作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

›› 1999, Vol. 25 ›› Issue (09): 66-.

• 论文 • 上一篇    下一篇

防火墙逆向代理的设计与实现

刘彦,陈弘,杨宇航   

  1. 上海交通大学电子工程系 上海,200030,上海交通大学电子工程系 上海,200030,上海交通大学电子工程系 上海,200030
  • 发布日期:1999-09-25

Design and Implementation of Firewall Reverse Proxy

Liu Yan, Chen Hong, Yang Yuhang   

  1. (Shanghai Jiaotong University, Department of Electronical Engineering, Shanghai 200030)
  • Published:1999-09-25

摘要: 网络地址翻译(NAT)是防火墙的主要技术之一。传统的NAT有不能对外提供服务,协议不透明,不易扩展应用等缺点。逆向代理技术较好地解决了这些问题,能实现双向的地址映射和虚拟专用网,并运用HASH检索接收从外网到内网的逆向连接,实现与应用的兼容。

关键词: 网络地址映射, 防火墙, 虚拟专用网, 代理, 应用专用网关

Abstract: Network Address Translation is one of the main technologies adopted in the firewall. The traditional NAT can not provideservice for the outside Internet users. It is not transparent to the various Internet Protocols, which prevents some applications from passingthrough the firewall, and it is not easy to expand the capacity of NAT. The reverse proxy technology introduced here can solve theseproblems. It implements the bi-direction address mapping and the virtual private network as well as it permits the reversal IP packets to passthrought NAT.

中图分类号: