基于网闸的双机热备系统的设计与实现

发布时间：2017-12-31 00:31

本文关键词：基于网闸的双机热备系统的设计与实现　出处：《北京理工大学》2015年硕士论文　论文类型：学位论文

【摘要】：随着互联网的不断普及和广泛使用,越来越多的行业开始向信息化方向发展,企业的开放性日益增强,然而当一切数据都成为信息在网络上存储、传播和处理时,计算机网络面临着越来越复杂的安全威胁。尤其是对一些对安全要求企业,其核心数据不能被泄露,所以要保证其核心网络的相对隔离。网闸作为一种物理隔离交换设备,兼顾有物理隔离和数据交换的功能,非常适用于上面所述场景。然而,鉴于网闸的特点,它往往是不同安全等级网络之间连接的唯一桥梁,担负着整个网络所有数据流量的处理,极易成为瓶颈。一旦网闸形成了单点故障(Single Points of Failures,简称SPOFs),将对系统的可用性影响很大,甚至影响整个系统,而从单点故障中恢复系统往往需要很长的时间,这不仅对很多业务来说是不可忍受的,而且会使企业蒙受损失。此外,由于网闸“单设备双系统”的特性,目前的高可用性方案无法满足这一需求,因此,研究网闸的高可用性方案并具体实现,具有重要的理论和实用价值。本课题首先对一个现有的网闸高可用协议进行了改进,并给出了一个基于网闸的双机热备方案。其次,在研究现有心跳机制的基础上,结合网闸的特点设计了一个适用于本方案的心跳检测模型,该心跳检测模型能够很好的平衡心跳频率、故障检测延迟和误检率之间的矛盾,并广泛适用于基于网闸的双机热备系统。最后,本课题以一个基于网闸的视频会议系统为依托,设计并实现了满足该系统需求的双机热备系统,并进行了系统功能、性能上的测试。经测试,该双机热备系统能够满足母系统的各项需求,为视频会议系统提供高可用性服务,从而提升了基于网闸的视频会议系统在同类产品中的竞争力,并且该系统已经投入使用。
[Abstract]:With the continuous popularization and extensive use of the Internet, more and more industries begin to develop towards the direction of information, and the openness of enterprises is increasing. However, when all data becomes information stored on the network. Computer network is facing more and more complex security threats when it is transmitted and processed. Especially for some enterprises whose core data can not be leaked. Therefore, to ensure the relative isolation of its core network. As a physical isolation switching equipment, the network gate has the functions of physical isolation and data exchange, which is very suitable for the above scenario. However, in view of the characteristics of the network gate. It is often the only bridge between networks of different security levels, and it is responsible for the processing of all the data traffic in the whole network. It is easy to become a bottleneck. Once the single Points of failure is formed in the grid gate, it will have a great impact on the availability of the system. It even affects the entire system, and recovering the system from a single point of failure often takes a long time, which is not only intolerable for many businesses, but also makes the enterprise suffer losses. Because of the characteristic of "single equipment and double system", the current high availability scheme can not meet this demand. Therefore, the high availability scheme of the gate is studied and realized. It has important theoretical and practical value. Firstly, this paper improves an existing high availability protocol of grid gate, and gives a dual-machine hot standby scheme based on grid gate. Secondly. On the basis of studying the existing heartbeat mechanism and combining the characteristics of the gridlock, a heartbeat detection model suitable for this scheme is designed. The heartbeat detection model can balance the heartbeat frequency very well. The contradiction between fault detection delay and false detection rate is widely used in dual-machine hot-standby system based on net-gate. Finally, this topic is based on a video-conferencing system based on net-gate. The design and implementation of a dual-machine hot standby system to meet the requirements of the system, and the system functions, performance tests. After testing, the dual-machine hot standby system can meet the requirements of the parent system. It provides high availability services for video conferencing system, which enhances the competitiveness of video conferencing system based on network gate in similar products, and the system has been put into use.
【学位授予单位】：北京理工大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：TP393.08

【参考文献】