linux内核网络配置.ppt

tc命令语法 tc qdisc … tc class … tc filter … 1. Netfilter/iptables 2. Traffic Control Linux Bridging 2009.03.20 Table of Contents 1 Linux Network Stack overview 2 Linux Bridging Concept 3 Applications and Tools Linux Network Stack Part 1 Kernel Network Layer Socket Buffer(1) - struct struct sk_buffer{ } Socket Buffer(2) - transition Linux Bridging Concept Part 2 Device Abstraction ■ Linux内核把设备虚拟成文件 Everything is file ■ /dev ■ /sys/class/net ■ 常见网络设备命名 ■ifconfig Name Device class ethX Ethernet adapter pppX PPP connection via modem isdnX ISDN cards atmX Asynchronous transfer mode lo Loopback device Bridge Abstraction ■ Linux内核把网桥虚拟成一个设备（文件, /dev/br0） ■ 网桥通过绑定真实的网络设备(eth0/eth1)来实现 ■ 网桥的逻辑构成形式 Bridge Netfilter Applications and Tools Part 3 Tools:brctl Setup a Bridge #ifconfig eth0 down #ifconfig eth1 down #brctl addbr mybridge0 #brctl addif mybridge0 eth0 #brctl addif mybridge0 eth1 #brctl show Bridge name bridge id STP enabled interfaces mybridge0 8000.000000000000 no eth0, eth1 #ifconfig mybridge0 up Tuning STP #brctl stp mybridge on #brctl setbridgeprio mybridge0 [priority] #brctl setpathcost mybridge0 eth0 [cost] #brctl setpathcost mybridge0 eth1 [cost] #brctl setfd mybridge0 [time] #brctl sethello mybridge0 [time] #brctl maxage mybridge0 [time] #ifconfig mybridge0 up Ethernet filtering ebtables ■ Ethernet bridge frame table administration ■ Analogous to the iptables application TABLES： ■ filter INPUT OUTPUT FORWARD ■ nat PREROUTING OUTPUT POSTROUTING ■ brout BROUTING References 1 [1] Understanding Linux Network Internals By Christian Benvenuti December 2005 [2] Professional Linux Kernel Architecture By Wolfgang Mauerer [3] Man Page: ebtable brctl Ethernet filtering ebtables ■ Ethernet bridge frame table administration ■ Analogous to the iptables application TABLES： ■ filter INPUT OUTPUT FORWARD ■ nat PREROUTING OUTPUT POSTROUTING ■ brout BROUTING 一、Netfilter/iptables（包过滤防火墙） 1. Netfilte