為了解決防火墻對IPv6 協議的兼容及對內部網絡之間安全的保障問題，本文設計實
現了基于Intel Xscale IXP425 處理器的嵌入式IPv6 防火墻。該防火墻可以通過WEB 遠程加以管理，對IPv6 網絡包和IPv4 網絡包均可以進行良好的過濾。防火墻能夠判斷出網絡包的協議類型，分別加以處理，實行動態包過濾，并可以解決IPv6 分片攻擊問題。防火墻硬件系統基于IXP425 處理器，該處理器具有良好的網絡特性，擁有分布式處理架構，并行方式執行其指令流。處理器的高速性保證了嵌入式IPv6 防火墻處理網絡數據包的高效性。防火墻軟件系統基于Linux 的Netfilter 框架，該框架對網絡包的處理體系十分成熟，從而保證了嵌入式IPv6 防火墻運行時的穩定性和準確性。
關鍵字：IPv6,防火墻，IXP425，網絡
Abstract: In order to solve the problem of the firewall's compatibility to IPv6 protocol and the
security among the internal nets, the paper designs and implements the embedded IPv6 firewall based on Intel XScale IXP425 network processor .This firewall can be managed by visting WEB page from remote machine and can filter both Ipv6 packet and IPv4 packet. It can identify the protocol of the net packet and process it in respective ways with the main method of Dynamic Packet Filtering.The firewall also solves the problem of IPv6 fragmentation. The hardware system of the firewall is based on IXP425 network processor with good network characteristic, whose distributed processing framework and parallel implementation of its order flows ensure the embedded IPv6 firewall processes the data packet with high speed. The software system of the firewall is based on the Netfilter framework of the Linux with a sophisticated system to process the network packet .The framework support the embedded IPv6 firewall run with high stability and veracity .
Key word:IPV6,Firewall, IXP425，Network