数据包高效透明转发研究及实现

为了提高双网口相互转发数据包的透明模式防火墙的性能,在分析数据包收发流程以及Netfilter框架的基础上,提出了一种获取发送网卡信息的新方法,并且基于该方法设计并实现了带状态检测和简单包过滤两种功能的透明模式防火墙.测试结果表明,与使用Linux bridge结合Netfilter构建的透明模式防火墙相比,这两种防火墙中的数据转发和过滤更加简洁高效.

Research and Implementation of Efficient and Transparent Packet Forwarding

To improve the performance of the firewall in which two Ethernet cards transmit mutually receiving packets, a new method for getting the information of the Ethernet card,which was used to send a packet,was presented after the analysis of receiving, transmitting and the Netfilter. Based on this method, two kinds of transparent firewall, state inspection and simple packet filtering, were implemented. The test results showed that, compared with the transparent firewalls which are based on Linux bridge and Netfilter, the process of forwarding and filtering in these two firewalls is more efficient.