流量调节防火墙的设计与实现

Design and Implementation of Traffic Adjusting Firewall

摘要: 论述了防火墙技术可以对进出网络的数据进行控制，有效地对内部网络实施保护；而流量调节技术通过按优先级发送不同类别的信息量，达到改善网络服务质量的目的.文中将两种技术相结合，构建了某企业CAD网络的防火墙WQ-Firewall的安全系统，以求在获得安全的同时提高网络性能.在Linux系统上实现了加权优先级队列的防火墙，在对IP包进行过滤的同时，根据其IP地址、TCP端口协议类型等信息，为它们分配了不同的优先级别.根据网络带宽和吞吐量对各级别进行处理.

Abstract: Technologies of packet filter firewall and traffic adjusting are combined to ensure security as well as performance CAD network information system.A firewall that adopts weighted priority queue,called WQ-FIREWALL is implemented.As it filters the packets,it assigns priority to them according to IP address,TCP ports,protocol type etc,and sends packets in order according to their priority and weight.