【摘要】：以太網(wǎng)光纖通道（FCoE）技術(shù)可以實(shí)現(xiàn)數(shù)據(jù)中心前端網(wǎng)絡(luò)和后端網(wǎng)絡(luò)架構(gòu)的融合，降低數(shù)據(jù)中心的采購(gòu)和擴(kuò)容成本。雖然FCoE技術(shù)在以太網(wǎng)上承載光纖通道協(xié)議帶來(lái)了很大的靈活性，但當(dāng)以太網(wǎng)中存在網(wǎng)橋設(shè)備時(shí)則會(huì)造成光纖通道網(wǎng)絡(luò)原有控制機(jī)制失效，導(dǎo)致異常報(bào)文不可控，進(jìn)而威脅整個(gè)網(wǎng)絡(luò)的安全。目前，國(guó)內(nèi)尚缺乏這方面的學(xué)術(shù)研究，T11組織制定的FC-BB-5標(biāo)準(zhǔn)中對(duì)FCoE網(wǎng)橋特性建議的安全規(guī)則存在冗余，市場(chǎng)上的類似產(chǎn)品也存在部署形式不夠靈活、網(wǎng)絡(luò)震蕩時(shí)性能下降比較嚴(yán)重等問(wèn)題。 針對(duì)上述問(wèn)題，本文設(shè)計(jì)并實(shí)現(xiàn)了FCoE交換機(jī)的FCoE初始化協(xié)議探測(cè)（FIPSnooping）系統(tǒng)。本文設(shè)計(jì)了FCoE交換機(jī)的Transit模式，實(shí)現(xiàn)了該模式下專用的FIP Snooping系統(tǒng)；設(shè)計(jì)了不同接口模式下的FIP Snooping會(huì)話機(jī)制，實(shí)現(xiàn)了對(duì)多種部署形式的支持，解決了非點(diǎn)到點(diǎn)連接的訪問(wèn)控制失效問(wèn)題；設(shè)計(jì)了改進(jìn)的FIP Snooping規(guī)則，實(shí)現(xiàn)了將規(guī)則下發(fā)至驅(qū)動(dòng)程序的規(guī)則下刷功能，解決了報(bào)文的過(guò)濾問(wèn)題并確保報(bào)文轉(zhuǎn)發(fā)的高效性；設(shè)計(jì)了分布式Transit交換機(jī)的數(shù)據(jù)同步機(jī)制，實(shí)現(xiàn)了主控板與其它板卡之間的協(xié)同控制和數(shù)據(jù)同步功能，提供了對(duì)Transit模式下分布式設(shè)備的板插拔和主備倒換等操作的支持，確保了分布式設(shè)備的高可靠性。 測(cè)試結(jié)果表明，該系統(tǒng)能夠過(guò)濾異常報(bào)文、部署形式更為靈活，減小了網(wǎng)絡(luò)震蕩對(duì)性能的不良影響，解決了存在FCoE網(wǎng)橋設(shè)備時(shí)的訪問(wèn)控制失效問(wèn)題，確保了光纖通道網(wǎng)絡(luò)的高安全性和高健壯性，對(duì)集中式和分布式FCoE交換機(jī)支持良好。 由于網(wǎng)絡(luò)中異常報(bào)文的類型不可預(yù)測(cè)，加上偶然因素對(duì)網(wǎng)絡(luò)帶來(lái)的影響，，系統(tǒng)無(wú)法保證過(guò)濾所有異常報(bào)文。進(jìn)一步提高異常報(bào)文的識(shí)別率和支持設(shè)備的堆疊形態(tài)將是接下來(lái)的研究方向。
[Abstract]:Ethernet fiber channel (FCoE) technology can realize the integration of data center front-end network and back-end network architecture, and reduce the cost of purchasing and expanding data center. Although the FCoE technology brings great flexibility to the optical fiber channel protocol on Ethernet, when there is bridge equipment in Ethernet, the original control mechanism of fiber channel network will fail, and the abnormal message will not be controllable. And then threaten the security of the whole network. At present, there is still a lack of academic research on this aspect in our country. In the FC-BB-5 standard developed by T11 organization, there is redundancy in the safety rules recommended by the FCoE bridge characteristics, and the similar products in the market are not flexible enough in deployment form. Network oscillation performance degradation more serious problems. Aiming at the above problems, this paper designs and implements the FCoE initialization protocol detection (FIPSnooping) system of FCoE switch. In this paper, the Transit mode of FCoE switch is designed, the special FIP Snooping system is implemented in this mode, the FIP Snooping session mechanism in different interface mode is designed, and the support for many kinds of deployment forms is realized. The problem of access control failure of non-point-to-point connection is solved, the improved FIP Snooping rule is designed, and the rule brushing function of sending the rule to driver is realized, which solves the problem of message filtering and ensures the high efficiency of message forwarding. This paper designs the data synchronization mechanism of distributed Transit switch, realizes the cooperative control and data synchronization function between the main control board and other boards, and provides the support to the board plug and switch operation of the distributed equipment in the Transit mode. The high reliability of distributed equipment is ensured. The test results show that the system can filter abnormal messages, deploy more flexibly, reduce the adverse effect of network oscillation on performance, and solve the problem of access control failure in the presence of FCoE bridge equipment. It ensures the high security and robustness of the fiber channel network and supports the centralized and distributed FCoE switches well. Because the types of abnormal packets in the network are unpredictable, and the influence of accidental factors on the network, the system can not guarantee the filtering of all abnormal packets. Further improving the recognition rate of abnormal packets and stacking configuration of supporting devices will be the next research direction.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.11;TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前7條

1 ;FCoE Application on Network Service of Geographic Information[J];Semiconductor Photonics and Technology;2008年01期

2 臧景峰,王凌云,楊波;基于光纖通道的SAN網(wǎng)絡(luò)技術(shù)研究[J];長(zhǎng)春理工大學(xué)學(xué)報(bào);2004年04期

3 朱洪斌;程杰;;數(shù)據(jù)中心存儲(chǔ)網(wǎng)絡(luò)架構(gòu)研究[J];電力信息化;2010年12期

4 何鋒;王婧;;光纖通道網(wǎng)絡(luò)與存儲(chǔ)技術(shù)[J];廣西通信技術(shù);2009年03期

5 程逸云;;部署FCoE實(shí)現(xiàn)數(shù)據(jù)中心網(wǎng)絡(luò)融合[J];信息通信;2012年01期

6 郭英鵬;翟麗娜;;數(shù)據(jù)中心網(wǎng)絡(luò)發(fā)展簡(jiǎn)析[J];郵電設(shè)計(jì)技術(shù);2011年08期

7 袁紹龍;;FCoE離主流有多遠(yuǎn)[J];中國(guó)計(jì)算機(jī)用戶;2009年13期

相關(guān)博士學(xué)位論文 前1條

1 童薇;高效光纖存儲(chǔ)通道技術(shù)研究[D];華中科技大學(xué);2011年

本文編號(hào)：2249566