面向TCP透明代理截获技术的研究与实现

Research and Implementation on the capturing technique of TCP transparent proxy

当前,网络的安全性越来越重要,而透明代理成为提高网络安全性的重要技术手段之一。针对传统的Linux系统下透明代理实现效率低、配置复杂的缺点,本文提出了一种基于内核模块的透明代理实现方式,并就这种透明代理方式中截获技术的关键条件做了深入的研究与分析。模拟实验表明,这种实现方式简化了用户配置,提高了代理效率,增强了可移植性。

Nowadays, the transparent proxy becomes one of the crucial technical means to enhance the Internet security as it is increasingly important. However, the traditional implementation of Transparent Proxy in Linux system has many shortages, such as low efficiency and complex configuration. A new implementation of Transparent Proxy which based on kernel module is proposed in this paper, and does a deep research and analysis about the key conditions to the capturing techniques. Simulation results indicate that the performance of efficiency and heritability of the implementation which is proposed in this paper can be significantly improved.