Linux下基于Netfilter的可控NAT功能实现  

Implementation of Controllable NAT based on Netfilter in Linux

作　　者：吴华[1] 邓波 WU Hua;DENG Bo(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2021年第9期2264-2268,共5页Communications Technology

摘　　要：随着互联网应用的日益普及,网络地址资源紧缺是一个比较突出的问题,网络地址转换(Network Address Translation,NAT)技术是解决此问题的一种比较有效的方法。通过阐述Linux3.10内核的Netfilter框架,以及深入分析NAT的基本原理和内核模块编程,在基于Netfilter的可扩展性和Linux操作系统内核与用户空间的通信方法之上,设计了一种新的进程间通信方式ukComm,实现了一个针对网络应用主流的NAT地址转换模块。程序运行在Linux内核态,具有很高的效率;而且采用Netfilter框架,具有良好的代码结构,易于维护和扩展。With the increasing popularity of internet applications,the shortage of network address resources is a more prominent problem.NAT(Network Address Translation)technology is a relatively effective method to solve this problem.This paper describes the Netfilter framework of Linux 3.10 version kernel,and deeply analyzes the basic principles of NAT and kernel module programming.Based on the scalability of Netfilter and communication between Linux operating system kernel and user space,a new inter-process communication method ukComm is designed to implement a NAT address translation module for mainstream network applications.The program runs in the Linux kernel mode with high efficiency.The Netfilter framework has a good code structure and is easy to maintain and expand.

关 键 词：NETFILTER NAT ukComm LINUX 内核态 

分 类 号：TN919[电子电信—通信与信息系统]