Network security redirection method and device

Abstract

The invention discloses a network communication security redirection method, comprising the following steps: S1, realizing filtering on process, IP address, port and protocol target data packets in designated network communication by virtue of WFP-driven hierarchical design, and adopting BPF rules for performing pre-filtration treatment to filter out target network data packets; S2, setting capture based on a process, an IP address, a port and a protocol as well as interception, capturing the target network data packets and performing analysis and restoration according to a TCP / IP protocol stack, encapsulating the target network data packets and forwarding; S3, according to a Socks5 proxy protocol, establishing communication with a proxy server; and S4, by virtue of the proxy server and based on the Socks5 proxy protocol, performing redirection proxy forwarding on the target network data packets, and realizing TCP redirection, UDP redirection and remote DNS redirection. The invention also provides a redirection module, comprising a WFP driving module, a TCP / IP protocol decapsulation module and a redirection service module and completing TCP redirection, UDP redirection and remote DNS redirection functions.

Description

technical field [0001] The present invention relates to the field of network redirection, in particular to a method and device for network security redirection. Background technique [0002] Today, the development of the Internet has penetrated into many aspects of personal life and business behavior, such as social networking, cross-border e-commerce, online payment, communication and other applications. These Internet applications have problems such as geographical restrictions, information leakage, and small bandwidth. , So people began to study related network communication technologies to improve the shortcomings based on the traditional Internet, and gradually formed solutions based on virtual private networks, anonymous communication networks and other tunnel proxy networks. These solutions usually consist of three parts: redirection software, dial-up client, and relay server. The dial-up client and relay server mainly provide network communication tunnel construction...

AI Technical Summary

Problems solved by technology

None of these redirection technologies can be used flexibly based on processes, source / destination addresses, global or local agents, and are greatly restricted by the security policies of the operating system itself.

Images