“流过滤”技术融合了包过滤和应用代理安全性和优点,克服了包过滤和应用代理的诸多缺陷,代表了一种全新的防火墙技术结构。随着IPv6网络的慢慢普及,对基于流过滤技术的IPv6防火墙设计和分析则是一个新的研究热点。本文首先研究了流过滤技术,然后设计了一种支持流过滤技术的IPv6防火墙系统,并指出了本文防火墙的缺点以及下一步研究的方向。 “Streaming ” technology combines packet filtering with application agent security and benefits, overcoming the pitfalls of packet filtering and application proxies and representing a whole new firewall technology architecture. With the gradual popularization of IPv6 network, the design and analysis of IPv6 firewall based on stream filtering technology is a new research hotspot. This paper first studies the flow filtration technology, then designs an IPv6 firewall system that supports the flow filtration technology, and points out the shortcomings of the firewall in this paper and the direction of further research.