The Design And Implementation Of Flow Monitor And Tactics Route System In Linux

The fast emergence of the Hi-Tech industry drives the progress of the whole society, and promotes the speedy development of Internet even more. However, the network also exposes a lot of thorny problems. They are such objective factors as network building up, hardware equipment, etc., and artificial destructions such as virus procedures. At present, the more outstanding problems are network malicious scanning, network congestion, and overweight in the network environment.Against the above-mentioned network problems, this subject -The gateway flow monitor and tactics route system, has offered a solution. This system is divided into two function modules. They are the gateway monitor module and the gateway tactics route module. Their basic functions are: monitoring the unusual data stream and setting up network route according to some tactics at gateway server.The work of the gateway monitor module is to utilize netfilter function frame in Linux operating system, write the kernel module, and monitor the network data flow. Then write hash algorithm to store and organize user nodes and message nodes, send the user information which appears unusual situation from kernel space to user space through the /proc file system. The result of the flow monitor provides a gist that sets up route table in the gateway tactics route module. The gateway tactics route module establishes the route table according to the Ip source address and load balancing. On the basis of analyzing many kinds of route lookup algorithms and Linux route mechanism, select the high-efficient algorithm that suits experiment environment, construct the data structure and the route table and program the concrete realization procedure. Utilize Linux network interface lower data structure (net_device {}) and the monitor result, scale load situation of the network interface then adjust the route table.The gateway flow monitor and tactics route system has passed the test run and reached the anticipated result. The network administrator can establish the route rule according to actual demands and supervise the behavior of unusual users. Finally themodule produces the daily user management records.