CAJ | 학술논문

随着互联网的飞速发展，网络安全逐渐成为一个潜在的巨大问题。防火墙是网络安全的关键技术，策略路由可以使数据包按照用户指定的策略进行转发。针对日益复杂的网络多出口问题，文中介绍了基于源地址的策略路由，提出了一种结合策略路由、网络地址转换等多技术的多出口配置方案，并比较了策略路由和路由策略的区别。基于防火墙设计策略路由，并结合网络地址转换，可以提高网络出口资源利用率，实现网络负载均衡，保护校园网安全。
수착호련망적비속발전，망락안전축점성위일개잠재적거대문제。방화장시망락안전적관건기술，책략로유가이사수거포안조용호지정적책략진행전발。침대일익복잡적망락다출구문제，문중개소료기우원지지적책략로유，제출료일충결합책략로유、망락지지전환등다기술적다출구배치방안，병비교료책략로유화로유책략적구별。기우방화장설계책략로유，병결합망락지지전환，가이제고망락출구자원이용솔，실현망락부재균형，보호교완망안전。
With the rapid development of Internet,network security has become a potentially huge problem. Firewall is the key technology of network security. Policy-based routing can make the packet forwarding according to the user specified strategy. According to the in-creasingly complex network of multiple egress problem,introduce the policy-based routing method according to the source address to se-lect routing and compare the difference of policy-based routing and routing strategy. A more suitable configuration for multiple egress network is proposed,based on technologies such as policy-based routing and network address translation. For improving the network re-source utilization of the export and protection of the campus network security,it is very important to design policy-based routing in fire-wall and the network address translation.