基于ARM9的Linux驱动开发及防火墙设计

发布时间：2018-11-24 18:36

【摘要】：随着通信与信息科技、数字与IC设计技术在我们的日常生活及工作中的的迅猛普及,嵌入式系统设计正在成为现代信息技术中的主流技术。本文主要阐述了嵌入式Linux的概念、基础、网络结构、网络设备驱动程序的设计、调试,基于iptables的嵌入式系统防火墙设计与优化。首先通过分析、研究嵌入式linux内核以及驱动程序实现,在嵌入式linux平台的基础上,笔者对CS8900A网卡的驱动程序等进行了研究开发,在驱动程序的设计中,系统效能的提升是主要的目标。在嵌入式系统中,影响软件处理(尤其是内核部分)的效能的因素有很多,其中防火墙由于在数据流处理中的关键地位以及每个包都处理的原因,对系统效能的影响尤其大。针对基于iptables架构的Linux防火墙管理程序,本文从三个方面研究优化:组织规则、状态模块以及自定义用户规则链,这些这些优化方式可以尽可能减少数据包的匹配处理,从而使数据包最快速的通过防火墙系统,从而达到防火墙性能的提高进而提高系统效率。通过我们的调试测试及分析,可以证明设计的网卡驱动程序可以正常使用且性能良好,而iptable防火墙在经过优化之后,同样可以比优化之前的方案大幅度提高系统性能。
[Abstract]:With the rapid popularization of communication and information technology, digital and IC design technology in our daily life and work, embedded system design is becoming the mainstream technology in modern information technology. This paper mainly describes the concept, foundation, network structure, design and debugging of network device driver, design and optimization of embedded system firewall based on iptables. Firstly, the embedded linux kernel and driver are studied. Based on the embedded linux platform, the driver of CS8900A network card is researched and developed, and the driver is designed. The improvement of system efficiency is the main goal. In embedded system, there are many factors that affect the performance of software processing (especially the kernel part). The firewall has a great influence on system performance because of its key position in data flow processing and the reason that every packet is processed. For the Linux firewall manager based on iptables architecture, this paper studies optimization from three aspects: organization rule, state module and custom user rule chain. These optimization methods can reduce the matching processing of data packets as much as possible. Thus, the packet can pass through the firewall system as fast as possible, so the performance of firewall can be improved and the efficiency of the system can be improved. Through our debugging, testing and analysis, it can be proved that the network card driver designed can be used normally and has good performance. After optimization, iptable firewall can also improve the system performance significantly compared with the scheme before optimization.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP316.81;TP393.08

【相似文献】