网络风暴冲击下的流量调控平台设计与实现  

Design and implementation of flow control platform against impact of network storm

作　　者：王建国[1] 刘艳艳[2] 刘海燕[1] WANG Jianguo;LIU Yanyan;LIU Haiyan(School of Computer and Communication Engineering,Beijing Information Technology College,Beijing 100018,China;Department of Basic Courses,Institute of Disaster Prevention,Sanhe 065201,China)

机构地区：[1]北京信息职业技术学院计算机与通信工程学院,北京100018 [2]防灾科技学院基础部,河北三河065201

出　　处：《现代电子技术》2017年第6期75-78,83,共5页Modern Electronics Technique

基　　金：国家自然科学基金青年基金(51409290);河北省高等教育教学改革研究与实践项目(2015GJJG259)

摘　　要：网络风暴冲击下的网络结构存在较高的差异性,并且外部环境存在较高的波动性,使得传统采用异构网络协作的网络流量调控方法存在控制效率低和失衡的问题。因此,设计基于Linux防火墙的嵌入式网络流量控制系统,其是基于Linux内核Netfilter框架的流量控制系统。系统将μClinux当成操作系统的嵌入式系统,其塑造在Netfilter防火墙框架上,由内核功能模块、虚拟部件以及用户配置工具构成。内核功能模块在Netfilter框架的钩子挂载点处注册处理函数,完成网络数据包的控制,实现网络流量的调控。虚拟部件实现内核空间同用户空间配置数据的传递,确保用户采用配置工具对流量调控系统的行为进行管理。用户通过用户配置工具将待控制的主机/子网信息反馈到流量调控系统中。实验结果表明,所设计系统可实现网络风暴冲击下的网络流量的平稳控制,并且具有较高的控制效率和鲁棒性。Under the impact of network storm,the differences of network structure is higher,and the external environment has higher volatility,which make the traditional network traffic control method with heterogeneous network collaboration exist the problems of low control efficiency and imbalance.Therefore,an embedded network traffic control system based on Linux firewall was designed.It is based on the fluid flow control system with the Linux kernel Netfilter framework,takesμClinux as the embedded system of operating system,and is shaped on the firewall Netfilter framework,which is composed of kernel function module,virtual components and user configuration tool.The kernel function module registers handler function at the hook hardpoints of Netfilter framework to complete the control to the network packet and achieve network traffic control.The virtual components are used to realize the user space configuration data transmission in the kernel space to ensure that the user manages thebehavior of the fluid flow control system and feeds the host/subnet information under control back to the fluid flow control system by his configuration tool.The experimental results indicate that the designed system can realize smooth control of network traffic flow under the impact of network storm,and has high control efficiency and robustness.

关 键 词：网络风暴 网络流量 NETFILTER ΜCLINUX 

分 类 号：TN711-34[电子电信—电路与系统] TP393[自动化与计算机技术—计算机应用技术]