本文選題：下一代互聯(lián)網(wǎng) + 門戶網(wǎng)站　； 參考：《北京工業(yè)大學(xué)》2015年碩士論文

【摘要】：隨著云計算、物聯(lián)網(wǎng)和移動互聯(lián)網(wǎng)等技術(shù)和應(yīng)用的發(fā)展,傳統(tǒng)IPv4地址已經(jīng)枯竭,具有海量地址空間的IPv6重要性日益凸顯,IPv6將成為全球下一代互聯(lián)網(wǎng)的紐帶。這樣,當(dāng)前基于IPv4技術(shù)的軟硬件能否適合IPv6的技術(shù)要求,如何使基于IPv6的商業(yè)應(yīng)用大規(guī)模推廣也是擺在我們面前的重要問題。為了對現(xiàn)有軟硬件產(chǎn)品對IPv6網(wǎng)絡(luò)的適應(yīng)程度進行實踐研究,為IPv6技術(shù)的大規(guī)模商用積累經(jīng)驗,在國家發(fā)改委和中國下一代互聯(lián)網(wǎng)示范工程(CNGI)專家委員會的支持下,我們實施了“面向下一代互聯(lián)網(wǎng)的科技部門戶網(wǎng)站升級改造方案的設(shè)計與實現(xiàn)”項目,在盡量利舊、優(yōu)化的前提下,設(shè)計了針對傳統(tǒng)IPv4網(wǎng)絡(luò)主流軟硬件產(chǎn)品的改造方案,完成了科技部門戶網(wǎng)站的IPv6升級改造工作。文章分析了IPv6技術(shù)特點和IPv4到IPv6遷移技術(shù),研究了科技部現(xiàn)有網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)和科技部門戶網(wǎng)站的軟硬件基礎(chǔ)情況,研究了網(wǎng)站應(yīng)用系統(tǒng)升級改造、網(wǎng)絡(luò)改造、安全防護等方面工作的技術(shù)路線及部署實施方案,實現(xiàn)了科技部門戶網(wǎng)站在IPv6環(huán)境下的順暢訪問。其中,應(yīng)用系統(tǒng)升級改造部分著重以公眾問答模塊的升級改版為例,說明對門戶網(wǎng)站應(yīng)用系統(tǒng)升級改造工作,本部分內(nèi)容展示了對具體應(yīng)用模塊改造需求的實施應(yīng)用能力;網(wǎng)絡(luò)改造部分提出了接入網(wǎng)絡(luò)的三種改造方案和網(wǎng)絡(luò)核心層接入的解決方案,三種接入網(wǎng)絡(luò)的改造方案主要側(cè)重于接入交換機和負(fù)載均衡設(shè)備的部署方法,結(jié)合科技部網(wǎng)絡(luò)實際,為優(yōu)先保障原有網(wǎng)站保持暢通運行,提出適合的方案,本部分的工作展示了對網(wǎng)絡(luò)結(jié)構(gòu)頂層構(gòu)建設(shè)計和動手實施的能力;安全防護部分討論了IPv6出口安全、安全審計、應(yīng)用安全、數(shù)據(jù)交換安全以及運維管理的功能點,本部分的工作展示了對網(wǎng)絡(luò)安全工作的全面把控能力和對成熟產(chǎn)品的熟悉程度。通過項目的實施,實現(xiàn)了科技部門戶網(wǎng)站在IPv6環(huán)境下的順暢訪問,形成了一套行之有效的大型商用門戶網(wǎng)站升級改造方案樣本,通過對在實施過程中遇到的問題所進行分析研究,形成了詳細(xì)的操作規(guī)程,為下一代互聯(lián)網(wǎng)規(guī)模商業(yè)應(yīng)用提供了示范借鑒作用。
[Abstract]:With the development of cloud computing, Internet of things and mobile Internet, traditional IPv4 addresses have dried up, and the importance of IPv6 with massive address space is becoming more and more important. Therefore, whether the hardware and software based on IPv4 technology can meet the technical requirements of IPv6, and how to make large-scale commercial application based on IPv6 is also an important problem in front of us. In order to study the adaptability of the existing software and hardware products to the IPv6 network and accumulate experience for large-scale commercial use of IPv6 technology, with the support of the National Development and Reform Commission and the expert Committee of China's next Generation Internet demonstration Project, We have implemented the project of "Design and implementation of upgrading and upgrading Program of Ministry of Science and Technology Portal for the next Generation Internet". On the premise of making the best use of the old and optimizing, we have designed a transformation scheme for the mainstream software and hardware products of the traditional IPv4 network. Completed the Ministry of Science and Technology Portal IPv6 upgrade work. This paper analyzes the characteristics of IPv6 technology and the migration technology from IPv4 to IPv6, studies the existing network topology structure of the Ministry of Science and Technology and the hardware and software base of the portal website of the Ministry of Science and Technology, and studies the upgrading and upgrading of the website application system and the transformation of the network. The technical route and deployment scheme of security protection and so on have realized the smooth access to the portal of Ministry of Science and Technology under the IPv6 environment. Among them, the application system upgrade part focuses on the public question and answer module upgrade revision as an example to explain the portal website application system upgrade and transformation work, this part of the content shows the specific application module transformation requirements of the implementation of the application; In the part of network transformation, three kinds of transformation schemes of access network and solutions of network core layer access are put forward. The three kinds of transformation schemes of access network mainly focus on the deployment methods of access switch and load balancing equipment. Combined with the network reality of the Ministry of Science and Technology, in order to ensure the smooth operation of the original website, this part of the work shows the ability to design and implement the top layer of the network structure. The security protection part discusses the function points of IPv6 export security, security audit, application security, data exchange security and operation and maintenance management. The work of this part shows the comprehensive control ability of network security work and familiarity with mature products. Through the implementation of the project, the smooth access to the website of the Ministry of Science and Technology in the IPv6 environment has been realized, and a set of effective samples of upgrading and upgrading the large-scale commercial portal website has been formed. Through the analysis and study of the problems encountered in the process of implementation, the detailed operation rules have been formed, which provide a model for the next generation Internet scale commercial application.
【學(xué)位授予單位】：北京工業(yè)大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2015
【分類號】：TP393.092
，

本文編號：1920983