论文部分内容阅读
高性能和安全是计算机网络研究的两个主要问题。路由器在保证转发性能的前提下提供网络安全保护已经成为当前的研究热点。文章介绍了在完成国家“八六三”计划重大课题“高性能安全路由器”的过程中解决的若干关键技术问题。高性能安全路由器BW 70 0 0基于自主设计的高性能路由器操作系统HEROS。为保证高性能的路由转发 ,设计实现了基于RAM的高性能路由查找算法 ;为支持服务质量控制和安全管理 ,设计实现了基于无冲突Hash Trie树的分组分类算法和基于反馈的分布式分组调度算法 ;为保证网络安全 ,提出了基于分布式密钥管理的路由器安全体系结构。
High performance and security are two major issues in computer network research. Routers provide network security protection under the premise of ensuring the forwarding performance has become the current research hotspot. This article introduces some key technical problems that are solved during the completion of the “High-performance Security Router”, a major project of the “863” plan in the country. High Performance Secure Router BW 70 0 HEROS based on self-designed high performance router operating system. In order to ensure high-performance routing and forwarding, a high-performance RAM-based routing lookup algorithm is designed and implemented. To support quality of service control and security management, a packet classification algorithm based on conflict free Hash Trie tree and distributed packet scheduling based on feedback Algorithm. In order to ensure the network security, a router security architecture based on distributed key management is proposed.