基于Netfilter/Iptables内核扩展的P2P流量管理  

P2P Flow Control Based on Netfilter/Iptables Kernel Extension

作　　者：徐苏磊[1] 梁伟[1] 

机构地区：[1]南京邮电大学计算机学院,江苏南京210003

出　　处：《计算机技术与发展》2010年第6期101-104,108,共5页Computer Technology and Development

基　　金：江苏省科技计划项目(BG2007045)

摘　　要：为了缓解P2P流量对网络造成的带宽影响,合理利用网络资源,准确识别和测量P2P流量,才可以更好地保障网络的QoS。而传统上按照端口方式来识别P2P流量,随着P2P应用的发展,这种方法已经不能满足对P2P流量管理的需要。介绍了P2P应用及其优缺点,分析了Netfilter和Iptables架构的实现机制和扩展技术,以及P2P协议的特征。阐述了如何利用Netfilter/Iptables框架进行内核扩展来实现P2P流量识别与管理,通过实验进行了验证,并且对实验的结果进行了简单分析与总结,从分析的结果来看,明显在对P2P流量识别和管理上有所提高。In order to alleviate the network bandwidth traffic impact caused by P2P flow for the rational use of network resources,better protect the network QoS by accurate identification and measurement of P2P flow traffic.With the development of P2P application,the traditional method that detects the P2P flow by the according port can＇t meet the requirement of P2P management.Describe the advantages and disadvantages of P2P applications,analysis of the Netfilter framework and Iptable expansion technology,as well as the characteristics of P2P protocols.Describe how to use Netfilter / Iptables framework for kernel extension to implement P2P traffic identification and management,and conduct a brief analysis and summary.From the results of analysis,P2P traffic identification and management is improved obviously.

关 键 词：P2P NETFILTER IPTABLES P2P特征码 流量控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]