本文選題：虛擬網(wǎng)絡環(huán)境　切入點：自動構建　出處：《哈爾濱工業(yè)大學》2014年碩士論文　論文類型：學位論文

【摘要】：當前互聯(lián)網(wǎng)安全事件頻繁爆發(fā)，互聯(lián)網(wǎng)環(huán)境安全態(tài)勢日趨惡化。研究人員希望得到網(wǎng)絡安全事件真實數(shù)據(jù)進行研究分析，以達到防御目的，改善互聯(lián)網(wǎng)環(huán)境。得到安全事件的真實網(wǎng)絡數(shù)據(jù)需要在真實網(wǎng)絡環(huán)境中對事件進行重現(xiàn)，研究人員對于接近真實網(wǎng)絡環(huán)境的大規(guī)模虛擬網(wǎng)絡環(huán)境的需求變得越來越強烈。 傳統(tǒng)虛擬網(wǎng)絡環(huán)境構建方法只重點關注虛擬網(wǎng)絡環(huán)境中物理資源的虛擬化，并沒有解決自動構建連通虛擬網(wǎng)絡環(huán)境的問題。在得到虛擬化的主機、路由器后，需要手動對虛擬主機與虛擬路由器進行配置，才可最終得到連通的虛擬網(wǎng)絡環(huán)境，自動化程度低，構建效率低。本文提出一種基于軟件路由器的網(wǎng)絡環(huán)境自動構建技術，可根據(jù)真實網(wǎng)絡環(huán)境自動構建連通的虛擬網(wǎng)絡環(huán)境。 本文首先對物理資源虛擬化技術進行了研究，提出利用KVM(Kernel-based Virtual Machine)虛擬化技術和Click軟件路由器得到虛擬網(wǎng)絡環(huán)境中虛擬主機與虛擬路由器。然后提出主機、路由器自動化配置的方法，對主機與路由器進行自動化配置，，從而構建虛擬網(wǎng)絡環(huán)境。 本文通過對Click軟件路由器性能的研究，指出其路由查表組件存在效率低下的缺點，使得Click軟件路由器在大規(guī)模網(wǎng)絡環(huán)境中充當核心路由器時不能保障通信質量的。通過研究傳統(tǒng)查找算法，提出一種Hash與Patricia樹相結合的路由查找算法，并利用此算法對Click路由查找組件進行了重構優(yōu)化，提高了Click軟件的性能。 本文根據(jù)提出的基于軟件路由器的網(wǎng)絡環(huán)境自動構建技術，設計實現(xiàn)了網(wǎng)絡環(huán)境自動構建系統(tǒng)并給出了實驗驗證。實驗結果證明，基于軟件路由器的網(wǎng)絡環(huán)境自動構建技術可自動構建接近真實網(wǎng)絡環(huán)境的連通虛擬網(wǎng)絡環(huán)境，用于網(wǎng)絡安全事件的重現(xiàn)。
[Abstract]:At present, Internet security incidents frequently erupt, and the security situation of the Internet environment deteriorates day by day. Researchers hope to obtain the real data of network security incidents for research and analysis, in order to achieve the purpose of defense. To improve the Internet environment, the real network data of secure events need to be reproduced in the real network environment, and the demand of researchers for large-scale virtual network environment which is close to the real network environment becomes more and more intense. The traditional virtual network environment construction method only focuses on the virtualization of physical resources in virtual network environment, and does not solve the problem of automatically constructing connected virtual network environment. It is necessary to configure the virtual host and the virtual router manually in order to get the connected virtual network environment with low degree of automation and low construction efficiency. This paper presents an automatic construction technology of the network environment based on the software router. The connected virtual network environment can be constructed automatically according to the real network environment. In this paper, the virtualization technology of physical resources is studied, and the virtual host and virtual router in virtual network environment are obtained by using KVM(Kernel-based Virtual Machine virtualization technology and Click software router. The method of automatic configuration of router, the host and router are configured automatically, and the virtual network environment is constructed. Based on the research of the performance of Click software router, this paper points out that the routing lookup component has the disadvantage of low efficiency. The Click software router can not guarantee the communication quality when it acts as the core router in the large-scale network environment. By studying the traditional lookup algorithm, a routing lookup algorithm combining Hash and Patricia tree is proposed. The algorithm is used to optimize the Click routing lookup component and improve the performance of Click software. According to the technology of automatic network environment construction based on software router, this paper designs and implements the automatic network environment construction system and gives the experimental verification. The network environment automatic construction technology based on the software router can automatically construct the connected virtual network environment close to the real network environment, which can be used to reproduce the network security events.
【學位授予單位】：哈爾濱工業(yè)大學
【學位級別】：碩士
【學位授予年份】：2014
【分類號】：TP393.08

【參考文獻】

相關期刊論文 前10條

1 曾德勝;;基于壓縮樹的快速求核算法[J];計算機工程;2011年10期

2 褚福勇;肖儂;蔡志平;陳彬;;虛擬機備份機制研究[J];計算機工程與科學;2009年09期

3 徐明偉;彭艷海;李琦;陳文龍;;高性能虛擬網(wǎng)絡VegaNet[J];中國教育網(wǎng)絡;2010年07期

4 張琦;金胤丞;李苗;章建雄;;Trie樹路由查找算法在網(wǎng)絡處理器中的實現(xiàn)[J];計算機工程;2014年01期

5 周燁;李勇;王芳;楊旭;蘇厲;金德鵬;曾烈光;;基于OpenFlow的網(wǎng)絡實驗平臺技術[J];清華大學學報(自然科學版);2012年11期

6 崔澤永;趙會群;;基于KVM的虛擬化研究及應用[J];計算機技術與發(fā)展;2011年06期

7 桂超;汪波;;基于遺傳算法的最短路徑路由優(yōu)化算法[J];微計算機信息;2005年25期

8 薛海峰;卿斯?jié)h;張煥國;;XEN虛擬機分析[J];系統(tǒng)仿真學報;2007年23期

9 張建輝;汪斌強;陳文平;王蘇南;;SSFNet中距離矢量路由算法的仿真[J];系統(tǒng)仿真學報;2011年06期

10 趙凱輝;劉楚玉;;基于Click系統(tǒng)的IPv4模塊化軟件路由器[J];株洲師范高等�？茖W校學報;2006年05期

本文編號：1623052