A proxy server and proxy method thereof

Abstract

The invention discloses a proxy server and a proxy method thereof, wherein the method comprises: the proxy server receives a request data packet sent by a client to an Internet server, and extracts the source IP address, destination IP address, and source MAC address of the request data packet , destination MAC address; the proxy server converts the destination IP address of the request packet into the virtual IP address of the proxy server, converts the destination MAC address of the request packet into the MAC address of the proxy server, and analyzes the converted request packet Process and generate the first intermediate data packet; respectively restore the source IP address and source MAC address of the first intermediate data packet to the source IP address and source MAC address extracted from the request data packet, and restore the first intermediate data packet The packet is sent to the Internet server. By adopting the invention, the proxy server realizes transparent proxy at the link layer and the network layer.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a proxy server and a proxy method thereof. Background technique [0002] With the development of Internet technology, people obtain more information from the Internet. However, due to some security risks in shared network resources, if a user visits a website, the website will return virus information when returning data, which will cause users to Internet access is not safe; or in the enterprise LAN, it is necessary to control the websites that each client can access, you need to go online through a proxy, that is, use a proxy server. The proxy server receives the client's request, analyzes and processes the request to determine whether to obtain relevant information from the Internet server, and analyzes the data returned by the Internet server to determine whether to return it to the client. In the existing transparent proxy method of the proxy server, when the ...

AI Technical Summary

Problems solved by technology

In the existing transparent proxy method of the proxy server, when the proxy server communicates with the client, the proxy server obtains the network layer and information above the network layer of the data packet sent by the client (mainly obtains IP address and port information) , restore the information on the network layer and above the network layer when communicating with the external network, so that the Internet and the client cannot detect the existence of the proxy server in the network layer and above protocols; but when analyzing the link layer, the proxy server is in When forwarding a request to the Internet, it is necessary to know the MAC address of the next node route, and when the proxy server forwards the reply data of the Internet to the client, it needs to know the MAC address of the client or switch on the same network segment; in the current proxy server implementation scheme, this Part of the information (MAC address) is maintained by the operating system of the proxy server, and the operating system maintains this part of information, it needs to configure a routing policy and configure an IP address on the same network segment as the client or switch; in the 26-bit mask Or in an environment with a mask of more than 26 bits, intranet IP resources are tight. As a post-deployment proxy server, if you need to use IP alone, the deployment cost will increase or even make the solution impossible to implement; and the configuration of the router depends on the customer's topology. In the case of multiple lines, the configuration cost will increase or the line selection will be incorrect.

Images