iptables整体模块结构图
来源:互联网 发布:剑灵花钱吗 知乎 编辑:程序博客网 时间:2024/05/08 15:10
转自 http://www.yuanma.org/data/2009/0401/article_3597.htm
Network
-----------+-----------
|
+---------+---------+
| PREROUTING |
| +-------+-------+ |
| | conntrack | |
| +-------+-------+ |
| | mangle | | <- MARK WRITE
| +-------+-------+ |
| | IMQ | |
| +-------+-------+ |
| | nat | | <- DEST REWRITE
| +-------+-------+ | DNAT or REDIRECT
+---------+---------+
|
+-------+-------+
| ipchains |
| input |
+-------+-------+
|
+-------+-------+
| QOS |
| INGRESS |
+-------+-------+
|
packet is for +-------+-------+ packet is for
this machine | INPUT | another address
+--------------+ ROUTING +--------------+
| | + PDBB | |
| +---------------+ |
+-------+-------+ |
| INPUT | |
| +-----+-----+ | |
| | filter | | |
| +-----+-----+ | |
+-------+-------+ |
| |
+-------+-------+ |
| Local | +-------+-------+
| Process | | FORWARD |
+-------+-------+ | +-----+-----+ |
| | | mangle | | <- MARK WRITE
+-------+-------+ | +-----+-----+ |
| OUTPUT | | | filter | |
| ROUTING | | +-----+-----+ |
+-------+-------+ +-------+-------+
| |
+-------+-------+ |
| OUTPUT | +-------+-------+
| +-----------+ | | ipchains |
| | conntrack | | | forward |
| +-----+-----+ | +-------+-------+
| | mangle | | <- MARK WRITE |
| +-----+-----+ | |
| | nat | | <-DEST REWRITE |
| +-----+-----+ | DNAT or REDIRECT |
| | filter | | |
| +-----+-----+ | |
+-------+-------+ |
| |
+------------------+ +------------------+
| |
+--+-------+--+
| ipchains |
| output |
+------+------+
|
+---------+---------+
| POSTROUTING |
| +-------+-------+ |
| | mangle | | <- MARK WRITE
| +-------+-------+ |
| | nat | | <-SOURCE REWRITE
| +-------+-------+ | SNAT or MASQUERADE
| | conntrack | |
| +-------+-------+ |
| | IMQ | |
| +-------+-------+ |
+---------+---------+
|
+------+------+
| QOS |
| EGRESS |
+------+------+
|
-----------+-----------
Network
- iptables整体模块结构图
- [ZT]iptables整休模块链表结构图
- java.util.concurrent整体结构图
- 搜索引擎整体结构图以及描述
- 结构图---模块调用关系
- GameBryo内存模块结构图
- hadoop整体结构图及服务组件详解
- 对Hbase的整体理解结构图
- 支付系统架构设计----整体结构图
- OpenStack Conceptual Architecture(模块结构图)
- iptables添加模块
- iptables添加connlimit模块
- iptables 添加time 模块
- 备忘:iptables length模块
- iptables模块介绍:connlimit
- iptables-extensions拓展模块
- Iptables模块recent应用
- Iptables模块recent应用
- 24点游戏
- Mysql中通过Like匹配中文不准确的解决办法
- STL—vector删除重复元素
- linux架设subversion(svn)版本控制
- C#(.NET)数据访问连接、查询、插入等操作的封装类
- iptables整体模块结构图
- sd卡驱动+FAT文件系统(二)
- ThreadLocal详解
- Asp.net 无限级分类实例
- ruby 大会
- 初学DWR3.0
- 矩阵类
- 光光:北漂族(beipz.com)网站制作过程
- Windows中的映射模式和坐标转换