【摘要】：以太網(wǎng)光纖通道（FCoE）技術(shù)可以實(shí)現(xiàn)數(shù)據(jù)中心前端網(wǎng)絡(luò)和后端網(wǎng)絡(luò)架構(gòu)的融合，降低數(shù)據(jù)中心的采購和擴(kuò)容成本。雖然FCoE技術(shù)在以太網(wǎng)上承載光纖通道協(xié)議帶來了很大的靈活性，但當(dāng)以太網(wǎng)中存在網(wǎng)橋設(shè)備時(shí)則會造成光纖通道網(wǎng)絡(luò)原有控制機(jī)制失效，導(dǎo)致異常報(bào)文不可控，進(jìn)而威脅整個(gè)網(wǎng)絡(luò)的安全。目前，國內(nèi)尚缺乏這方面的學(xué)術(shù)研究，T11組織制定的FC-BB-5標(biāo)準(zhǔn)中對FCoE網(wǎng)橋特性建議的安全規(guī)則存在冗余，市場上的類似產(chǎn)品也存在部署形式不夠靈活、網(wǎng)絡(luò)震蕩時(shí)性能下降比較嚴(yán)重等問題。 針對上述問題，本文設(shè)計(jì)并實(shí)現(xiàn)了FCoE交換機(jī)的FCoE初始化協(xié)議探測（FIPSnooping）系統(tǒng)。本文設(shè)計(jì)了FCoE交換機(jī)的Transit模式，實(shí)現(xiàn)了該模式下專用的FIP Snooping系統(tǒng)；設(shè)計(jì)了不同接口模式下的FIP Snooping會話機(jī)制，實(shí)現(xiàn)了對多種部署形式的支持，解決了非點(diǎn)到點(diǎn)連接的訪問控制失效問題；設(shè)計(jì)了改進(jìn)的FIP Snooping規(guī)則，實(shí)現(xiàn)了將規(guī)則下發(fā)至驅(qū)動程序的規(guī)則下刷功能，解決了報(bào)文的過濾問題并確保報(bào)文轉(zhuǎn)發(fā)的高效性；設(shè)計(jì)了分布式Transit交換機(jī)的數(shù)據(jù)同步機(jī)制，實(shí)現(xiàn)了主控板與其它板卡之間的協(xié)同控制和數(shù)據(jù)同步功能，提供了對Transit模式下分布式設(shè)備的板插拔和主備倒換等操作的支持，確保了分布式設(shè)備的高可靠性。 測試結(jié)果表明，該系統(tǒng)能夠過濾異常報(bào)文、部署形式更為靈活，減小了網(wǎng)絡(luò)震蕩對性能的不良影響，解決了存在FCoE網(wǎng)橋設(shè)備時(shí)的訪問控制失效問題，確保了光纖通道網(wǎng)絡(luò)的高安全性和高健壯性，對集中式和分布式FCoE交換機(jī)支持良好。 由于網(wǎng)絡(luò)中異常報(bào)文的類型不可預(yù)測，加上偶然因素對網(wǎng)絡(luò)帶來的影響，，系統(tǒng)無法保證過濾所有異常報(bào)文。進(jìn)一步提高異常報(bào)文的識別率和支持設(shè)備的堆疊形態(tài)將是接下來的研究方向。
[Abstract]:Ethernet fiber channel (FCoE) technology can realize the integration of data center front-end network and back-end network architecture, and reduce the cost of purchasing and expanding data center. Although the FCoE technology brings great flexibility to the optical fiber channel protocol on Ethernet, when there is bridge equipment in Ethernet, the original control mechanism of fiber channel network will fail, and the abnormal message will not be controllable. And then threaten the security of the whole network. At present, there is still a lack of academic research on this aspect in our country. In the FC-BB-5 standard developed by T11 organization, there is redundancy in the safety rules recommended by the FCoE bridge characteristics, and the similar products in the market are not flexible enough in deployment form. Network oscillation performance degradation more serious problems. Aiming at the above problems, this paper designs and implements the FCoE initialization protocol detection (FIPSnooping) system of FCoE switch. In this paper, the Transit mode of FCoE switch is designed, the special FIP Snooping system is implemented in this mode, the FIP Snooping session mechanism in different interface mode is designed, and the support for many kinds of deployment forms is realized. The problem of access control failure of non-point-to-point connection is solved, the improved FIP Snooping rule is designed, and the rule brushing function of sending the rule to driver is realized, which solves the problem of message filtering and ensures the high efficiency of message forwarding. This paper designs the data synchronization mechanism of distributed Transit switch, realizes the cooperative control and data synchronization function between the main control board and other boards, and provides the support to the board plug and switch operation of the distributed equipment in the Transit mode. The high reliability of distributed equipment is ensured. The test results show that the system can filter abnormal messages, deploy more flexibly, reduce the adverse effect of network oscillation on performance, and solve the problem of access control failure in the presence of FCoE bridge equipment. It ensures the high security and robustness of the fiber channel network and supports the centralized and distributed FCoE switches well. Because the types of abnormal packets in the network are unpredictable, and the influence of accidental factors on the network, the system can not guarantee the filtering of all abnormal packets. Further improving the recognition rate of abnormal packets and stacking configuration of supporting devices will be the next research direction.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.11;TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前7條

1 ;FCoE Application on Network Service of Geographic Information[J];Semiconductor Photonics and Technology;2008年01期

2 臧景峰,王凌云,楊波;基于光纖通道的SAN網(wǎng)絡(luò)技術(shù)研究[J];長春理工大學(xué)學(xué)報(bào);2004年04期

3 朱洪斌;程杰;;數(shù)據(jù)中心存儲網(wǎng)絡(luò)架構(gòu)研究[J];電力信息化;2010年12期

4 何鋒;王婧;;光纖通道網(wǎng)絡(luò)與存儲技術(shù)[J];廣西通信技術(shù);2009年03期

5 程逸云;;部署FCoE實(shí)現(xiàn)數(shù)據(jù)中心網(wǎng)絡(luò)融合[J];信息通信;2012年01期

6 郭英鵬;翟麗娜;;數(shù)據(jù)中心網(wǎng)絡(luò)發(fā)展簡析[J];郵電設(shè)計(jì)技術(shù);2011年08期

7 袁紹龍;;FCoE離主流有多遠(yuǎn)[J];中國計(jì)算機(jī)用戶;2009年13期

相關(guān)博士學(xué)位論文 前1條

1 童薇;高效光纖存儲通道技術(shù)研究[D];華中科技大學(xué);2011年

本文編號：2249566