ADN:地址驱动的网络体系结构  

ADN:Address Driven Internet Architecture

作　　者：吴建平[1,2] 李丹[1] 毕军[2] 徐恪[1] 李星[2] 朱晶[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]清华大学网络科学与网络空间研究院,北京100084

出　　处：《计算机学报》2016年第6期1081-1091,共11页Chinese Journal of Computers

基　　金：国家"八六三"高技术研究发展计划项目基金(SS2015AA010203);国家发改委CNGI课题(CNGI-12-03-001)资助

摘　　要：以TCP/IP架构为基础的互联网,在可扩展性、高效性、安全性和灵活性等诸多方面面临着重大挑战.究其根源是因为在现有的大部分解决方案下,IP地址的多重属性没有得到充分体现和应用.文中提出了一种以地址为驱动的网络体系结构ADN(Address Driven Network).ADN的核心思想是以IP地址的创新管理和使用方法为驱动,充分利用IP地址的多重属性,包括长度属性、逻辑属性、拓扑属性、时间属性、空间属性、所有者属性等,来解决当前互联网面临的规模扩展、平滑移动、安全可信、服务质量、网络虚拟化等问题.ADN在IP地址多重属性得到应用的基础上,能够实现多种技术或应用,包括真实IP地址、二维路由、动态IP等.其中,二维路由将IP报文的源地址和目的地址一齐作为路由的依据,在保持纯IP路由的前提下能够完成许多现有扩展协议在牺牲一定性能和可管理性的基础上才能够完成的复杂路由;真实IP地址和动态IP则分别对报文的源地址和目的地址的真实有效性进行验证,防止恶意终端通过伪造源地址的方式发起规避追踪的网络攻击,或者对其他终端发起未得到授权的访问.The Internet,which is constructed based on the TCP/IP structure,has been facing many challenges towards its scalability,efficiency,safety and flexibility.Most proposals today fail to solve these problems all together because they have not fully explored and exploited the multiple attributes of IP addresses.This paper proposes an address driven network architecture,called ADN.The core idea of ADN is solve the key problems faced by Internet,such as space scalability,smooth mobility,security and privacy,service quality,network virtualization,by innovative management and usage of IP addresses,with an extensive exploit of the multiple attributes of IP address,including the length attribute,logic attribute,topology attribute,time attribute,space attribute,ownership attribute,etc.The key technologies of ADN include validated IP address,two-dimensional routing,dynamical IP address,etc.The two-dimensional routing uses the source address as well as the destination address of an IP packet.On the premise of pure IP routing,two-dimensional routing is capable of realizing many complex routing strategies whichmost existing routing extensions cannot achieve without sacrificing its efficiency and manageability.The validated IP address and dynamical IP address verify the facticity and validity of the source address and destination address,respectively.They prevent the malicious users from launching attacks without being traced using source address forgery,or accessing other end-hosts in the Internet without authorization granted.

关 键 词：地址驱动网络 真实IP地址 二维路由 动态IP 下一代互联网 互联网体系结构 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]