發(fā)布時(shí)間：2018-03-17 04:03

  本文選題：虛擬網(wǎng)絡(luò)環(huán)境　切入點(diǎn)：自動(dòng)構(gòu)建　出處：《哈爾濱工業(yè)大學(xué)》2014年碩士論文　論文類型：學(xué)位論文

【摘要】：當(dāng)前互聯(lián)網(wǎng)安全事件頻繁爆發(fā)，互聯(lián)網(wǎng)環(huán)境安全態(tài)勢(shì)日趨惡化。研究人員希望得到網(wǎng)絡(luò)安全事件真實(shí)數(shù)據(jù)進(jìn)行研究分析，以達(dá)到防御目的，改善互聯(lián)網(wǎng)環(huán)境。得到安全事件的真實(shí)網(wǎng)絡(luò)數(shù)據(jù)需要在真實(shí)網(wǎng)絡(luò)環(huán)境中對(duì)事件進(jìn)行重現(xiàn)，研究人員對(duì)于接近真實(shí)網(wǎng)絡(luò)環(huán)境的大規(guī)模虛擬網(wǎng)絡(luò)環(huán)境的需求變得越來(lái)越強(qiáng)烈。 傳統(tǒng)虛擬網(wǎng)絡(luò)環(huán)境構(gòu)建方法只重點(diǎn)關(guān)注虛擬網(wǎng)絡(luò)環(huán)境中物理資源的虛擬化，并沒有解決自動(dòng)構(gòu)建連通虛擬網(wǎng)絡(luò)環(huán)境的問(wèn)題。在得到虛擬化的主機(jī)、路由器后，需要手動(dòng)對(duì)虛擬主機(jī)與虛擬路由器進(jìn)行配置，才可最終得到連通的虛擬網(wǎng)絡(luò)環(huán)境，自動(dòng)化程度低，構(gòu)建效率低。本文提出一種基于軟件路由器的網(wǎng)絡(luò)環(huán)境自動(dòng)構(gòu)建技術(shù)，可根據(jù)真實(shí)網(wǎng)絡(luò)環(huán)境自動(dòng)構(gòu)建連通的虛擬網(wǎng)絡(luò)環(huán)境。 本文首先對(duì)物理資源虛擬化技術(shù)進(jìn)行了研究，提出利用KVM(Kernel-based Virtual Machine)虛擬化技術(shù)和Click軟件路由器得到虛擬網(wǎng)絡(luò)環(huán)境中虛擬主機(jī)與虛擬路由器。然后提出主機(jī)、路由器自動(dòng)化配置的方法，對(duì)主機(jī)與路由器進(jìn)行自動(dòng)化配置，，從而構(gòu)建虛擬網(wǎng)絡(luò)環(huán)境。 本文通過(guò)對(duì)Click軟件路由器性能的研究，指出其路由查表組件存在效率低下的缺點(diǎn)，使得Click軟件路由器在大規(guī)模網(wǎng)絡(luò)環(huán)境中充當(dāng)核心路由器時(shí)不能保障通信質(zhì)量的。通過(guò)研究傳統(tǒng)查找算法，提出一種Hash與Patricia樹相結(jié)合的路由查找算法，并利用此算法對(duì)Click路由查找組件進(jìn)行了重構(gòu)優(yōu)化，提高了Click軟件的性能。 本文根據(jù)提出的基于軟件路由器的網(wǎng)絡(luò)環(huán)境自動(dòng)構(gòu)建技術(shù)，設(shè)計(jì)實(shí)現(xiàn)了網(wǎng)絡(luò)環(huán)境自動(dòng)構(gòu)建系統(tǒng)并給出了實(shí)驗(yàn)驗(yàn)證。實(shí)驗(yàn)結(jié)果證明，基于軟件路由器的網(wǎng)絡(luò)環(huán)境自動(dòng)構(gòu)建技術(shù)可自動(dòng)構(gòu)建接近真實(shí)網(wǎng)絡(luò)環(huán)境的連通虛擬網(wǎng)絡(luò)環(huán)境，用于網(wǎng)絡(luò)安全事件的重現(xiàn)。
[Abstract]:At present, Internet security incidents frequently erupt, and the security situation of the Internet environment deteriorates day by day. Researchers hope to obtain the real data of network security incidents for research and analysis, in order to achieve the purpose of defense. To improve the Internet environment, the real network data of secure events need to be reproduced in the real network environment, and the demand of researchers for large-scale virtual network environment which is close to the real network environment becomes more and more intense. The traditional virtual network environment construction method only focuses on the virtualization of physical resources in virtual network environment, and does not solve the problem of automatically constructing connected virtual network environment. It is necessary to configure the virtual host and the virtual router manually in order to get the connected virtual network environment with low degree of automation and low construction efficiency. This paper presents an automatic construction technology of the network environment based on the software router. The connected virtual network environment can be constructed automatically according to the real network environment. In this paper, the virtualization technology of physical resources is studied, and the virtual host and virtual router in virtual network environment are obtained by using KVM(Kernel-based Virtual Machine virtualization technology and Click software router. The method of automatic configuration of router, the host and router are configured automatically, and the virtual network environment is constructed. Based on the research of the performance of Click software router, this paper points out that the routing lookup component has the disadvantage of low efficiency. The Click software router can not guarantee the communication quality when it acts as the core router in the large-scale network environment. By studying the traditional lookup algorithm, a routing lookup algorithm combining Hash and Patricia tree is proposed. The algorithm is used to optimize the Click routing lookup component and improve the performance of Click software. According to the technology of automatic network environment construction based on software router, this paper designs and implements the automatic network environment construction system and gives the experimental verification. The network environment automatic construction technology based on the software router can automatically construct the connected virtual network environment close to the real network environment, which can be used to reproduce the network security events.
【學(xué)位授予單位】：哈爾濱工業(yè)大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 曾德勝;;基于壓縮樹的快速求核算法[J];計(jì)算機(jī)工程;2011年10期

2 褚福勇;肖儂;蔡志平;陳彬;;虛擬機(jī)備份機(jī)制研究[J];計(jì)算機(jī)工程與科學(xué);2009年09期

3 徐明偉;彭艷海;李琦;陳文龍;;高性能虛擬網(wǎng)絡(luò)VegaNet[J];中國(guó)教育網(wǎng)絡(luò);2010年07期

4 張琦;金胤丞;李苗;章建雄;;Trie樹路由查找算法在網(wǎng)絡(luò)處理器中的實(shí)現(xiàn)[J];計(jì)算機(jī)工程;2014年01期

5 周燁;李勇;王芳;楊旭;蘇厲;金德鵬;曾烈光;;基于OpenFlow的網(wǎng)絡(luò)實(shí)驗(yàn)平臺(tái)技術(shù)[J];清華大學(xué)學(xué)報(bào)(自然科學(xué)版);2012年11期

6 崔澤永;趙會(huì)群;;基于KVM的虛擬化研究及應(yīng)用[J];計(jì)算機(jī)技術(shù)與發(fā)展;2011年06期

7 桂超;汪波;;基于遺傳算法的最短路徑路由優(yōu)化算法[J];微計(jì)算機(jī)信息;2005年25期

8 薛海峰;卿斯?jié)h;張煥國(guó);;XEN虛擬機(jī)分析[J];系統(tǒng)仿真學(xué)報(bào);2007年23期

9 張建輝;汪斌強(qiáng);陳文平;王蘇南;;SSFNet中距離矢量路由算法的仿真[J];系統(tǒng)仿真學(xué)報(bào);2011年06期

10 趙凱輝;劉楚玉;;基于Click系統(tǒng)的IPv4模塊化軟件路由器[J];株洲師范高等專科學(xué)校學(xué)報(bào);2006年05期

本文編號(hào)：1623052