基于Linux Netfilter的DDoS防火墙设计

Design of DDoS Firewall Based on Linux Netfilter

分布式拒绝服务攻击(DDoS)作为网络攻击中的一种重要手段,对网络安全的威胁日益严重。文章在分析当前常用的防火墙技术以及Linux Netfilter防火墙框架基础上,应用状态检测技术,设计了一款基于Netfilter框架的DDoS防火墙。验证结果表明,该防火墙能够较好的防御DDoS攻击。

DDoS attack is a serious threat to the network security.In this paper,we analyze the framework of Linux Netfilter,and design a DDoS firewall using state inspection technology which is based on Netfilter.Test shows the firewall can defense common DDoS attacks.