基于内网节点的防火墙穿透方法

摘要

网络防火墙是保护数据安全的有效手段,目前采用最多的是NAT技术,但在特定情况下需要外网无痕穿越防火墙对内网数据进行访问,在这种需求下NAT技术就束手无策.针对上述需求,提出一种新的防火墙穿透技术,采用内网节点主动发起连接的方式连接内外网,实现防火墙或子网的穿透,并在ARM平台上实验验证了该技术的可行性,该方法已经获得了国家知识产权局的发明专利授权.%Network firewall is an effective way to ensure data security. NAT(Network Address Translation) technique is broadly used in firewall for the time being. Sometimes, outside nodes need to access internal data without being tracked. NAT can do nothing in these circumstances. A novel method is proposed by initialize connection from internal network nodes to satisfy the requirement mentioned above. The experiment is verified based on ARM platform. The method is tested to be a success. State Intellectual Property Office of P. R. China has granted patent for this method.