面向虚拟私有网的网络设备虚拟化技术  

Network Equipment Virtualization Technology for Virtual Private Network

作　　者：陶志勇[1,2] 张锦[2,3] 阳王东 唐铁斌[1] TAO Zhi-Yong;ZHANG Jin;YANG Wang-Dong;TANG Tie-Bin(College of Software,Changsha Social Work College,Changsha 410004,China;Hunan University,Changsha 410082,China;Hunan Normal University,Changsha 410012,China)

机构地区：[1]长沙民政职业技术学院软件学院,长沙410004 [2]湖南大学,长沙410082 [3]湖南师范大学,长沙410012

出　　处：《计算机系统应用》2022年第2期137-142,共6页Computer Systems & Applications

基　　金：国家自然科学基金(61872127);湖南省教育厅资助科研项目(19C0106)。

摘　　要：针对边缘设备随着接入的分支机构增多,需处理的公网与私网数据爆增,导致边缘设备负载过重,影响数据的正常交互.为此,分析了产生问题的根源,提出了网络设备虚拟化技术与多协议标签交换与边界网关协议技术相融合的解决方案.为验证方案的可行性,借助实验室设备,搭建了方案所需环境,完成了方案的部署.部署完成后对方案的可用性、数据访问控制与隔离、数据的分布式处理与负载分担进行了测试,并与传统方式在设备冗余性、扩展性、管理性等10个维度进行了对比.测式与对比结果表明,该方案能在边缘设备上实现数据的分布式处理与负载分担,优于传统方式,是一种有效的VPN解决方案.As the number of branches connected to edge devices increases,the public and private network data that needs to be processed explodes,causing the edge devices to be overloaded and affecting the normal interaction of data.To solve these problems,this study analyzes the root cause of the problems and proposes a solution that integrates network equipment virtualization technology with multi-protocol label switching and border gateway protocol technology.For the feasibility verification of the solution,with the help of laboratory equipment,the environment required for the solution is built,and the deployment of the solution is completed.Then,the solution’s availability,data access control and isolation,distributed data processing and load sharing are tested,and it is compared with traditional methods in ten dimensions such as equipment redundancy,scalability,and management.The test and comparison results show that the solution can realize the distributed data processing and load sharing on edge devices,and it is superior to traditional methods as an effective VPN solution.

关 键 词：虚拟私有网 网络 设备 虚拟化 

分 类 号：TP393.01[自动化与计算机技术—计算机应用技术]