|Get news?||2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999 1998 1997 About Contact||Want to help?|
9th International Linux System Technology Conference
September 4-6, 2002 in Cologne, Germany
|Home Events Program Abstracts Tutorials BoFs Fees Exhibition Location Accommodations Keysigning Party Sponsors Supporters Reports and Photos Papers and Slides Call for Papers|
|Title||The Future of Linux Packet Filtering|
Postscript: lk2002-welte.ps (869872 Bytes)
The Linux 2.4.x provided a complete rewrite of the firewalling subsystem, called netfilter/iptables. It was a major improvement about the previous ipchains subsystem. The major advantages are it's modularity and flexibility.
However, as wity any project, as soon as you are sort-of finished, you become aware of potential improvements and extensions.
The firewalling subsystem within the Linux kernel will undergo some fundamental design changes during the 2.5.x development kernel series.
Some of the changes from 2.4.x which are currently being developed:
Optionally, the netfilter core team is planning to have support for connection tracking state replication - something necessarry for failover of stateful firewalls.
The talk assumes prior knowledge about the netfilter/iptables architecture.
|About the Author||
Harald Welte is one of the five netfilter core team members, and the current Linux 2.4.x firewalling maintainer.
His main interest in computing has always been networking. In the few time left besides netfilter/iptables related work, he's writing obscure documents like the UUCP over SSL HOWTO. Other kernel-related projects he has been contributing to are user mode linux and the international (crypto) kernel patch.
In the past he has been working as an independent IT Consultant working on closed-source projects for various companies ranging from banks to manufacturers of networking gear. During the year 2001 he was living in Curitiba (Brazil), where he got sponsored for his Linux related work by Conectiva Inc.
Starting with February 2002, Harald has been contracted part-time by Astaro AG, who are sponsoring him for parts of his current netfilter/iptables work.
Harald is living in Erlangen, Germany.
|Comments or Questions? Mail to email@example.com||Last change: 2005-09-17|