防火墙逆向代理的设计与实现

Design and Implementation of Firewall Reverse Proxy

网络地址翻译（NAT）是防火墙的主要技术之一。传统的NAT有不能对外提供服务，协议不透明，不易扩展应用等缺点。逆向代理技术较好地解决了这些问题，能实现双向的地址映射和虚拟专用网，并运用HASH检索接收从外网到内网的逆向连接，实现与应用的兼容。

Network Address Translation is one of the main technologies adopted in the firewall. The traditional NAT can not provideservice for the outside Internet users. It is not transparent to the various Internet Protocols, which prevents some applications from passingthrough the firewall, and it is not easy to expand the capacity of NAT. The reverse proxy technology introduced here can solve theseproblems. It implements the bi-direction address mapping and the virtual private network as well as it permits the reversal IP packets to passthrought NAT.