基于Linux下L7-filter模块的P2P流量控制  

The control of P2P traffic in L7-filter module based on Linux

作　　者：周华先[1] 王伟平[1] 

机构地区：[1]中南大学信息工程学院

出　　处：《湖南科技学院学报》2008年第4期127-129,共3页Journal of Hunan University of Science and Engineering

摘　　要：本文分析了Linux Netfilter/Iptables架构下L7-filter的功能、工作原理和实现机制,以及P2P协议的特征。通过编写相匹配模板文件,扩展防火墙的规则集,从而实现P2P流量控制的目的,而且可以根据不断出现的P2P业务来更新模板文件,具有很好的扩充性能。This paper analyzes the function, working principle and mechanism of L7 - filter in the Linux Netfilter / Iptables framework, and the features of p2p agreement. Through the preparation of the matching module document and the extension of firewall rule set, the p2p traffic could be controlled. And also the module files could be updated, according to constantly emerging p2p business. It has a good expansion performance.

关 键 词：防火墙 七层过滤 P2P 特征码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]