计算机工程
計算機工程
계산궤공정
COMPUTER ENGINEERING
2014年
9期
106-110
,共5页
多协议标签交换%边界网关协议%标签%自治系统%域%虚拟专用网
多協議標籤交換%邊界網關協議%標籤%自治繫統%域%虛擬專用網
다협의표첨교환%변계망관협의%표첨%자치계통%역%허의전용망
Multiprotocol Label Switching ( MPLS )%Border Gateway Protocol ( BGP )%lable%Autonomous System ( AS)%domain%Virtual Private Network( VPN)
利用多协议标签交换和边界网关协议构建的虚拟专用网( VPN),在跨域平台中存在无法生成标签路径和边界设备负载过重的问题。为此,从标签分配原理和数据转发层面分析产生上述问题的根源,并提出背靠背方案和基于单跳EBGP的方案处理承载标签转发问题,但这些方案无法解决边界设备负载过重问题。进而基于多跳EBGP提出负载分离的VPN解决方案。通过扩展现有协议和修改系统架构,对传统VPN方案进行改进,并针对不同的网络环境给出具体配置方案。为评估方案性能,通过多项指标对比不同的解决方案。分析结果表明,基于负载分离的VPN解决方案能够解决标签问题和负载问题,是实现跨域VPN的有效方案。
利用多協議標籤交換和邊界網關協議構建的虛擬專用網( VPN),在跨域平檯中存在無法生成標籤路徑和邊界設備負載過重的問題。為此,從標籤分配原理和數據轉髮層麵分析產生上述問題的根源,併提齣揹靠揹方案和基于單跳EBGP的方案處理承載標籤轉髮問題,但這些方案無法解決邊界設備負載過重問題。進而基于多跳EBGP提齣負載分離的VPN解決方案。通過擴展現有協議和脩改繫統架構,對傳統VPN方案進行改進,併針對不同的網絡環境給齣具體配置方案。為評估方案性能,通過多項指標對比不同的解決方案。分析結果錶明,基于負載分離的VPN解決方案能夠解決標籤問題和負載問題,是實現跨域VPN的有效方案。
이용다협의표첨교환화변계망관협의구건적허의전용망( VPN),재과역평태중존재무법생성표첨로경화변계설비부재과중적문제。위차,종표첨분배원리화수거전발층면분석산생상술문제적근원,병제출배고배방안화기우단도EBGP적방안처리승재표첨전발문제,단저사방안무법해결변계설비부재과중문제。진이기우다도EBGP제출부재분리적VPN해결방안。통과확전현유협의화수개계통가구,대전통VPN방안진행개진,병침대불동적망락배경급출구체배치방안。위평고방안성능,통과다항지표대비불동적해결방안。분석결과표명,기우부재분리적VPN해결방안능구해결표첨문제화부재문제,시실현과역VPN적유효방안。
When Virtual Private Network ( VPN ) constructed by Multiprotocol Label Switching ( MPLS ) and Border Gateway Protocol( BGP) is used in crossing domain platform,the label path can not be found and boundary devices are overloaded. Aiming at these problems,this paper analyses the fundamental reasons on the basis of label distribution and data forwarding plane. It brings forward two schemes,namely back to back project and single hop scheme based on EBGP to solve the problem of label distribution. However,the problem of overloading remains to be unsolved. Then this paper further proposes load-separation VPN solution based on multi-hop EBGP. In detail,the scheme improves the traditional VPN scheme by extending the existing protocols and modifying the systematic framework and brings forward specific configuration according to different network environment. This paper evaluates the performance of the schemes by comparing the different solutions through many indexes and the results indicate that load-separation VPN scheme is effective in realizing crossing-domain VPN and can solve both label distribution and overloading.