一种基于iSCSI的对象存储安全系统的设计与实现  

Design and Implementation of iSCSI-based Object Storage Security System

作　　者：黄建忠[1] 谢长生[1] 朱光喜[2] 吴伟[1] 

机构地区：[1]华中科技大学数据存储教育部重点实验室,武汉430074 [2]华中科技大学电子与信息工程系,武汉430074

出　　处：《计算机科学》2007年第4期69-73,共5页Computer Science

基　　金：国家"973"重大基础研究项目(2004CB318203);国家自然科学基金(60603074)资助

摘　　要：随着应用的高速发展,性能高、安全性强的IP存储正成为网络存储领域的研究热点。本文针对这种情况,在OSD命令集的基础上,设计了一种基于iSCSI协议的专用对象存储安全系统(iSCSI-based Object Storage Security System,iOBS3)。借助iSCSI的块数据通道和OSD内置的安全策略,使得iOBS3同时具备块I/O的高速传输带宽和对象I/O的访问控制能力;通过在IP层加入IPSec协议,提高了iOBS3的传输安全性;在发起端和目标端同时采用零拷贝TCP机制,大幅度地提高了iOBS3的I/O带宽。实验结果显示,相对iSCSI,iOBS3在保证安全性的同时,具有更高的传输速度。With the rapid development of application, IP storage of high performance and strong security has become the research hotspot of networked storage. Aiming at the above issue, an iSCSI-based object storage security system （short for iOBS3） is designed according to the OSD commands. Firstly, incurring to the block I/O channel of iSCSI and the security method within OSD, iOBS3 can provide high-speed bandwidth of block I/O channel and access control capability of object I/O. Secondly, iOBS3 can enhance its transfer security by adopting IPSec protocol at IP protocol layer. Thirdly, iOBS3 greatly improves the I/O speed using zero-copy TCP both at initiator and target. The experimental result shows that lOBS3 can achieve higher throughput comparing with iSCSI, and insuring storage security at the same time.

关 键 词：存储安全性 对象存储 ISCSI 零拷贝TCP 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]