Iptables防火墙性能优化研究

Research on Optimization of Iptables Firewall Performance

研究Linux下Netfilter/Iptables防火墙的实现机制,分析影响防火墙性能的关键因素,提出防火墙优化的概念,并给出几点规则组织的原则,按照此原则编制优化后防火墙规则的模板,最后讨论优化后取得的效果。

After researching the theory of firewall of Netfilter and Iptables, and analyzing the key factors which influence perform- ance of firewall, this paper puts forward the concept of firewall optimization and the principles of how to write firewall rides. The template of rules is presented based on these principles. Finally, the optimization effect is discussed.