防火墙逆向代理的设计与实现  

Design and Implementation of Firewall Reverse Proxy

作　　者：刘彦[1] 陈弘[1] 杨宇航[1] 

机构地区：[1]上海交通大学电子工程系,上海200030

出　　处：《计算机工程》1999年第9期66-67,70,共3页Computer Engineering

摘　　要：网络地址翻译（NAT）是防火墙的主要技术之一。传统的NAT有不能对外提供服务，协议不透明，不易扩展应用等缺点。逆向代理技术较好地解决了这些问题，能实现双向的地址映射和虚拟专用网，并运用HASH检索接收从外网到内网的逆向连接，实现与应用的兼容。Network Address Translation is one of the main technologies adopted in the firewall. The traditional NAT can not provideservice for the outside Internet users. It is not transparent to the various Internet Protocols, which prevents some applications from passingthrough the firewall, and it is not easy to expand the capacity of NAT. The reverse proxy technology introduced here can solve theseproblems. It implements the bi-direction address mapping and the virtual private network as well as it permits the reversal IP packets to passthrought NAT.

关 键 词：INTERNET网 防火墙 逆向代理 网络地址映射 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]