Design and implementation of an embedded router with packet filtering

This paper proposes an embedded router solution with packet filtering, to enhance the security of local area networks, prevent possible attacks, control the traffic of each host, and at the same time cut down the costs. Iptables over Linux is used for packet filtering, which can be controlled remotely using the web interface, while FPGA is used to provide Ethernet switch and multiple Ethernet interfaces. Experiments indicate that the proposed embedded router is able to prevent possible attacks from the WAN, and restrict the behavior of the LAN uses. Further works are being done to further reduce the cost for family use, implement more packet filtering rules, support more network interfaces, improve user experience, and at the same time meet the requirements of hosting enterprises and cloud computing centers.