wait. Handling capacity and message transmit rate are the main index that relation firewall uses, use FDT commonly (Full Duplex Throughput) will measure, point to the handling capacity of full duplex operation that 64 byte data includes, this index included handling capacity index to also cover message transmit to lead index already. The distinction of FDT and port capacity: Port capacity points to the capacity summation of physical port. If firewall received 2 thousand port, port capacity is 2GB, but FDT may be 200MB only.

The distinction of FDT and HDT: HDT points to handling capacity of half duplex operation (Half Duplex Throughput) . Thousand can close with the speed of 1GB at the same time and send. Press FDT for, it is 1GB; Press HDT for, it is 2GB. Have the handling capacity that the manufacturer place of some of firewall says, often be HDT. Generally speaking, although have many networks interface, the core processing of firewall also often has a processor to finish only, or is CPU, or is safe processing chip or NP, ASIC. To firewall application, what should emphasize 64 byte data adequately is overall handling capacity of full duplex operation, the processing capability that this index basically handles the core such as chip, NP, ASIC to handle unit by CPU or safety and firewall system framework will decide. To different systematic framework, the limits that its FDT gets used to is different, like framework of system of odd to generation CPU its theory FDT is hundred level, to in firewall application of high end, must use framework of the 2nd generation or system of the 3rd acting security.

Previous:The classification of firewall and actor defect are summed up
Next：Meet a maker of 3 source Linux firewall that go to the lavatory greatly