在Linux作業系統上研究與實作以政策為基礎的網路資源與安全管理(I)
Other Title
Design and Implementation of the Policy-based Network Resource and Traffic Manager
Date Issued
2003
Date
2003
Author(s)
DOI
912213E002103
Abstract
Current Internet does not provide any kind of QoS
guarantee for the network applications. Therefore, the
network resources could be wasted by some unimportant
applications. On the other hand, the extensive
connectivity of the Internet also provides the malicious
crackers the great environment to distribute the computer
viruses and overload the servers by DDoS attack. In
consequence, how to appropriately manage the network resources to enhance the QoS and to prevent network
attack are the top issues of network researches.
In this project, we propose a novel QoS router
architecture based on Linux. In this router, packets are
classified and treated according to the user-defined
policies. This architecture comprises many components:
policy-based packet classifier, queue manager such as
RED, traffic policer, and the Weighted Fair Queue packet
scheduler with maximum rate control (W2FQ-M). Under
such architecture, many applications could be
implemented, such as: firewall, network security gateway,
QoS router, VPN gateway and network monitor. With
appropriate hardware support, all functions could be
implemented in the same machine. Besides, we will also
develop a network monitoring system to watch all the
packets passing the networks and provide information to
the QoS router to act promptly to some unusual network
conditions. Finally, we will discuss some issues about
porting the system to embedded devices to lower the cost
of total system.
Subjects
Linux
服務品質保證
網路流量管理
封包
分類
分類
封包排程
佇列管理
網路資源管理
網路安
全
全
IPv6
Mobile IP
無線區域網路
嵌入式系統
Publisher
臺北市：國立臺灣大學資訊管理學系暨研究所
Type
other
File(s)![Thumbnail Image]()
Loading...
Name
912213E002103.pdf
Size
110.52 KB
Format
Adobe PDF
Checksum
(MD5):896a904e5701bae62508127a31836236