Circuit-level gateway: Difference between revisions

Revision as of 06:01, 12 August 2007

Latest revision as of 00:29, 11 December 2024

(44 intermediate revisions by 37 users not shown)

Line 1:

{{Short description|Type of firewall in computing}}

A '''circuit-level gateway''' is a type of [[Firewall (networking)|firewall]].

Circuit -level gateways work at the [[session layer]] of the [[OSI model]], or as a "shim-layer" between the [[application layer]] and the [[transport layer]] of the [[TCP/IP]] stack. They monitor TCP handshaking between packets to determine whether a requested session is legitimate. Information passed to a remote computer through a circuit -level gateway appears to have originated from the gateway. ThisFirewall traffic is usefulcleaned forbased hidingon informationparticular aboutsession protectedrules networksand may be controlled to acknowledged computers only. Circuit-level firewalls conceal the details of the protected network from the external traffic, which is helpful for interdicting access to impostors. Circuit-level gateways are relatively inexpensive and have the advantage of hiding information about the private network they protect. On the other handHowever, they do not filter individual packets.

Circuit level gateways work at the TCP level.

TCP connections are relayed through a computer that runs a program to copy bytes between 2 connections while logging or caching the contents.

IP packets do not flow from end to end as the relay host works above that level. All the IP problems like fragments etc are terminated at the relay host which is better equipped to handle them

Circuit level gateways can bridge 2 networks that do not share any IP connectivity or DNS processing and circuit relays are generally used to create specific connections between isolated networks.

Circuit-Gsteway is a variation of the Application level gateway which does some extra functions as compared to AWG.

CGW creates a new connection between itself and the remote host. The user is not aware of this and thinks that there is a direct connection.

Also Circuit-Gsteway changes source IP address in the packets from end user’s IP address to its own. Therefore the IP address of the computer of the internal user are hidden from the outside world.

==See also==

* [[Application firewall]]

* [[Application-level gateway]] firewall

* [[Bastion host]]

* [[Dual-homed]]

==External links==

* http://netsecurity.about.com/cs/generalsecurity/g/def_circgw.htm {{Webarchive|url=https://web.archive.org/web/20050917201345/http://netsecurity.about.com/cs/generalsecurity/g/def_circgw.htm |date=2005-09-17 }}

* http://www.dmccormick.org/firewalls.htm

* http://netsecurity.about.com/cs/generalsecurity/g/def_circgw.htm

* http://www.codepedia.com/1/Circuit-level+gateway

* http://www.softheap.com/internet/circuit-level-gateway.html

* http://www.pcstats.com/articleview.cfm?articleid=1450&page=5

* http://csrc.nist.gov/publications/nistpubs/800-10/node53.html

[[Category:Internet architecture]]

[[Category:Network socket]]

[[Category:Transmission Control Protocol]]

{{compu-network-stub}}