The Research And Implementation Of Traffic Control System Based On Linux

In recent years, with the rapid development of computer network technology, a variety of integrated services are used more and more widely, which lead the increasing demand of bandwith. A variety of distributed multimedia applications on the network not only has high bandwidth requirements, and requires information transmission with low latency and low jitter. Some non-critical business applications, especially with the eMule, BT, Thunder and other popular P2P applications, P2P traffic has taken great portions in the network traffic. It is a serious influence to the rest of network service that peer-to-peer flows occupy the network bandwidth seriously, therefore how to effectively identify and control network traffic has been a very important problem.The bandwidth management techniques can make effective management and allocation for the resources of bandwidth, and promote Quality of Service (QoS). Further more, it can control unusual traffic of bandwidth and allocate proper bandwidth.This thesis studies the Linux firewall and the Netfilter framework works, analysis of the link tracking technology and application layer identification classifier L7-filter in Netfilter firewall and the Linux traffic control technology, FIFO, TBF, SFQ, CBQ, HTB and other queuing rules were focused on analysis.A simple and efficient traffic control system was designed and realized based on Linux Netfilter firewall and connecting tracking strategy. It combined the L7-filter which identifies packets based on application layer data and TC which is a traffic control tool. The system can identify and classify packets based on application layer data and allocate limited network bandwidth properly to realize traffic control. The experiment result shows that the system can identify and control network traffic effectively. This design way can reduce the abnormal network traffic effectively and then guarantees each user's basic bandwidth requirement. So the design model is efficient, low cost and easy to build on network which bandwidth needed to be allocated fairly.