基于iptables的透明网关模式在网闸中的设计与实现

The Design and Implementation of Transparent Gateway Based on Iptables in the GAP

该文叙述了基于netfilter/iptables的透明网关模式在网闸中的设计与实现。介绍了网闸的工作原理、netfilter和iptables的包过滤filter、网络地址转换(NAT)、数据包处理mangle等的功能框架以及透明网关的工作原理,最后我们给出了所设计的透明网关的详细的工作流程,并给出了在网闸上的具体实现。

This article presents the design and implementation of transparent gateway base on iptables in the GAP.Describes the working principle of the gap,gives the packet filtering,network address transition and packet processing of the netfilter and iptables framework,and also gives the detail running process of transparent gateway,and finally we give the detailed design of the transparent gateway,and gives the concrete implementation in the gap.