期刊导航

论文摘要

数据包高效透明转发研究及实现

Research and Implementation of Efficient and Transparent Packet Forwarding

作者:陈兴蜀(四川大学 计算机学院,四川 成都 610064);严宏(四川大学 计算机学院,四川 成都 610064);童浩(四川大学 计算机学院,四川 成都 610064)

Author:(School of Computer Sci.,Sichuan Univ.,Chengdu 610064,China);(School of Computer Sci.,Sichuan Univ.,Chengdu 610064,China);(School of Computer Sci.,Sichuan Univ.,Chengdu 610064,China)

收稿日期:2008-01-21          年卷(期)页码:2008,40(4):109-114

期刊名称:工程科学与技术

Journal Name:Advanced Engineering Sciences

关键字:透明转发;Netfilter;状态检测;简单包过滤

Key words:transparent forwarding;Netfilter;state inspection;simple packet filtering

基金项目:国家973计划资助项目(2007CB311106);信息产业部2006电子发展基金资助项目(信部运634号)

中文摘要

为了提高双网口相互转发数据包的透明模式防火墙的性能,在分析数据包收发流程以及Netfilter框架的基础上,提出了一种获取发送网卡信息的新方法,并且基于该方法设计并实现了带状态检测和简单包过滤两种功能的透明模式防火墙。测试结果表明,与使用Linux bridge结合Netfilter构建的透明模式防火墙相比,这两种防火墙中的数据转发和过滤更加简洁高效。

英文摘要

To improve the performance of the firewall in which two Ethernet cards transmit mutually receiving packets, a new method for getting the information of the Ethernet card,which was used to send a packet,was presented after the analysis of receiving, transmitting and the Netfilter. Based on this method, two kinds of transparent firewall, state inspection and simple packet filtering, were implemented. The test results showed that, compared with the transparent firewalls which are based on Linux bridge and Netfilter, the process of forwarding and filtering in these two firewalls is more efficient.

关闭

Copyright © 2020四川大学期刊社 版权所有.

地址:成都市一环路南一段24号

邮编:610065