摘要
文中提出在防火墙设计中遇到的一个难题,即性能和功能无法做到两全其美,而通常解决此矛盾的方法却无法从根本上去解决。文中从另一个角度提出解决此问题的一个思路,那就是负载平衡,从而使性能和功能的矛盾得到根本解决。在分析Linux的NetFilter/IPtables框架结构的基础上,提出以该框架为基础实现负载平衡的技术,让多台防火墙组成一个群提供并行服务,其中有一台是主服务器,这样就很好地以硬件冗余来解决软件设计中的矛盾。
A problem in designing firewall has been brought up, that is either performance or functionality can only be satisfied, and it could not solved fundamentally using common methods. The paper has brought forword a way of thinking in another view, namely loading balance, in this case the contradiction could be solved perfectly. The paper has analyzed in detail the Linux NetFilter/IPtables framework, and has brought forward the technology of loading balance which is based on the above frame, which provided service in parallel by a group consisted of several firewalls, one of which is the main server. Thereby the conflict of the performance and function in designing of firewall is well solved by hardware redundance in a way.
出处
《微机发展》
2005年第5期86-88,102,共4页
Microcomputer Development
关键词
负载平衡
虚拟防火墙
性能
功能
loading balance
virtual firewall
performance
function
