CAJ | 학술논문

计算机网络在各个行业中的应用越来越广泛,网络中的数据流量越来越大.在Linux内核IP数据包过滤系统Netfilter的基础上,结合开源的协议分类器软件L7-filter和流量控制器TC,设计了一套流量控制系统,实现网络数据传输的识别和分类以完成流量控制,从而保证网络的稳定和畅通.测试结果表明:该流量控制系统对硬件要求不高,具有良好的性能,可承担同时并发连接数低于6万的中小型网络的流量控制任务.对于这类中小规模网络,该系统是一个安全、高效、稳定和价格低廉的解决方案,具有较为广阔的应用前景.
계산궤망락재각개행업중적응용월래월엄범,망락중적수거류량월래월대.재Linux내핵IP수거포과려계통Netfilter적기출상,결합개원적협의분류기연건L7-filter화류량공제기TC,설계료일투류량공제계통,실현망락수거전수적식별화분류이완성류량공제,종이보증망락적은정화창통.측시결과표명:해류량공제계통대경건요구불고,구유량호적성능,가승담동시병발련접수저우6만적중소형망락적류량공제임무.대우저류중소규모망락,해계통시일개안전、고효、은정화개격저렴적해결방안,구유교위엄활적응용전경.
To cope with the heavy data flowing in the network,a flow control system was designed based on the Netfilter.It combined L7-filter and TC to achieve data transmission identification and classification,which ultimately guaranteed the stability and fluency of the network.The performance tests shows that the system performs well on current hardware level.It is a safe,efficient,stable and inexpensive solution for small and medium-sized networks which the number of concurrent connections is less than sixty thousand.The system has broad application prospects.