IPv6防火墙过滤技术的研究与应用  

Research and Application of Filtering Technology on IPv6 Firewall

作　　者：袁伟云[1] 聂瑞华[1,2] 梁卓明 梁军[2] 李艳[1] 

机构地区：[1]华南师范大学计算机学院,广东广州510631 [2]华南师范大学网络中心,广东广州510631

出　　处：《计算机技术与发展》2010年第9期145-148,152,共5页Computer Technology and Development

基　　金：国家教育科研基础设施IPv6技术升级和应用示范项目(CNGI2008-084)

摘　　要：由于IPv6协议格式自身的特点,使得传统的IPv4防火墙不能很好地应用于IPv6网络,故对IPv6防火墙技术的研究成为了一个热点。为了使传统的IPv4防火墙能够更好地适应用于IPv6网络,从防火墙的过滤技术入手,分析比较几种主要的过滤技术及其特征,将流过滤技术引入IPv6的防火墙中,结合了Linux下开源防火墙NetFilter框架,给出了流过滤技术在IPv6防火墙中具体的实现思路与方法,最后对这种流过滤防火墙的性能进行测试,表明了IPv6流过滤防火墙的可行性。Because of IPv6 protocol its own characteristics,make the traditional IPv4 firewalls are not well adapted to IPv6 network.Research on IPv6 firewall technology has become a hot spot.In order to make the traditional IPv4 firewalls are better able to adapt to the IPv6 network,starting with analysising and comparing several filtering technologies and their characteristics,then flow filtration technology is introduced into IPv6 firewall,on the basis of the open-source firewall framework-NetFilter in Linux,the specific idea and method of flow filtration technology in the IPv6 firewall is given,finally the performance of this flow filtration firewall is tested,demonstrats the feasibility of IPv6 flow filtration firewall.

关 键 词：防火墙 过滤 TCP/IP协议栈 规则链表 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]