基于LINUX网桥实现隔离网闸技术的应用

Application of Logic Gap Based on Linux Bridge

网闸是网络安全防护手段之一,传统方法是硬件实现,成本高、控制复杂。本文提出了一种逻辑网闸技术,基于Linux网桥的Ebtables架构,可以在链路层截获数据,并利用逻辑开关实现单向数据通过以及应用层过滤等功能,从而在软件上实现了一个物理隔离网闸的作用。

The gap is one of defense method on security.In the tradition way,the gap is realized by hardware,and the control is complex.Based on Linux bridge frame,a new logic gap based bridge(LGBB)method is proposed,which can capture packet in link layer,realize unidirectional data stream by logical switch,and filter data in application layer.The logical gap fulfills most function of traditional physical gap.