基于Netfilter的NAT技術(shù)及其應(yīng)用

NAT技術(shù)是為了解決IPv4網(wǎng)絡(luò)地址空間的不夠而提出的一種過(guò)渡技術(shù)，并由于其簡(jiǎn)單、高效的特性而得到了廣泛的應(yīng)用。該文介紹了NAT技術(shù)及在Linux 2.4內(nèi)核中基于Netfilter框架的NAT實(shí)現(xiàn)原理，并結(jié)合實(shí)驗(yàn)室的網(wǎng)絡(luò)建設(shè)，給出其在實(shí)驗(yàn)室網(wǎng)絡(luò)建設(shè)中應(yīng)用實(shí)例。
關(guān)鍵詞：網(wǎng)絡(luò)地址譯碼器；Netfilter；Iptables
NAT Technology and Its Application Based on Netfilter
LE Deguang , GUO Donghui, WU Boxi
(Institute of Technical Physics, Xiamen University, Xiamen 361005)
【Abstract】NAT is one of the most important technologies to resolve the lack of IPv4 addresses, and has been widely applied in the
extension of LAN for Internet. This paper details on the NAT technology and its implementation principle based on Netfilter in Linux 2.4
kernel. With the Netfilter technology, it builds up a LAN in the laboratory accessed to Internet, and the outline of the LAN is also
presented.
【Key words】Network address translator(NAT); Netfilter; Iptables