基于流过滤技术的IPv6防火墙的系统总体结构设计

System Architecture Design of IPv6 Firewall Based on Filtering Technology

重点解决了现有的IPv6防火墙存在的一些安全隐患,并且在Linux这个开发平台上详细的设计和实现了过滤器各个功能模块,同时采用了流过滤技术来实现系统对应用层的过滤。本系统采用的是屏蔽子网的防火墙体系结构,在此基础上开发出了一款新型的IPv6防火墙。

The key to solve the existing IPV6 firewall exist some potential safety problems,and in the linux open platform of detailed design and implementation of each functional module of the filter, at the same time, through the technology to realize the system to the application cayer filter.The system is based on the screened subnet firewall system structure, on thebasis of this open up a new IPV6 firewall.