The Design Of Accounting Security Gateway Based On XML-RPC And Its Accomplishment

Reasonable and effective network accounting is a guarantee of normal running and popularization of network. As one part of network operation and management, network accounting is very important. However, traditional network accounting system is not strong enough to accommodate the development of network services. The diversification of network attacks makes network security problem more serious.Based on the current research and implementations, this paper provides an overall design of a secure gateway with accounting. Through the thorough analysis of the Netfilter framework principle of Linux Kernel 2.6, also having used its powerful property, we design and implement a kind of secure gateway system based on Linux and accounting and management system based on Windows. This two systems are communicate by XML-RPC protocol.In the process of system design, all functions are coded with modularization, all modules are integrated into system after strict test. The function of this systems include user verification, collecting and accounting of dataflow, access control based on user, network address translation, packet filtering. For solving the problem of bottleneck on gateway, we used various advanced and ripen technologies, such as core code used in kernel space, collect the flow data by NetFlow. For solving the problems about the download by BT, worm virus, restrict of on-line time,we introduced the technology of the limit of connection number,the implement of Vlan.From the result of test and application, it proves that the system operates stables, accounting for flow is accurate and well real-timed, access control and security mechanism for packet filtering is well operated, also it is convenient for user administrator. It has the high practical value and has been adopted by many IP board merchants.