提出了一种全新的基于服务器的网络安全防护系统的设计方式。采用服务器主机加NetFPGA板卡的架构,其中NetFPGA完成包过滤和内容检测功能,而配置、更新规则及入侵检测功能则在服务器端由软件实现。NetFPGA通过PCI接口与被防护主机联合工作,从而实现了防火墙与入侵检测的联动。结果表明在发现入侵之后可以更准确,更有针对性地做出反应。 Proposed a new server-based network security protection system design. The server host plus NetFPGA board architecture, including NetFPGA package filtering and content detection capabilities, and configuration, update rules and intrusion detection capabilities in the server-side software. NetFPGA through the PCI interface and the protected host work together, enabling the firewall and intrusion detection linkage. The results show that the response can be more accurately and specifically targeted after the discovery of the invasion.