智能域名解析系统在校内资源访问中的应用
发布时间：2018-07-13 19:11
【摘要】：随着高校网络的蓬勃发展，许多高校都拥有自己的校园网。为了使教育网资源得到大规模的应用和国家政策的导向，许多高校把教育网作为校园网必不可少的出口，并且校内的门户网站全部使用教育网的真实地址。但是教育网（CERNET）与其他网络运营商（ISP）：Chinatelecom（中国电信）、Chinaunicom（中国联通）、Chinamobile（中国移动）之间的互联带宽非常有限，从而导致校园网用户访问公网时速度非常慢。为了使这样的问题得到缓解，许多高校都接入了多条网络运营商的链路，在多链路接入以后，校园网用户发现访问公网的速度有了明显提高，但是公网用户访问校园网门户网站服务器的速度依然非常缓慢。这是由于国内多个ISP之间在互访上存在较大延时，致使不同网络用户访问非本ISP内的资源时速度非常慢。各高校建设的大量优质数字资源基本上都是基于教育网的，CERNET中的用户一般都能够很畅通地访问这些资源,但非CERNET用户却只能通过有着带宽瓶颈的教育链路才能访问到校园网的资源。如何解决非教育网用户访问校内教育网资源的速度问题，成为多链路出口校园网中急需解决的一个问题。 网络安全在互联网中的重要性越来越显著。网络安全指的是信息系统中硬件、软件和数据受到保护，避免遭到破坏、泄露，系统连续、可靠、正常地运行，，网络服务不被中断。网络安全包括服务器系统安全和网络系统安全两个部分。一、服务器系统安全：操作系统是计算机资源的管理者，它直接和硬件打交道并且为用户提供接口，是计算机软件的心脏，在操作系统的基础上建立数据库管理系统。如果操作系统安全[3]得不到保证，存取控制的安全根本就不可能得到保证。对于网络环境来说，网络的安全首先依赖于网络中主机的安全，如果操作系统安全得不到保证，那根本就谈不上网络系统安全，所以操作系统安全是整个网络安全的基础。 各个高校除了教育网的公网IP地址比较充足之外，其他几个运营商的公网IP地址都非常短缺，江苏科技大学电信公网地址只有120多个，联通公网地址只有32个，移动则只有16个，在如此实际情况下，如何来实现校园网内网80余台服务器的地址映射成为必须要考虑的问题，在本篇论文中将采用反向代理的方法来解决此问题。 本文所做的主要工作主要是：一、了解DNS作为Internet上的核心基础服务，是用户畅游互联网的前提和保障，其配置的质量直接影响到网络用户的直接感知。二、通过配置Linux系统自带的view和squid软件，实现了对用户源地址的判断和反向代理技术，从而实现智能DNS的最终功能，在提高非教育网用户访问校内资源速度的同时节约了公网IP地址不够用的实际困难。三、针对目前网络层面和系统层面的安全隐患，提出了通过配置Linux系统自带的防火墙和了解Linux系统其他方面的安全隐患，从而来提高智能DNS系统自身的稳定性和可靠性，并且对iptable防火墙进行了认真的配置。四、有效的将Bind9视图技术、反向代理技术、Linux系统安全保障技术、地址映射技术综合到一台物理服务器上，利用目前服务器硬件的高性能特点，从而达到了利用软件的方式来实现非教育网用户快速、稳定、可靠的访问校内资源的目的。
[Abstract]:With the rapid development of network in colleges and universities , many colleges have their own campus network . In order to make the education network resources get large - scale application and national policy guidance , many colleges and universities are very slow to access the public network . However , many colleges and universities have access to the links of many network operators . However , many colleges and universities have access to the resources of the campus network . However , the users of non - CERNET can only access the resources of the campus network through the education link with bandwidth bottleneck .
Network security refers to the protection of hardware , software and data in the information system . Network security refers to the protection of hardware , software and data in the information system . The network security includes two parts : security of server system and network system . Network security includes server system security and network system security . Network security includes server system security and network system security .
The public network IP address of several other operators is very short except the public network IP address of the education network , the public network address of Jiangsu University of Science and Technology is only 120 , the public network address of Unicom is only 32 , the mobile is only 16 , in this practical situation , how to realize the address mapping of more than 80 servers in the campus network becomes a problem which must be considered . In this paper , the reverse proxy method will be used to solve this problem .
The main work done in this paper is : 1 . Understanding DNS as the core basic service on the Internet , it is the precondition and guarantee for the user to visit the Internet . The quality of the configuration directly affects the direct perception of the network users .
【学位授予单位】：江苏科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.18
本文编号：2120462
[Abstract]:With the rapid development of network in colleges and universities , many colleges have their own campus network . In order to make the education network resources get large - scale application and national policy guidance , many colleges and universities are very slow to access the public network . However , many colleges and universities have access to the links of many network operators . However , many colleges and universities have access to the resources of the campus network . However , the users of non - CERNET can only access the resources of the campus network through the education link with bandwidth bottleneck .
Network security refers to the protection of hardware , software and data in the information system . Network security refers to the protection of hardware , software and data in the information system . The network security includes two parts : security of server system and network system . Network security includes server system security and network system security . Network security includes server system security and network system security .
The public network IP address of several other operators is very short except the public network IP address of the education network , the public network address of Jiangsu University of Science and Technology is only 120 , the public network address of Unicom is only 32 , the mobile is only 16 , in this practical situation , how to realize the address mapping of more than 80 servers in the campus network becomes a problem which must be considered . In this paper , the reverse proxy method will be used to solve this problem .
The main work done in this paper is : 1 . Understanding DNS as the core basic service on the Internet , it is the precondition and guarantee for the user to visit the Internet . The quality of the configuration directly affects the direct perception of the network users .
【学位授予单位】：江苏科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.18
【参考文献】
相关期刊论文 前10条
1 高新成;;校园网多出口访问控制技术研究[J];长江大学学报(自然科学版)理工卷;2010年02期
2 刘璨;;巧用防火墙和路由器优化校园网访问速度[J];东莞理工学院学报;2011年01期
3 王金恒;;使用BIND实现双出口的校园网DNS优化[J];电脑编程技巧与维护;2009年10期
4 张慰;;DNS链路负载均衡在双链路校园网中的应用[J];电脑知识与技术;2009年21期
5 郭静;林琳;肖诚;;DNS服务在多出口校园网中的应用[J];电脑知识与技术;2011年02期
6 吴海涛;郭丽红;;DNS协议分析与安全检测[J];计算机安全;2009年04期
7 沈忠诚;;校园网中智能DNS的设计与实现[J];福建电脑;2010年09期
8 路晓雷;曹伟东;张霞;;DNS技术在网络链路控制中的应用[J];国外电子元器件;2008年05期
9 边永涛;;智能DNS策略解析在校园网中的应用[J];计算机与信息技术;2008年09期
10 沈达峰;;提高多出口网络对外服务速度的应用研究[J];淮阴工学院学报;2010年01期
本文编号：2120462
本文链接：https://www.wllwen.com/guanlilunwen/ydhl/2120462.html
