基于Linux分布式复合网关原型的研究及实现

Research and Implementation of a Linux-Based Distributed Hybrid Gateway Prototype

本文提出一种基于Linux分布式平台的安全复合网关原型,该网关基于多功能层次化的框架体系结构。我们通过研究分析Linux内核Netfilter,将目前流行的安全技术与Linux内核的安全机制及TCP/IP协议栈的实现集成捆绑,建立一种集网络监控、防火墙、负载均衡、安全检测等多种功能于一体的网络安全体系模型。

This article proposes a new hybrid gateway prototype based on Linux distributed platforms. This gateway is based on a multi-functional and hierarchical architecture. By analyzing and studying the Linux kernel Netfilter, we combine the current security techniques with the security mechanism of the Linux kernel and the TCP/IP protocol implementation in order to establish a secure and reliable network environment, which integrates network monitoring, firewalls,load balancing and attack detection into one framework.