Iptables规则集的优化设计  

Optimization design of Iptables rules set

作　　者：林燕[1] 

机构地区：[1]杭州职业技术学院,浙江杭州310018

出　　处：《计算机时代》2015年第2期47-49,共3页Computer Era

摘　　要：分析了Iptables工作原理,介绍了Iptables规则集,提出了一种有效的规则集优化算法,并在Linux下实现。运用该优化算法能够有效剔除规则集中重复的规则,直接提升系统过滤效率,减少过滤数据包所需的时间,从而提高防火墙系统的网络吞吐量。The working principles of Iptables are analyzed and its rule set is introduced. An effective optimization algorithm is put forward and implemented in Linux. The optimization algorithm can effectively eliminate rules focused duplicate rules, directly improve the system filtration efficiency and reduce the required data packet filtering time, so as to improve the throughput of network firewall system.

关 键 词：LINUX 防火墙 IPTABLES 规则集 优化 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]