使用VRRP技术实现网络冗余保护
|
摘要
现在网络服务的安全性和可靠性变的越来越重要,如果网络中的网关设备出现问题,将会导致网络不能提供正常的服务。本文利用集群技术——虚拟路由冗余协议(Virtual Router Redundancy Protocol,简称VRRP)来实现网关的高可用性,使得在一台网关设备宕机时,另外一个备份网关会及时接管转发工作,不会造成互联网业务中断,提高了网络服务质量。
VRRP协议相对与其他冗余保护协议具有配置简单、部署快速的优点。它可以很好的适应简单的IP网络拓扑。相对于静态路由的冗余保护,它可以自动检查上行链路的状态,避免因上行链路失效而造成的路由转发故障。相对于IGP协议和复杂的数量链路层保护机制,它更简单、更快速,并有一定的负载均衡能力。
本文首先介绍高可用性的基本技术,对常用的数据链路层和网络层冗余保护技术进行了论述,并对它们各自的不足进行了分析。然后详细说明了VRRP协议的工作原理,包括协议中所用到概念的定义、协议运行所需参数的确定、协议运行的内在机制、网关的选举策略和选举实施。在研究VRRP协议同步过程中可能出现的安全性和稳定性问题后,给出了优化该协议的改进方案。
最后,引入了鞍山电信接入某专网用户的工程实例,详细说明了VRRP技术在实际应用中的实现过程,并从工程经济角度简单分析了这种应用在工作实践中的价值。
Nowadays the security and reliability of network service are becoming more and more important. Therefore if any problems about network gateway equipment happened, the network can hardly provide normal service. In this thesis, Author successfully utilizes one of trunk Technique—Virtual Router Redundancy Protocol, which is short for VRRP to achieve the high Availability of network gateway. In this case, when one network gateway equipment delays work, the backup one will take over network gateway service on time. The disruption of business operations will not be caused. Surely, the quality of network services will be improved.
VRRP is equipped with the advantage of simple configuration and fast disposition relative to other Redundancy Protection Protocol. It can well adapt to IP network topology. In Contrast with static-route' s Redundancy Protection, VRRP can automatically examine the state of uplinks, avoiding route forwarding faults which resulting the failure of uplinks. It is much easier and faster than the IGP and other complicated protective mechanism at the data-link-layer, with the ability of loading blance by contrast with .
In this thesis, author firstly introduced basic techniques of High Availability ,Discussing commonly way of redundancy protection techniques at data-link-layer and network-layer, analyzing their deficiency respectively. Then author elaborated on the operational principle of VRRP, including concepts definition, parameter choice, Protocol mechanism , the elective policies of master gateway ,and the implementation of master gateway. After researching the possible problems of security and reliability curing during the synchronous procedures of VRRP, author gives some suggestion for optimizing the Protocol.
At last, author elaborated on The implementation of processes by VRRP in Practice, with a project instance that An Shan Telecom serve with a private network. from the point of engineering economy , simply analyzing the value of this means.
VRRP协议相对与其他冗余保护协议具有配置简单、部署快速的优点。它可以很好的适应简单的IP网络拓扑。相对于静态路由的冗余保护,它可以自动检查上行链路的状态,避免因上行链路失效而造成的路由转发故障。相对于IGP协议和复杂的数量链路层保护机制,它更简单、更快速,并有一定的负载均衡能力。
本文首先介绍高可用性的基本技术,对常用的数据链路层和网络层冗余保护技术进行了论述,并对它们各自的不足进行了分析。然后详细说明了VRRP协议的工作原理,包括协议中所用到概念的定义、协议运行所需参数的确定、协议运行的内在机制、网关的选举策略和选举实施。在研究VRRP协议同步过程中可能出现的安全性和稳定性问题后,给出了优化该协议的改进方案。
最后,引入了鞍山电信接入某专网用户的工程实例,详细说明了VRRP技术在实际应用中的实现过程,并从工程经济角度简单分析了这种应用在工作实践中的价值。
Nowadays the security and reliability of network service are becoming more and more important. Therefore if any problems about network gateway equipment happened, the network can hardly provide normal service. In this thesis, Author successfully utilizes one of trunk Technique—Virtual Router Redundancy Protocol, which is short for VRRP to achieve the high Availability of network gateway. In this case, when one network gateway equipment delays work, the backup one will take over network gateway service on time. The disruption of business operations will not be caused. Surely, the quality of network services will be improved.
VRRP is equipped with the advantage of simple configuration and fast disposition relative to other Redundancy Protection Protocol. It can well adapt to IP network topology. In Contrast with static-route' s Redundancy Protection, VRRP can automatically examine the state of uplinks, avoiding route forwarding faults which resulting the failure of uplinks. It is much easier and faster than the IGP and other complicated protective mechanism at the data-link-layer, with the ability of loading blance by contrast with .
In this thesis, author firstly introduced basic techniques of High Availability ,Discussing commonly way of redundancy protection techniques at data-link-layer and network-layer, analyzing their deficiency respectively. Then author elaborated on the operational principle of VRRP, including concepts definition, parameter choice, Protocol mechanism , the elective policies of master gateway ,and the implementation of master gateway. After researching the possible problems of security and reliability curing during the synchronous procedures of VRRP, author gives some suggestion for optimizing the Protocol.
At last, author elaborated on The implementation of processes by VRRP in Practice, with a project instance that An Shan Telecom serve with a private network. from the point of engineering economy , simply analyzing the value of this means.
引文
[1]Chris Oggerino,High Availability Network Fundamentals,2001.5:2-4
[2]徐拾义,可信计算系统设计和分析,2006.7:3-10
[3]易建勋,计算机网络设计,2007.7:25-33
[4]蒋青,于秀兰,通信原理(第2版),2008.2:46-47
[5]孙学康,毛京丽,SDH技术,2003.6:22-26
[6]G.Bernstein,黄蔚,郭丰,徐敏等译,智能光网络--体系结构、协议和标准,2007.1:72-23
[7]Diane Teare,Designing for Cisco Internetwork Solutions(DESGN),Oct 2007:56-69
[8]曾勃伟,鄢志辉,多层交换网络设计标准教程,2007.2:11-12:101-102
[9]John T.Moy,OSPF:Anatomy of an Internet Routing Protocol,Feb 1998:37-49
[10]陈宇,袁国忠,CCNP学习指南:组建可扩展Cisco互连网络(BSCI),2007.9:77-79
[11]程奕,徐家品,基于OSPF协议的多路径路由研究,信息与电子工程,2007.8
[12]王群,非常网管:网络基础,2006.6
[13]贺平,路由、交换和无线项目实验指导书,2007.12
[14]S.Knight.,Viritual Router Redundaney Protocol(VRRP),RFC 2338,IETF,1998:5-10
[15]R.Hinden.Ed.,"Viritual Router Redundaney Protocol(VRRP)",RFC3768,IETF,2004:17-20
[16]Braden,R.,D.Borman,C.Partridge,"Computing the Internet Cheeksum",RFC1071,September 1988.
[17]Rvest,R.,The MD5 Message-Digest Algorithm,RFC1321,April 1992.
[18]Kent,S and R.Atkinson,IP Authentieation Header,Work in Progress.
[19]叶海智 刘宗尧,VRRP协议在提高校园网络可靠性中的应用,职教论坛,2007.6
[20]任唯 贤胡毅 陈常嘉,VRRP协议在保证网络高可靠性中的应用分析和改进,中国新通信,2006.11
[21](美)多伊尔,(美)卡罗尔 著,葛建立,吴剑章 译,TCP/IP路由技术(第一卷)(第二版),2007.1:202-203
[22]林俐,下一代网络(NGN)组网技术手册,2005.9:3-6
[23]曹蓟光,吴英桦,多业务传送平台(MSTP)技术与应用,2003.11:9-11
[24]Darren L.Spohn,Data Network Design,2002.9:15-23
[25](美)奥谢霍恩(Osborne,E),(美)西姆哈(Simha,A.)著,张辉,卢炜 译,基于MPLS的流量工程,2003.7
[26]S8016交换机用户配置手册,华为技术有限公司,2003年第一版
[27]严华,VRRP技术在校园网中的应用,福建电脑,2007.12
[28]王柱,使用VRRP实现局域网的网络备份和流量分担,学术交流,2007.4
[29]陈魁,应用概率统计,清华大学出版社,2000年3月第一版
[30]Randy Zhang and Micah Bartell,BGP Design and Implementation,2003.12
[2]徐拾义,可信计算系统设计和分析,2006.7:3-10
[3]易建勋,计算机网络设计,2007.7:25-33
[4]蒋青,于秀兰,通信原理(第2版),2008.2:46-47
[5]孙学康,毛京丽,SDH技术,2003.6:22-26
[6]G.Bernstein,黄蔚,郭丰,徐敏等译,智能光网络--体系结构、协议和标准,2007.1:72-23
[7]Diane Teare,Designing for Cisco Internetwork Solutions(DESGN),Oct 2007:56-69
[8]曾勃伟,鄢志辉,多层交换网络设计标准教程,2007.2:11-12:101-102
[9]John T.Moy,OSPF:Anatomy of an Internet Routing Protocol,Feb 1998:37-49
[10]陈宇,袁国忠,CCNP学习指南:组建可扩展Cisco互连网络(BSCI),2007.9:77-79
[11]程奕,徐家品,基于OSPF协议的多路径路由研究,信息与电子工程,2007.8
[12]王群,非常网管:网络基础,2006.6
[13]贺平,路由、交换和无线项目实验指导书,2007.12
[14]S.Knight.,Viritual Router Redundaney Protocol(VRRP),RFC 2338,IETF,1998:5-10
[15]R.Hinden.Ed.,"Viritual Router Redundaney Protocol(VRRP)",RFC3768,IETF,2004:17-20
[16]Braden,R.,D.Borman,C.Partridge,"Computing the Internet Cheeksum",RFC1071,September 1988.
[17]Rvest,R.,The MD5 Message-Digest Algorithm,RFC1321,April 1992.
[18]Kent,S and R.Atkinson,IP Authentieation Header,Work in Progress.
[19]叶海智 刘宗尧,VRRP协议在提高校园网络可靠性中的应用,职教论坛,2007.6
[20]任唯 贤胡毅 陈常嘉,VRRP协议在保证网络高可靠性中的应用分析和改进,中国新通信,2006.11
[21](美)多伊尔,(美)卡罗尔 著,葛建立,吴剑章 译,TCP/IP路由技术(第一卷)(第二版),2007.1:202-203
[22]林俐,下一代网络(NGN)组网技术手册,2005.9:3-6
[23]曹蓟光,吴英桦,多业务传送平台(MSTP)技术与应用,2003.11:9-11
[24]Darren L.Spohn,Data Network Design,2002.9:15-23
[25](美)奥谢霍恩(Osborne,E),(美)西姆哈(Simha,A.)著,张辉,卢炜 译,基于MPLS的流量工程,2003.7
[26]S8016交换机用户配置手册,华为技术有限公司,2003年第一版
[27]严华,VRRP技术在校园网中的应用,福建电脑,2007.12
[28]王柱,使用VRRP实现局域网的网络备份和流量分担,学术交流,2007.4
[29]陈魁,应用概率统计,清华大学出版社,2000年3月第一版
[30]Randy Zhang and Micah Bartell,BGP Design and Implementation,2003.12