下一代INTERNET技术特性及在城域型校园网中的应用
摘要
随着校园网规模的扩大、业务负载的不断增加，保持网络高利用率、防止关键任务受到拥塞影响以及各种网络应用和资源的管理安全性变得越来越重要。因此，在校园网的建设中应该充分考虑如何更好地利用下一代INTERNET的技术。本文首先介绍了下一代INTERNET的重要技术特征包括IPv6协议、宽带城域网和IPQoS等等。
随后讨论了高性能校园网的建设。校园网建设应确保网络基础设施配置完备，且可以支持话音、视频及关键任务数据相融合。建设高性能校园网的当前任务是采用下一代INTERNET的几种主要技术：千兆以太网技术、第3层交换技术、IPQoS和IPSEC等。在本文中主要以IPQoS及其应用为研究对象。
为解决QoS问题，IETF提出了综合业务模型(IntServ)、差分业务模型(DiffServ)、多协议标记交换(MPLS)、流量工程和约束路由等模型。在IP网上提供QoS能力的方法各有所长，将他们结合使用，相辅相成可以提供更好的端到端的QoS能力。
由于地址资源即将耗尽等原因，IP层协议逐渐由IPv4向IPv6过渡。IPv4向IPv6的过渡阶段是渐进的过程，解决过渡问题比较成熟的基本技术主要有三种：双协议栈、隧道技术、NAT-PT。它们对IPv6中QoS的影响各不相同。
要具体掌握IPv4到网络IPv6网络的平滑过渡、评估和改进IPv6协议、进行大规模IPv6网络应用，就必须首先建立IPv6实验网来，在实验网上获得足够经验，然后再进行推广。本文提出了一个节省投资的小规模实验网建设方案，并在实验网上进行了相关的应用研究(包括Ipv6、IPOoS等)。
With the expansion of network in campus, with increase of assignment burden, it become more and more important to make plenty use of network, to prevent key errand from congestion. At the same time , a lot of application in network and management of resource become more important. Among establishing campus network ,many technical characters of the next generation INTERNET should be used. High-performance campus network should guarantee basic facility maturity, support voice, video, data of key-errand harmony. The core technology in establishing high-performance campus network consist of technology in 1000M Ethernet network , the third-level exchanges , IPQoS and IPSEC, etc.
To solve QoS problem, IETF propose integrated service model (IntServ) , difference divides the business model (DiffServ) , Muti-protocol marks stream( MPLS) , flow controlled project and restrained routing, etc. Each method offering QoS have their own strong points in IP based network . Combining them and Complementing each other can offer better end-to-end QoS.
The IP is in the transition from IPv4 to IPv6 for the exhausting IP address. The transition will last for a long period. There are three main basic fundamental ways in transition: dual protocol stack, tunnel and NAT-PT. They have their own influence on IP QoS. TO understand the smooth transition from IPv4 to IPv6, to improve IPv6 protocol, to implement IPv6 network application widely , a IPv6 experiment network is necessary to be established.
After gaining enough experience in experiential network , then spread it out . A scheme of small-scale experiential network which cost less is detailed. Ipv6 and IPQoS could be tested on the experiential network.
随后讨论了高性能校园网的建设。校园网建设应确保网络基础设施配置完备，且可以支持话音、视频及关键任务数据相融合。建设高性能校园网的当前任务是采用下一代INTERNET的几种主要技术：千兆以太网技术、第3层交换技术、IPQoS和IPSEC等。在本文中主要以IPQoS及其应用为研究对象。
为解决QoS问题，IETF提出了综合业务模型(IntServ)、差分业务模型(DiffServ)、多协议标记交换(MPLS)、流量工程和约束路由等模型。在IP网上提供QoS能力的方法各有所长，将他们结合使用，相辅相成可以提供更好的端到端的QoS能力。
由于地址资源即将耗尽等原因，IP层协议逐渐由IPv4向IPv6过渡。IPv4向IPv6的过渡阶段是渐进的过程，解决过渡问题比较成熟的基本技术主要有三种：双协议栈、隧道技术、NAT-PT。它们对IPv6中QoS的影响各不相同。
要具体掌握IPv4到网络IPv6网络的平滑过渡、评估和改进IPv6协议、进行大规模IPv6网络应用，就必须首先建立IPv6实验网来，在实验网上获得足够经验，然后再进行推广。本文提出了一个节省投资的小规模实验网建设方案，并在实验网上进行了相关的应用研究(包括Ipv6、IPOoS等)。
With the expansion of network in campus, with increase of assignment burden, it become more and more important to make plenty use of network, to prevent key errand from congestion. At the same time , a lot of application in network and management of resource become more important. Among establishing campus network ,many technical characters of the next generation INTERNET should be used. High-performance campus network should guarantee basic facility maturity, support voice, video, data of key-errand harmony. The core technology in establishing high-performance campus network consist of technology in 1000M Ethernet network , the third-level exchanges , IPQoS and IPSEC, etc.
To solve QoS problem, IETF propose integrated service model (IntServ) , difference divides the business model (DiffServ) , Muti-protocol marks stream( MPLS) , flow controlled project and restrained routing, etc. Each method offering QoS have their own strong points in IP based network . Combining them and Complementing each other can offer better end-to-end QoS.
The IP is in the transition from IPv4 to IPv6 for the exhausting IP address. The transition will last for a long period. There are three main basic fundamental ways in transition: dual protocol stack, tunnel and NAT-PT. They have their own influence on IP QoS. TO understand the smooth transition from IPv4 to IPv6, to improve IPv6 protocol, to implement IPv6 network application widely , a IPv6 experiment network is necessary to be established.
After gaining enough experience in experiential network , then spread it out . A scheme of small-scale experiential network which cost less is detailed. Ipv6 and IPQoS could be tested on the experiential network.
引文
[1] D. McDonald, C. Metz, B. Phan "PF_KEY Key Management API, Version 2" , July 1998 RFC 2367
[2] S. Kent, R. Atkinson, "Security Architecture for the Internet Protocol", November 1998 RFC2401
[3] IP Security Working group, "IPSec Monitoring MIB" , July 10, 2000 Internet Draft
[4] An Architecture for Describing SNMP Management Frameworks, RFC2271
[5] ucd-snmp implementation, available via the WWW as
[6] IP v6-The New Intenet Protocol Christian Huitema
[7] Unix Netwok Programming Networking APIs: SocketSAnd XTI Prentice-Hall International, Inc
[8] Naganand Doraswamy, Dan Harkins, "IPSec: the new security standard for Internet, intranet and virtual private networks", 1999
[9] S.Kent, R.Atkinson, "IP Authentication Header", RFC2402, November 1998
[10] S.Kent, R.Atkinson, "IP Encapsulating Security Payload", RFC2406, November 1998
[11] Casey Wilson Peter D 《Greating and Implementing Virtual private Networks》
[12] R. Gilligan, S. Thomson, J. Bound, W. Stevens, "Basic Socket Interface Extensions for IPv6" , RFC 2553, March 1999
[13] http://www.freeswan.org/freeswan_trees/freeswan-1． 00/doc/index.html
[14] 岑贤道，安常青《网络管理协议及应用开发》清华大学出版社1998． 7
[15] P. Srisuresh, M.Holdrege, IP Network Address Translator (NAT) Terminology and Considerations, RFC 2663, August 1999．
[16] P.Srisuresh, G.Tsirtsis, P.Akkiraju, A.He_ernan, DNS extensions to Network Address Translators (DNS ALG), RFC 2694, September 1999．
[17] E.Nordmark, Stateless IP/ICMP Translation Algorithm (SIIT), RFC2765, February 2000．
[18] G.Tsirtsis, P.Srisuresh, Network Address Translation-Protocol Translation (NAT-PT), RFC2766, February 2000．
[19] K.Tsuchiya, H.Higuchi, Y.Atarashi, Dual Stack Hosts using the Bump-In-the-Stack Technique (BIS), RFC2767, February 2000.
[20] J.Bound, L. Toutain, H Afifi, Dual Stack Transition Mechanism (DSTM), Internet Draft, draft-ietf-ngtrans-dstm-00.txt
[21] Rusty Russell, Linux Kernel Hacking HOWTO v0.0.5, October 1999.
[22] Micheal K. Johnson, Writing Linux Device Drivers, 1995.
[23] Eric Horlai, Linux Networking Hackers' Guide, 1996.
[24] Alessandro Rubini, Linux Device Drivers, O'Reilly.
[25] A.S.Tanenbaum, A.S.Woodhull, Operating System-Design and Implementation
[26] Vipul Gupta, An Introduction to the Linux 1.3.x Networking Code, April 1996.
[27] Michael K.Johnson, The Linux Kernel Hackers' Guide, August 1998.
[28] pragmatic/THC, (nearly) Complete Linux Loadable Kernel Modules v1.0, March 1999.
[29] Ori Pomerantz, Linux Kernel Module Programming Guide v1.1.0, April 1999.
[30] Alan Cox, Network Bu_ers And Memory Management, June 1999.
[31] David A. Rusling, The Linux Kernel v0.8-3, January 1998.
[32] Rusty Russell, Linux Netfilter Hacking HOWTO v0.0.2, January 2000.
[33] Paeal Anelli, Benoit Brodard, Franck Zago, IPv6-DRET Implementation Guide, December 1996.
[34] http://www.6bone.net/
[35] http://playground.sun.com/pub/ipng/html/ipng-main.html
[36] http://www.IPv6.net.edu.cn/
[37] A.S.Tanenbaum, A.S.Woodhull, Operating System-Design and Implementation
[38] 曹功靖，王峰Real流媒体技术及其在远程教学中的应用[J]，计算机应用研究．
[39] 蒋林涛，多媒体通信网[M]．北京．电子工业出版社，1999．
[40] 王小平，VHDL简明教程[M]．清华大学出版社．
[41] 楼伟进，应飚．COM／DCOM／COM+组件技术．计算机应用，2000．
[42] 潘登，侯文水．COM+及其急于属性编程．计算机应用研究，2000．
[2] S. Kent, R. Atkinson, "Security Architecture for the Internet Protocol", November 1998 RFC2401
[3] IP Security Working group, "IPSec Monitoring MIB"
[4] An Architecture for Describing SNMP Management Frameworks, RFC2271
[5] ucd-snmp implementation, available via the WWW as
[6] IP v6-The New Intenet Protocol Christian Huitema
[7] Unix Netwok Programming Networking APIs: SocketSAnd XTI Prentice-Hall International, Inc
[8] Naganand Doraswamy, Dan Harkins, "IPSec: the new security standard for Internet, intranet and virtual private networks", 1999
[9] S.Kent, R.Atkinson, "IP Authentication Header", RFC2402, November 1998
[10] S.Kent, R.Atkinson, "IP Encapsulating Security Payload", RFC2406, November 1998
[11] Casey Wilson Peter D 《Greating and Implementing Virtual private Networks》
[12] R. Gilligan, S. Thomson, J. Bound, W. Stevens, "Basic Socket Interface Extensions for IPv6" , RFC 2553, March 1999
[13] http://www.freeswan.org/freeswan_trees/freeswan-1． 00/doc/index.html
[14] 岑贤道，安常青《网络管理协议及应用开发》清华大学出版社1998． 7
[15] P. Srisuresh, M.Holdrege, IP Network Address Translator (NAT) Terminology and Considerations, RFC 2663, August 1999．
[16] P.Srisuresh, G.Tsirtsis, P.Akkiraju, A.He_ernan, DNS extensions to Network Address Translators (DNS ALG), RFC 2694, September 1999．
[17] E.Nordmark, Stateless IP/ICMP Translation Algorithm (SIIT), RFC2765, February 2000．
[18] G.Tsirtsis, P.Srisuresh, Network Address Translation-Protocol Translation (NAT-PT), RFC2766, February 2000．
[19] K.Tsuchiya, H.Higuchi, Y.Atarashi, Dual Stack Hosts using the Bump-In-the-Stack Technique (BIS), RFC2767, February 2000.
[20] J.Bound, L. Toutain, H Afifi, Dual Stack Transition Mechanism (DSTM), Internet Draft, draft-ietf-ngtrans-dstm-00.txt
[21] Rusty Russell, Linux Kernel Hacking HOWTO v0.0.5, October 1999.
[22] Micheal K. Johnson, Writing Linux Device Drivers, 1995.
[23] Eric Horlai, Linux Networking Hackers' Guide, 1996.
[24] Alessandro Rubini, Linux Device Drivers, O'Reilly.
[25] A.S.Tanenbaum, A.S.Woodhull, Operating System-Design and Implementation
[26] Vipul Gupta, An Introduction to the Linux 1.3.x Networking Code, April 1996.
[27] Michael K.Johnson, The Linux Kernel Hackers' Guide, August 1998.
[28] pragmatic/THC, (nearly) Complete Linux Loadable Kernel Modules v1.0, March 1999.
[29] Ori Pomerantz, Linux Kernel Module Programming Guide v1.1.0, April 1999.
[30] Alan Cox, Network Bu_ers And Memory Management, June 1999.
[31] David A. Rusling, The Linux Kernel v0.8-3, January 1998.
[32] Rusty Russell, Linux Netfilter Hacking HOWTO v0.0.2, January 2000.
[33] Paeal Anelli, Benoit Brodard, Franck Zago, IPv6-DRET Implementation Guide, December 1996.
[34] http://www.6bone.net/
[35] http://playground.sun.com/pub/ipng/html/ipng-main.html
[36] http://www.IPv6.net.edu.cn/
[37] A.S.Tanenbaum, A.S.Woodhull, Operating System-Design and Implementation
[38] 曹功靖，王峰Real流媒体技术及其在远程教学中的应用[J]，计算机应用研究．
[39] 蒋林涛，多媒体通信网[M]．北京．电子工业出版社，1999．
[40] 王小平，VHDL简明教程[M]．清华大学出版社．
[41] 楼伟进，应飚．COM／DCOM／COM+组件技术．计算机应用，2000．
[42] 潘登，侯文水．COM+及其急于属性编程．计算机应用研究，2000．