Design and Implementation of the Embedded Linux Firewall

In this paper,a project is designed and tested for embedded Linux firewall.Firstly,a system framework of embedded Linux firewall based on ARM processor is proposed and a scheme of Linux kernel reducing is designed.Secondly,considering the poor performance of Netfilter/Iptables in large number rules set,a method of Iptables combining with NF-hipac and Ipset is introduced,and it is transplanted successfully.Finally,with the accomplished system,the integrated and detailed function and performance tests are provided.The function experiments show the rationality and efficiency of the system design and the performance tests indicate the key parameters influencing the system performance,which provides the reference and basis for further optimizing the system.