The difference between the traditional user-space gateway and the kernel-space one is that the latter puts the IP packet handling program in the kernel of Linux system, forwards the packets on the network layer in a real way, thus enhancing the gateway performance. 与传统用户空间透明网关相比较有所不同的是,内核空间透明网关是将IP数据包的处理程序放置在内核中,实现了真正意义上的基于网络层转发数据包,提高了透明网关的性能。