基于软件路由器的网络环境自动构建技术研究

发布时间：2018-03-17 04:03

本文选题：虚拟网络环境　切入点：自动构建　出处：《哈尔滨工业大学》2014年硕士论文　论文类型：学位论文

【摘要】：当前互联网安全事件频繁爆发，互联网环境安全态势日趋恶化。研究人员希望得到网络安全事件真实数据进行研究分析，以达到防御目的，改善互联网环境。得到安全事件的真实网络数据需要在真实网络环境中对事件进行重现，研究人员对于接近真实网络环境的大规模虚拟网络环境的需求变得越来越强烈。传统虚拟网络环境构建方法只重点关注虚拟网络环境中物理资源的虚拟化，并没有解决自动构建连通虚拟网络环境的问题。在得到虚拟化的主机、路由器后，需要手动对虚拟主机与虚拟路由器进行配置，才可最终得到连通的虚拟网络环境，自动化程度低，构建效率低。本文提出一种基于软件路由器的网络环境自动构建技术，可根据真实网络环境自动构建连通的虚拟网络环境。本文首先对物理资源虚拟化技术进行了研究，提出利用KVM(Kernel-based Virtual Machine)虚拟化技术和Click软件路由器得到虚拟网络环境中虚拟主机与虚拟路由器。然后提出主机、路由器自动化配置的方法，对主机与路由器进行自动化配置，，从而构建虚拟网络环境。本文通过对Click软件路由器性能的研究，指出其路由查表组件存在效率低下的缺点，使得Click软件路由器在大规模网络环境中充当核心路由器时不能保障通信质量的。通过研究传统查找算法，提出一种Hash与Patricia树相结合的路由查找算法，并利用此算法对Click路由查找组件进行了重构优化，提高了Click软件的性能。本文根据提出的基于软件路由器的网络环境自动构建技术，设计实现了网络环境自动构建系统并给出了实验验证。实验结果证明，基于软件路由器的网络环境自动构建技术可自动构建接近真实网络环境的连通虚拟网络环境，用于网络安全事件的重现。
[Abstract]:At present, Internet security incidents frequently erupt, and the security situation of the Internet environment deteriorates day by day. Researchers hope to obtain the real data of network security incidents for research and analysis, in order to achieve the purpose of defense. To improve the Internet environment, the real network data of secure events need to be reproduced in the real network environment, and the demand of researchers for large-scale virtual network environment which is close to the real network environment becomes more and more intense. The traditional virtual network environment construction method only focuses on the virtualization of physical resources in virtual network environment, and does not solve the problem of automatically constructing connected virtual network environment. It is necessary to configure the virtual host and the virtual router manually in order to get the connected virtual network environment with low degree of automation and low construction efficiency. This paper presents an automatic construction technology of the network environment based on the software router. The connected virtual network environment can be constructed automatically according to the real network environment. In this paper, the virtualization technology of physical resources is studied, and the virtual host and virtual router in virtual network environment are obtained by using KVM(Kernel-based Virtual Machine virtualization technology and Click software router. The method of automatic configuration of router, the host and router are configured automatically, and the virtual network environment is constructed. Based on the research of the performance of Click software router, this paper points out that the routing lookup component has the disadvantage of low efficiency. The Click software router can not guarantee the communication quality when it acts as the core router in the large-scale network environment. By studying the traditional lookup algorithm, a routing lookup algorithm combining Hash and Patricia tree is proposed. The algorithm is used to optimize the Click routing lookup component and improve the performance of Click software. According to the technology of automatic network environment construction based on software router, this paper designs and implements the automatic network environment construction system and gives the experimental verification. The network environment automatic construction technology based on the software router can automatically construct the connected virtual network environment close to the real network environment, which can be used to reproduce the network security events.
【学位授予单位】：哈尔滨工业大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】