基于用户空间IO框架的1wIP协议的移植

发布时间：2018-01-25 00:54

本文关键词： uio 网卡驱动 lwIP 安全　出处：《兰州大学》2013年硕士论文　论文类型：学位论文

【摘要】：在安全关键领域,由于应用和Linux内核网络协议栈之间没有任何隔离措施,所以当应用依赖于整个Linux内核网络协议栈时,必须对整个Linux内核网络协议栈进行验证。此外,网络子系统是Linux内核的最大组件之一,它的复杂性使得验证工作非常困难,甚至不可能完成。但是实践中往往仅仅需要数据发送和接收这样的简单操作,而没有必要对Linux整个内核协议栈进行验证。为了在满足需求的同时绕过整个Linux内核协议栈,本文基于Linux的UIO框架在用户空间设计和实现了一个网卡驱动,并在用户空间网卡驱动之上移植了一个轻量级的TCP/IP协议栈IwIP。这样做能极大地简化安全认证工作。同时,用户空间网卡驱动还有很多其他优点。比如,用户空间网卡驱动的错误不会使得整个系统崩溃,并且其开发和维护又比内核空间的网卡驱动程序简单方便。经过对用户空间网卡驱动的各项性能的测试发现,用户空间网卡驱动程序的性能比原生的内核空间网卡驱动略差。用户空间网卡驱动程序性能略差的原因是用户空间网卡驱动程序引入了额外的中断传递延迟和上下文切换开销。但是用户空间网卡驱动程序仍能够满足需求。
[Abstract]:In the security critical area, because there is no isolation between the application and the Linux kernel network protocol stack, when the application depends on the whole Linux kernel network protocol stack. The entire Linux kernel network protocol stack must be verified. In addition, the network subsystem is one of the largest components of the Linux kernel, and its complexity makes verification very difficult. It is not even possible, but in practice it is only necessary to send and receive the data, and it is not necessary to verify the whole Linux kernel stack. In order to meet the requirements and bypass the whole Linux kernel protocol stack, this paper designs and implements a network card driver in user space based on the UIO framework of Linux. And a lightweight TCP/IP protocol stack IwIP is transplanted on the driver of user space network card. This can greatly simplify the work of security authentication. At the same time. User space Nic driver has many other advantages. For example, the error of user space Nic driver will not crash the whole system, and its development and maintenance is simpler and easier than kernel Nic driver. After testing the performance of the user space Nic driver, it is found that. The performance of the user space network card driver is slightly worse than that of the native kernel space network card driver. The reason for the lower performance of the user space network card driver is that the user space network card driver introduces additional interrupt delivery delays and the. The following switching overhead. But user-space Nic driver can still meet the requirements.
【学位授予单位】：兰州大学
【学位级别】：硕士
【学位授予年份】：2013
【分类号】：TP316.81;TP334.7

【共引文献】