网络隔离环境下多节点接入控制技术研究  

Research of Multiple-nodes Access Protocol Technology in Isolated Network Environment

作　　者：陈征[1] 陈银慧 于玉龙[1] 陈鑫[1] 王宇新[2] 郭禾[1] 

机构地区：[1]大连理工大学软件学院,辽宁大连116621 [2]大连理工大学计算机科学与技术学院,辽宁大连116024

出　　处：《小型微型计算机系统》2014年第7期1528-1532,共5页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(61173179;11101065)资助

摘　　要：为了保护重要数据,人们常把服务器置于内部网络与外网隔离.但实际常存在合法的外网用户需要访问内网服务器的情况.为此,采用"客户机-前置机-服务器"架构,实现内外网的隔离访问.采用数据摆渡,解决内外网的隔离通信问题;协议转换,兼容不同远程控制协议,有利于系统扩展;多节点接入控制,处理单节点宕机或多客户机接入问题,有效提高系统可靠性与性能.经过案例分析,表明该架构既能保证系统扩展性,又能保障系统的安全性和可靠性.In order to protect the important data,people often put servers in the internal network to separate from the external network.But the legal internet users often need to access the server of internal network. In this respect,proposing ＂ client-front-server＂ architecture to achieve isolated access between the internal and external network. Data ferrying addresses problems of isolated communication between the internal and external network; Protocol conversion compatibles with different remote control protocol,benefits for system＇s expansion; Multiple-nodes access control deals with a single node＇ down or multiple clients access,improves system＇s reliability and performance. Through case analysis,indicates the architecture can ensure both scalability and the safety and reliability of the system.

关 键 词：前置机 隔离访问 数据摆渡 协议转换 多节点接入 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]