【摘要】：隨著全球經(jīng)濟一體化的逐步深入,企業(yè)分支愈發(fā)龐大,各企業(yè)間合作也越來越緊密,所以在公網(wǎng)對企業(yè)內(nèi)部的數(shù)據(jù)進行訪問頻率日益加強。而在這一過程中,對于企業(yè)內(nèi)部隱私數(shù)據(jù)的保護尤為重要,現(xiàn)在大部分企業(yè)都采用.VPN的形式保證信息的安全,但是移動互聯(lián)網(wǎng)時代即將到來,移動辦公的數(shù)據(jù)量將激增。傳統(tǒng)的VPN中,所有的通信數(shù)據(jù)都是基于網(wǎng)關(guān)服務(wù)器轉(zhuǎn)發(fā)的方式完成,面對日益擴大的數(shù)據(jù)量,網(wǎng)關(guān)勢必成為瓶頸。 本文在研究P2P網(wǎng)絡(luò)模型的基礎(chǔ)上,將分布式的網(wǎng)絡(luò)架構(gòu)引入VPN中,一改由單一網(wǎng)關(guān)服務(wù)器轉(zhuǎn)發(fā)的模式,使網(wǎng)絡(luò)中的各個節(jié)點都可在安全的環(huán)境下進行點對點的通信。同時,由于當(dāng)前的絕大部分P2P應(yīng)用都是在應(yīng)用層實現(xiàn)了Peer-to-Peer的網(wǎng)絡(luò),而且協(xié)議只針對自身的業(yè)務(wù),因此,多重的P2P網(wǎng)絡(luò)帶來了巨大的開銷,浪費了用戶終端的硬件及帶寬等資源。 本文在研究VPN技術(shù)、P2P網(wǎng)絡(luò)模型和關(guān)鍵技術(shù)的基礎(chǔ)上,詳細設(shè)計了一種基于P2P網(wǎng)絡(luò)模型的VPN,通過P2P技術(shù)搭建一個通用的Peer-to-Peer的網(wǎng)絡(luò),通過虛擬網(wǎng)卡的方式在每個節(jié)點為上層應(yīng)用提供松耦合的接口,當(dāng)前的P2P應(yīng)用不必再花費資源去實現(xiàn)網(wǎng)絡(luò)的互通,只需針對自身業(yè)務(wù)做好應(yīng)用層的服務(wù),將業(yè)務(wù)數(shù)據(jù)通過虛擬網(wǎng)卡交由P2P網(wǎng)絡(luò)進行傳送,輔以本文中VPN提供的網(wǎng)絡(luò)的管理、監(jiān)控功能,創(chuàng)建一個P2P應(yīng)用的安全生的態(tài)系統(tǒng),減小了多重網(wǎng)絡(luò)的額外開銷。 本文在上述研究的基礎(chǔ)上,詳細描述了基于P2P技術(shù)的VPN的設(shè)計過程,并對其關(guān)鍵點進行了詳細分析及實現(xiàn),隨后搭建了實際測試環(huán)境,針對網(wǎng)絡(luò)中的主要性能指標(biāo)時延和帶寬進行了測試,通過結(jié)果對本文提出的VPN進行了分析,給出了基本的結(jié)論。
[Abstract]:With the deepening of global economic integration, the branches of enterprises are becoming more and more large, and the cooperation among enterprises is becoming closer and closer. Therefore, the frequency of accessing the internal data of enterprises in the public network is increasing day by day. In this process, the protection of privacy data is particularly important. Now most enterprises use the form of .VPN to ensure the security of information, but the era of mobile Internet is coming, and the amount of mobile office data will surge. In the traditional VPN, all the communication data is based on the way of gateway server forwarding. In the face of the increasing amount of data, the gateway is bound to become the bottleneck. Based on the research of P2P network model, this paper introduces the distributed network architecture into VPN, and changes the mode of forwarding by single gateway server so that each node in the network can communicate point-to-point in a secure environment. At the same time, because most of the current P2P applications implement the Peer-to-Peer network in the application layer, and the protocol is only aimed at its own business, the multi-layer P2P network brings huge overhead and wastes the hardware and bandwidth of the user terminal. Based on the research of P2P network model and key technologies of VPN technology, a VPN, based on P2P network model is designed in detail to build a general Peer-to-Peer network through P2P technology. Through the virtual network card to provide loosely coupled interface for the upper application in each node, the current P2P application does not need to spend resources to realize the interworking of the network, but only need to do well the service of the application layer for its own business. The service data is transferred to the P2P network through the virtual network card, and with the network management and monitoring function provided by VPN in this paper, a secure state system of P2P application is created, which reduces the extra cost of the multiplex network. On the basis of the above research, the design process of VPN based on P2P technology is described in detail, and the key points are analyzed and implemented in detail. The delay and bandwidth of the main performance indicators in the network are tested, and the VPN proposed in this paper is analyzed through the results, and the basic conclusions are given.
【學(xué)位授予單位】：北京郵電大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.02

【參考文獻】

相關(guān)期刊論文 前10條

1 侯錫柱,馬躍,陳立南;H.323協(xié)議跨越NAT網(wǎng)關(guān)的研究[J];北京郵電大學(xué)學(xué)報;2005年02期

2 陳全;鄧倩妮;;云計算及其關(guān)鍵技術(shù)[J];計算機應(yīng)用;2009年09期

3 倪劍虹,呂光宏;基于VPN的不同實現(xiàn)方式的技術(shù)研究[J];計算機應(yīng)用研究;2005年07期

4 吳大剛,肖榮榮;C/S結(jié)構(gòu)與B/S結(jié)構(gòu)的信息系統(tǒng)比較分析[J];情報科學(xué);2003年03期

5 張潔;朱麗娟;;DES加密算法分析與實現(xiàn)[J];軟件導(dǎo)刊;2007年03期

6 彭英慧;劉海豐;;基于PKCS#12證書身份認證系統(tǒng)的實現(xiàn)[J];計算機工程與設(shè)計;2009年08期

7 劉傳領(lǐng);范建華;;RSA非對稱加密算法在數(shù)字簽名中的應(yīng)用研究[J];通信技術(shù);2009年03期

8 楊萬云;張繼棠;;NAT原理以及在VxWorks上的實現(xiàn)[J];中國新通信;2007年01期

9 孫知信;駱冰清;陳亞當(dāng);卜凱;;一種基于多維DHT空間映射的P2P安全拓撲方案[J];中國科學(xué)(信息科學(xué));2013年03期

10 李寶蓮;路瑜亮;;基于SQL Server應(yīng)用的大數(shù)據(jù)量實時處理[J];無線電工程;2007年03期

相關(guān)博士學(xué)位論文 前1條

1 何倩;P2P系統(tǒng)性能優(yōu)化若干關(guān)鍵技術(shù)研究[D];北京郵電大學(xué);2010年

，

本文編號：2233263