集成SNMP和LDAP一体的IPv6流媒体应用网络管理平台设计与实现
摘要
随着计算机网络应用的广泛深入,Internet中网络应用的种类越来越丰富,各种新型的网络业务,如语音、图像、视频业务以前所未有的速度快速发展,包括传统的广播电视节目已经在互联网上实现用户点播的功能。同时IPv6以其固有的优势将替代IPv4成为下一代网络的发展趋势。在新的网络环境下,用户对网络提供服务的可靠性和网络运行管理提出了更高的要求。因此,基于IPv6网络如何对网络中的视频点播等应用以及网络状况进行有效地管理,为用户提供更安全可靠的服务已经成为网络服务的需要解决的关键问题之一。为解决上述问题,本文提出了集成SNMP和LDAP一体的IPv6流媒体应用网络管理方案,旨在通过该方案对IPv6环境中流媒体应用以及网络的使用进行有效地管理。
为了保证网络服务的可靠性以及管理的高效性,文中针对目前使用最为广泛的网络管理协议SNMP以及目录访问协议LDAP进行了研究与分析,通过结合两者的优点,实现一种新型的网络管理系统的模型,把SNMP得到的网络信息保存在LDAP服务器的后台数据库中,利用LDAP协议的易读取的操作特性可以有效的减少网络管理的轮询次数以及根据历史性数据可以对整个应用的性能进行合理化的评估,并提出改进方案。文中就整个系统的模型设计、系统工作流程做了详细描述,并对系统的关键部件的设计细节做了详细阐述。通过使用开源软件项目以及脚本语言进行系统开发与测试,实现了集成SNMP和LDAP一体的IPv6流媒体应用网络管理平台。
最后,通过对该设计方案的实现,达到了IPv6网络环境下的流媒体应用实施有效网络管理的目的,并保证网络应用的服务质量与安全性。充分说明该系统可以发挥出两种协议的优势,同时也为以后类似的网络应用管理平台打下了一个良好的基础。
As the development of computer network, the various applications and the new services in the Internet, including audio, graphics and videos, are developed by a very fast speed. For example the classical broadcast television programs have been implemented as a video-on-demand technology. At the same time, the next generate Internet protocol IPv6 with lots of advantages are becoming the direction of current network structure instead of IPv4. Users require more reliability and robust for the network management in the new network environment. Based on IPv6, how to support the more secure and reliable services like VOD is one of the key problems in the network Quality of Service (QoS). For giving a good solution for the problems above, this paper describes a new way for network management based on IPv6. The aim is to develop a method for managing the stream-media applications and network usage in the IPv6 network efficiently.
This paper studies and analyzes the most popular protocols SNMP (Simple Network Management Protocol) and LDAP (Light-weight Directory Access Protocol) for making sure the reliability and robust for network services. Combining the advantages of two protocols can design a new model of network management system that saves the data from SNMP into the LDAP backend, evaluates the performance of the whole system efficiently and figures out a good improvement at last. The paper presents the whole system structure model, data processing steps and important modules design of the system in detail. The network management platform combined with SNMP and LDAP protocols is developed and tested by open-source software projects and script tools.
At the end, the platform in this paper can take charge of the network stream-media applications based on IPv6 efficiently and make sure the QoS and security. The combination of the two protocols has the advantages from echo other. At the same time the method could give an example for the applications management in the future.
为了保证网络服务的可靠性以及管理的高效性,文中针对目前使用最为广泛的网络管理协议SNMP以及目录访问协议LDAP进行了研究与分析,通过结合两者的优点,实现一种新型的网络管理系统的模型,把SNMP得到的网络信息保存在LDAP服务器的后台数据库中,利用LDAP协议的易读取的操作特性可以有效的减少网络管理的轮询次数以及根据历史性数据可以对整个应用的性能进行合理化的评估,并提出改进方案。文中就整个系统的模型设计、系统工作流程做了详细描述,并对系统的关键部件的设计细节做了详细阐述。通过使用开源软件项目以及脚本语言进行系统开发与测试,实现了集成SNMP和LDAP一体的IPv6流媒体应用网络管理平台。
最后,通过对该设计方案的实现,达到了IPv6网络环境下的流媒体应用实施有效网络管理的目的,并保证网络应用的服务质量与安全性。充分说明该系统可以发挥出两种协议的优势,同时也为以后类似的网络应用管理平台打下了一个良好的基础。
As the development of computer network, the various applications and the new services in the Internet, including audio, graphics and videos, are developed by a very fast speed. For example the classical broadcast television programs have been implemented as a video-on-demand technology. At the same time, the next generate Internet protocol IPv6 with lots of advantages are becoming the direction of current network structure instead of IPv4. Users require more reliability and robust for the network management in the new network environment. Based on IPv6, how to support the more secure and reliable services like VOD is one of the key problems in the network Quality of Service (QoS). For giving a good solution for the problems above, this paper describes a new way for network management based on IPv6. The aim is to develop a method for managing the stream-media applications and network usage in the IPv6 network efficiently.
This paper studies and analyzes the most popular protocols SNMP (Simple Network Management Protocol) and LDAP (Light-weight Directory Access Protocol) for making sure the reliability and robust for network services. Combining the advantages of two protocols can design a new model of network management system that saves the data from SNMP into the LDAP backend, evaluates the performance of the whole system efficiently and figures out a good improvement at last. The paper presents the whole system structure model, data processing steps and important modules design of the system in detail. The network management platform combined with SNMP and LDAP protocols is developed and tested by open-source software projects and script tools.
At the end, the platform in this paper can take charge of the network stream-media applications based on IPv6 efficiently and make sure the QoS and security. The combination of the two protocols has the advantages from echo other. At the same time the method could give an example for the applications management in the future.
引文
[1]IETF, RFC 2460, Internet Protocol Version 6 (IPv6) Specification, Deering S., Hinden R., 1998
[2]许永明,谢质文,欧阳春,IPTV-技术与应用实践,北京:电子工业出版社,2006,9~11
[3]IETF, RFC 2212, Specification of Guaranteed Quality of Service, Shenker S., Partridge C., Guerin R., 1997
[4]Banerjee Suman, Bhattacharjee Bobby, Kommareddy Christopher, Scalable Application Layer Multicast, ACM SIGCOMM Computer Communication Review, 2002, 32(4): 205~217
[5]IETF, RFC 1157, A Simple Network Management Protocol (SNMP), Case J., Fedor M., Schoffstall M., 1990
[6]IETF, RFC 1189, The Common Management Information Services and Protocols for the Internet (CMOT and CMIP), Warrier U., Besaw L., LaBarre L., 1990
[7]IEEE, 802.1B, IEEE STANDARDS FOR LOCAL AND METROPOLITAN AREA NETWORKS, 1992, 18~19
[8]IETF, RFC 1028, Simple Gateway Monitoring Protocol, Davin J., Case J., Fedor M., 1987
[9]IETF, RFC 3377, Lightweight Directory Access Protocol (v3): Technical Specification, Hodges J., Morgan R., 2002
[10]IETF, RFC 1309, Technical Overview of Directory Services Using the X.500 Protocol, Weider C., Reynolds J., Heker S., 1992
[11]张军,颜凯,轻度目录访问协议的分析,计算机应用,1999,19(10):1~4
[12]罗军舟,TCP/IP 协议及网络编程技术,北京:清华大学出版社,2006,147~148
[13]IETF, RFC 1213, Management Information Base for Network Management of TCP/IP-based internets:MIB-II, McCloghrie K., Rose M., 1991
[14]IETF, RFC 1757, Remote Network Monitoring Management Information Base, Waldbusser S., 1995
[15]IETF, RFC 2571, An Architecture for Describing SNMP Management Frameworks, Wijnen B., Harrington D., Presuhn R., 1999
[16]IETF, RFC 2578, Structure of Management Information Version 2 (SMIv2), McCloghrie K., Perkins D., Schoenwaelder J., 1999
[17]IETF, RFC 3727, ASN.1 Module Definition for the LDAP and X.500 Component Matching Rules, Legg S., 2004
[18]魏凌,王玉,SNMP 中 ASN.1 的基本编码规则,RADIO COMMUNICATIONS TECHNOLOGY,2003,29(6),56~58
[19]OPENLDAP, OpenLDAP Software 2.3 Administrator's Guide, OpenLDAP Software 2.3 Administrator's Guide[CP/OL], http://www.openldap.org, 2006
[20]Novell, Novell eDirectory[CP/OL], http://www.novell.com, 2006
[21]Microsoft, Windows Server 2003 Active Directory[CP/OL], http://www.microsoft.com, 2006
[22]任剑勇,肖侬,基于目录服务技术的应用开发,计算机应用研究,2001,18(5),143~145
[23]IETF, RFC 2252, Lightweight Directory Access Protocol (v3): Attribute Syntax Definitions, Wahl M., Coulbeck A., Howes T., 1997
[24]IETF, RFC 2830, Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security, Hodges J., Morgan R., Wahl M., 2000
[25]OpenSSL, OpenSSL Documents and source code[CP/OL], http://www.openssl.org, 1998
[26]Nash Andrew,Duane William,Joseph Celia,公共基础设施(PKI)实现和管理电子安全(张玉清,陈建奇,杨波等译),北京:清华大学出版社,2002,5~6
[27]Hein M., Griffiths D.,简单网络管理协议的理论与实践:SNMP(邢国光译),北京:国防工业出版社,1999,58~359
[28]Mauro Douglas, Schmidt Kevin, Essential SNMP[M], America: O'Reilly, 2001, 54~55
[29]秦小康,Ipv6 网络的可管理性研究及基于 Linux 的网络管理系统实现:[硕士学位论文],吉林,吉林大学,2003
[30]喻嘉,基于 IPv6 的网络安全体系策略管理模型研究及系统的设计和实现:[硕士学位论文],沈阳,东北大学,2005
[31]周纳,沈勇,李增智,LDAP 与 SNMP 网络管理协议的集成,计算机应用研究,2002,19(11),138~140
[32]陈颖,基于 IPv4 和 IPv6 的分布式网络管理的研究和实现:[硕士学位论文],北京,北京邮电大学,2004
[33]Carter Gerald,LDAP System Administration,America:O'Reilly,2003,10~15
[34]Han Junghee, Watson David, Jahanian Farnam, Topology Aware Overlay Networks[C], In:IEEE INFOCOM, 2005
[35]NET-SNMP, NET-SNMP Documents[CP/OL], http://www.net-snmp.org, 2006
[36]IETF, RFC 1229, Extensions to the generic-interface MIB, McCloghrie Keith, 1991
[37] 胡 亚 军 , 关 于 ucd-snmp 软 件 包 [EB/OL] ,http://www.china-pub.com/computers/emook/1100/info.htm,2001
[38]Adventnet, AdventNet SNMP Utilities 4[CP/OL], http://www.adventnet.com, 2005
[39]贾树刚,IPv6 环境下 SNMP v3 Manager 的设计与实现:[硕士学位论文],北京,北京邮电大学,2000
[40]NET-SNMP, Net-SNMP Tutorial -- MIB Module -- Set Processing[CP/OL], http://www.net-snmp.org/tutorial/tutorial-5/toolkit/mib_module/index.html, 2004
[41]Uugdave, Wurley, phpLDAPadmin source code[CP/OL], http://sourceforge.net/projects/phpldapadmin/, 2002
[42]Howes A. Timothy, Smith C. Mark, Good S. Gordon, Understanding and Deploying LDAP Directory Services, America:New Riders Publishing, 1998, 129~150
[43]IETF, RFC 2849, The LDAP Data Interchange Format (LDIF) - Technical Specification, Good G., 2000
[44]Schenk Thomas, Red Hat LinuxSystem Administration, America :Sams/Macmillan/Pearson, 2001, 727~729
[45]Tansley David, Linux and Unix Shell Programming, America:Addison Wesley, 2000, 84~103
[46]Findlay Andrew, LDAP Schema Design, America:Skills 1st Ltd, 2005, 20~21
[2]许永明,谢质文,欧阳春,IPTV-技术与应用实践,北京:电子工业出版社,2006,9~11
[3]IETF, RFC 2212, Specification of Guaranteed Quality of Service, Shenker S., Partridge C., Guerin R., 1997
[4]Banerjee Suman, Bhattacharjee Bobby, Kommareddy Christopher, Scalable Application Layer Multicast, ACM SIGCOMM Computer Communication Review, 2002, 32(4): 205~217
[5]IETF, RFC 1157, A Simple Network Management Protocol (SNMP), Case J., Fedor M., Schoffstall M., 1990
[6]IETF, RFC 1189, The Common Management Information Services and Protocols for the Internet (CMOT and CMIP), Warrier U., Besaw L., LaBarre L., 1990
[7]IEEE, 802.1B, IEEE STANDARDS FOR LOCAL AND METROPOLITAN AREA NETWORKS, 1992, 18~19
[8]IETF, RFC 1028, Simple Gateway Monitoring Protocol, Davin J., Case J., Fedor M., 1987
[9]IETF, RFC 3377, Lightweight Directory Access Protocol (v3): Technical Specification, Hodges J., Morgan R., 2002
[10]IETF, RFC 1309, Technical Overview of Directory Services Using the X.500 Protocol, Weider C., Reynolds J., Heker S., 1992
[11]张军,颜凯,轻度目录访问协议的分析,计算机应用,1999,19(10):1~4
[12]罗军舟,TCP/IP 协议及网络编程技术,北京:清华大学出版社,2006,147~148
[13]IETF, RFC 1213, Management Information Base for Network Management of TCP/IP-based internets:MIB-II, McCloghrie K., Rose M., 1991
[14]IETF, RFC 1757, Remote Network Monitoring Management Information Base, Waldbusser S., 1995
[15]IETF, RFC 2571, An Architecture for Describing SNMP Management Frameworks, Wijnen B., Harrington D., Presuhn R., 1999
[16]IETF, RFC 2578, Structure of Management Information Version 2 (SMIv2), McCloghrie K., Perkins D., Schoenwaelder J., 1999
[17]IETF, RFC 3727, ASN.1 Module Definition for the LDAP and X.500 Component Matching Rules, Legg S., 2004
[18]魏凌,王玉,SNMP 中 ASN.1 的基本编码规则,RADIO COMMUNICATIONS TECHNOLOGY,2003,29(6),56~58
[19]OPENLDAP, OpenLDAP Software 2.3 Administrator's Guide, OpenLDAP Software 2.3 Administrator's Guide[CP/OL], http://www.openldap.org, 2006
[20]Novell, Novell eDirectory[CP/OL], http://www.novell.com, 2006
[21]Microsoft, Windows Server 2003 Active Directory[CP/OL], http://www.microsoft.com, 2006
[22]任剑勇,肖侬,基于目录服务技术的应用开发,计算机应用研究,2001,18(5),143~145
[23]IETF, RFC 2252, Lightweight Directory Access Protocol (v3): Attribute Syntax Definitions, Wahl M., Coulbeck A., Howes T., 1997
[24]IETF, RFC 2830, Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security, Hodges J., Morgan R., Wahl M., 2000
[25]OpenSSL, OpenSSL Documents and source code[CP/OL], http://www.openssl.org, 1998
[26]Nash Andrew,Duane William,Joseph Celia,公共基础设施(PKI)实现和管理电子安全(张玉清,陈建奇,杨波等译),北京:清华大学出版社,2002,5~6
[27]Hein M., Griffiths D.,简单网络管理协议的理论与实践:SNMP(邢国光译),北京:国防工业出版社,1999,58~359
[28]Mauro Douglas, Schmidt Kevin, Essential SNMP[M], America: O'Reilly, 2001, 54~55
[29]秦小康,Ipv6 网络的可管理性研究及基于 Linux 的网络管理系统实现:[硕士学位论文],吉林,吉林大学,2003
[30]喻嘉,基于 IPv6 的网络安全体系策略管理模型研究及系统的设计和实现:[硕士学位论文],沈阳,东北大学,2005
[31]周纳,沈勇,李增智,LDAP 与 SNMP 网络管理协议的集成,计算机应用研究,2002,19(11),138~140
[32]陈颖,基于 IPv4 和 IPv6 的分布式网络管理的研究和实现:[硕士学位论文],北京,北京邮电大学,2004
[33]Carter Gerald,LDAP System Administration,America:O'Reilly,2003,10~15
[34]Han Junghee, Watson David, Jahanian Farnam, Topology Aware Overlay Networks[C], In:IEEE INFOCOM, 2005
[35]NET-SNMP, NET-SNMP Documents[CP/OL], http://www.net-snmp.org, 2006
[36]IETF, RFC 1229, Extensions to the generic-interface MIB, McCloghrie Keith, 1991
[37] 胡 亚 军 , 关 于 ucd-snmp 软 件 包 [EB/OL] ,http://www.china-pub.com/computers/emook/1100/info.htm,2001
[38]Adventnet, AdventNet SNMP Utilities 4[CP/OL], http://www.adventnet.com, 2005
[39]贾树刚,IPv6 环境下 SNMP v3 Manager 的设计与实现:[硕士学位论文],北京,北京邮电大学,2000
[40]NET-SNMP, Net-SNMP Tutorial -- MIB Module -- Set Processing[CP/OL], http://www.net-snmp.org/tutorial/tutorial-5/toolkit/mib_module/index.html, 2004
[41]Uugdave, Wurley, phpLDAPadmin source code[CP/OL], http://sourceforge.net/projects/phpldapadmin/, 2002
[42]Howes A. Timothy, Smith C. Mark, Good S. Gordon, Understanding and Deploying LDAP Directory Services, America:New Riders Publishing, 1998, 129~150
[43]IETF, RFC 2849, The LDAP Data Interchange Format (LDIF) - Technical Specification, Good G., 2000
[44]Schenk Thomas, Red Hat LinuxSystem Administration, America :Sams/Macmillan/Pearson, 2001, 727~729
[45]Tansley David, Linux and Unix Shell Programming, America:Addison Wesley, 2000, 84~103
[46]Findlay Andrew, LDAP Schema Design, America:Skills 1st Ltd, 2005, 20~21