支持QoS的IPSec安全网关的研究与实现

【作者】 周俊；

【导师】 雷航； 刘连昌；

【作者基本信息】 电子科技大学 ， 计算机技术， 2007， 硕士

【摘要】 随着Internet和各种业务的发展,尤其是视频、话音等多媒体业务的迅猛增长,IP网络由以前单一的数据网发展成了多业务的综合信息网。传统的IP网络没有QoS保证的弱点逐渐暴露出来,业界提出了IP QoS的概念,希望在IP网络上能对不同业务提供不同的QoS服务保障。IPSec安全网关是一种用于加/解密的专用设备,由于该设备的出现,导致对网络的QoS服务产生影响。为此,需要IPSec安全网关也同样提供QoS服务保障。本文在对IPSec协议和IP QoS相关技术进行分析后,针对IPSec安全网关和网络QoS之间的影响,从IPSec隧道封装、IPSec加解密处理、IPSec处理时延和抗重放功能四个方面,进行了深入细致的分析,明确了哪些影响与IPSec安全网关的实现相关,从而确定了本课题需要进一步研究的内容。根据课题的项目背景,通过对现有IPSec安全网关的实现进行研究,分析在IPSec安全网关中提供QoS功能的实施点,确定了拥塞避免和队列调度的具体实施位置。综合QoS体系结构、QoS业务分类以及IPSec安全网关处理业务的特点,设计出了支持QoS的IPSec安全网关的体系结构。在上述研究的基础上,完成了分类器、拥塞避免管理和队列调度器的方案设计,并在IPSec安全网关中进行了实现,开发出了支持QoS的IPSec安全网关的功能演示验证的软件版本。通过对QoS功能支持和原有网络性能影响等方面的多项测试,确认QoS-IPSec安全网关实现了对QoS的支持,基本满足设备功能和性能的要求。更多还原

【Abstract】 With the development of Internet and services, especially the rapid development of video, voice and other multi-media service, IP network grows from the single data network to the multi-service information networks. The weakness of traditional IP network that is lack of QoS protection is becoming more obviously. So the researchers propose the conception of QoS to offer different QoS protection to different services. IPSec security gateway is a special equipment for encrypting and decrypting. With the appearance of this equipment, it brings some influence on network QoS. Therefore, it is necessary for IPSec security gateway to offer QoS.After analyzing IPSec protocols and correlative technologies of IP-QoS , the effects between IPSec security gateway and network QoS is analysed in detail,include: IPSec tunnel encapsulation, IPSec encryption and decryption, IPSec processing delay and anti-Dos. According to the analysis, specifies the correlative influence to IPSec security gateway, and defines the subject matter of further research.Based on the background of this task, studied on the realization of the existing IPSec security gateways, analyze the situation for IPSec gateway to provide Qos function and finally locate the point to avoid congestion and provide scheduling. Comprehending with the QoS architecture, the classification of QoS and processing characteristics of IPSec security gateway, and got the architecture of IPSec security gateway providing QoS service.On the foundation of these studies, accomplished the design of classifier, congestion avoidance and scheduling, carried out the design in IPSec security gateway, and excogitated the software demo providing the functions of IPSec security gateway with QoS. After testing QoS functions and network performance, IPSec security gateway can provide QoS and meet the requirements of network equipments.更多还原