Approach to network traffi c analysis on terminal server computing systems

Vasin Leonid Anatolyevich

The article discusses one of the options for implementing a network traffic control system in terminal systems. Such a system provides access to network packets existing within the terminal system when thin clients are connected to it. This allows analyzing and calculating the network traffic of users working with the terminal system. In addition, this system allows you to organize a system of safe operation on the Internet for such a category of users. The complexity of analyzing user network packets in a traditional terminal system is due to the inability to allocate each user session with an individual network IP address. The purpose of the work is to study the possibility of building a terminal system for collective work in which monitoring and analysis of user network traffic is carried out. A method implemented by such a system based on the use of container isolation technology for user sessions has been proposed. Using a system with such an organization allows each terminal session to be provided with an individual variant that is necessary for the operating system to use. At the same time, a unique network IP address will be allocated, which will make it possible to isolate from the general network traffic a packet with belonging to each terminal session. The article describes in detail the general structural scheme of the organization of the system, shows the order of its operation, examples of network configuration, as well as the rules for processing network traffic. There are various options for optimizing network access from terminal sessions, as well as analyzing network traffic. The proposed organization allows you to provide full analysis and management of network packets. In conclusion, the article presents the main conclusions on the work done.

Keywords:terminal system, data network, operating system network traffic analysis, container, isolation, physical server, work sessions, packet filter, network address