Network function toolkit Introduction

(1) iproute2: a series of tools on Linux for TCP/IP network traffic control. Includes the following components:

Ifconfig (ipconfig in Windows)

Route

TC

IP

(2) Netfilter/iptable:
Netfileter --> kernel space: consists of information packet filtering tables that contain the rule set used by the kernel to control information packet filtering.
Iptable --> user space: it makes it easy to insert, modify, and remove rules in the information packet filtering table. : Http://netfilter.org.

By using user space, you can build custom rules that are stored in the information packet filtering table of the kernel space.