高效鲁棒的高速网络并发连接管理方案  

Efficient and Robust Simultaneous Connection Management in High-speed Networks

作　　者：熊兵[1,2] 赵锦元[3] 廖年冬[1] 陈晓苏[2] 

机构地区：[1]长沙理工大学计算机与通信工程学院,长沙410004 [2]华中科技大学计算机科学与技术学院,武汉430074 [3]湖南工程学院计算机与通信学院,湖南湘潭411104

出　　处：《小型微型计算机系统》2014年第4期746-750,共5页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(61303043;51277015)资助;湖南省教育厅科研项目(11C0036)资助

摘　　要：随着网络应用的不断丰富和日趋复杂,网络数据包处理必须以连接会话为单位进行语义级的深层次分析.针对高速网络环境下连接管理的性能需求,提出了一种高效鲁棒的并发连接管理方案.首先建立初始连接隔离法ICS(Initialized Connection Separation),将网络恶意行为产生的虚假连接与正常的已建连接分离开来,形成规模可控的初始连接表ICT(Initialized Connection Table)和已建连接表ECT(Established Connection Table).然后通过分析ICT表和ECT表的访问操作特点,应用"移至最前"MTF(Move-To-Front)启发法优化连接表的访问操作.借助实际高速网络流量样本,对本文所提的ICS-MTF连接管理方案进行了性能评估.实验结果表明:ICS-MTF方案在高效性和鲁棒性方面均明显优于传统的连接管理方案.With the increasing enrichment and complexity of network applications, network packet processing is necessary to perform in-depth analysis at semantic levels in terms of connection/session. Targeting the performance requirements of connection manage- ment in high-speed networks, this paper proposes an efficient and robust simultaneous connection management scheme. We first build an initialized connection separation （ ICS ） way to isolate false connections induced by network malicious behaviors from benign estab- lished connections, which results in size-controllable initialized connection table （ ICT } and established connection table { ECT ）. Then we analyze the characteristics of accessing operations on the ICT and ECT, and apply move-to-front { MTF） heuristic to optimize the lookup operation of the two connection tables. Finally, we evaluate the performance of our proposed ICS-MTF connection man- agement scheme with real high-speed network traffic traces. Experimental results indicate that the ICS-MTF scheme performs much better than the traditional connection management in terms of efficiency and robustness.

关 键 词：高速网络 连接管理 初始连接隔离法 ”移至最前”启发法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]