Linux下流量控制系统的设计

Design of P2P Traffic Control System Based on Linux

摘要:

提出一种基于Linux系统防火墙框架Netfilter的混合方法的P2P数据控制的系统解决方案,通过扩展Netfilter/Iptables框架和设置适合的防火墙过滤规则,系统地对 P2P 流量进行管理;开发实现的原型系统可以禁止系统中非正常业务的 P2P 流量,还能和 Linux QoS工具一起使用以限制一部分 P2P 的带宽占用,避免了 P2P 等下载软件无限制地占用带宽资源,这对合理分配网络资源、提高网络性能具有实用意义。

Abstract:

This paper presents a system solution to P2P traffic control based on Netfilter in Linux firewall architecture. Through extending the Netfilter/Iptables framework and some appropriate firewall filter rules, the P2P traffic can be controlled, and as well could restrict P2P bandwidth usage together with Linux QoS tools. Thus, the network resources could be alleviated and the performance could be enhanced largely.