Title :
The Implementation and Performance Analysis of Netfilter to Support User Interface on FSL3/4
Author :
Kim, Myoungsun ; Hwang, Sunyeop ; Won, Youngam ; Choi, Hoon
Author_Institution :
Dept. of Comput. Eng., Chungnam Nat. Univ., Daejeon
Abstract :
FSL3/4 (flow separation by layer 3/4), a classification of NAT technology, supports the end-to-end connectivity and IPSEC (IP security protocol) that is not supported in the existing technology for IP address sharing. However, FSL3/4 does not provide a user interface. Furthermore, FSL3/4 lacks portability, forcing the user to change the source code and recompile the kernel to change the function. This paper introduces NIF (Netfilter implementation of FSL3/4) supporting the existing FSL3/4 to add the user interface. We show the performance comparison of NIF with the existing technologies for IP address sharing including the above-mentioned FSL3/4. The performance degradation of NIF was 3% and 2.4% compared with typical routing and FSL3/4, respectively. The result shows that the performance of NIF is slightly lower than FSL3/4. However, since the performance difference is slight, NIF is preferable considering that NIF greatly improves user´s convenience and expandability which is the weakness of FSL
Keywords :
IP networks; Internet; telecommunication security; transport protocols; user interfaces; FSL3/4; IP address sharing; IP security protocol; IPSEC; NAT technology classification; NIF; Netfilter implementation; end-to-end connectivity; flow separation by layer; user interface; Computer interfaces; Computer security; Electronic mail; Information filtering; Information filters; Internet; Kernel; Network address translation; Performance analysis; User interfaces;
Conference_Titel :
TENCON 2006. 2006 IEEE Region 10 Conference
Conference_Location :
Hong Kong
Print_ISBN :
1-4244-0548-3
Electronic_ISBN :
1-4244-0549-1
DOI :
10.1109/TENCON.2006.343812
