来源：本文转自“运维研习社” The Netfilter framework was created by Rusty Russell in 1998. It is a subsystem of the Linux kernel, merged into the Linux kernel in March 2000. Netfilter adopts a modular design, providing a well-structured underlying framework for extending various network services. You can register callbacks at various points in the packet traversal process within … Read more
Completed Content I will create a simple firewall demo to help you familiarize yourself with network kernel programming. This demo will be implemented based on the Linux Netfilter framework. Basic Framework Basic Concepts Netfilter Framework Netfilter is a framework in the Linux kernel used for filtering, modifying, and redirecting network packets. It provides multiple hook … Read more
Click the blue text above to follow me! OverviewTechnically speaking, iptables is not a firewall; the real firewall is netfilter, which runs in the system kernel. iptables is merely a representative of netfilter, primarily functioning to interact with users, obtaining their requests and converting them into information that netfilter can accept.iptables mainly operates at the … Read more
Linux Traffic Control Overview● Queueing Discipline (Qdisc): Defines the queuing strategy for packets, such as First In First Out (<span>pfifo_fast</span>) or Hierarchical Token Bucket (<span>HTB</span>).● Class: Forms a hierarchical structure combined with queueing disciplines to allocate bandwidth priorities (e.g., assigning high priority to real-time traffic).● Filter: Classifies traffic based on rules (such as IP address, … Read more