互联网网络层传输协议研究综述  

Research Progress on Internet Network Layer Protocol

作　　者：高镇 吕游 杨爱玲 邹乾友 付松涛 GAO Zhen;LYU You;YANG Ailing;ZOU Qianyou;FU Songtao(Unit 32039, Beijing 100094, China;Unit 32033, Haikou 571100, China)

机构地区：[1]32039部队,北京100094 [2]32033部队,海南海口571100

出　　处：《信息工程大学学报》2021年第6期699-708,共10页Journal of Information Engineering University

摘　　要：天地一体化网络、工业互联网、数据中心、物联网等新的应用场景不断发展,互联网逐步走向万物互联,对网络设备交互控制性能和安全保证提出更高要求。现有以IP协议为基础的网络层传输协议在性能上难以提供保证,在安全能力上更存在不足。长期以来,大量互联网体系结构通过革命式、演进式等方式不断更新,希望设计兼具性能和安全保证的网络层,在互联网开放互联的基础上提供安全认证能力。首先对现有革命式设计的网络层传输协议进行了总结,并分析了现有互联网场景下革命式设计难以部署的原因;进而对各种演进式网络层传输协议在性能和安全保证方面进行分析;最后在BMv2环境中通过可编程交换设备对各类设计的可部署性进行了仿真,在此基础上对设计兼具性能与安全能力保证的互联网网络层传输协议提出了建议。With the continuous development of new scenarios such as Space and Terrestrial Integrated Network,industrial Internet,data center and the Internet of Things,which puts forward higher requirements for the guarantee of interactive control performance and network security.The Internet architecture based on IP protocol is difficult to provide fine-grained guarantees in terms of performance,and is less effective in terms of security.From this perspective,a large number of Internet architectures have been constantly updated through revolutionary and evolutionary ways,to establish a network layer with both performance and security guarantees.This paper summarizes the network layer protocol design of the existing revolutionary architecture and analyzes why it is difficult to deploy in today’s Internet.Then it analyzes various evolutionary improvements to the performance and security guarantee.Furthermore,we implement different network protocols in BMv2 environment,to testify the feasibility and deployability of these designs with programmable switch.Finally,we propose some suggestions toward the establishment of the Internet network layer protocol with both performance and security guarantees.

关 键 词：互联网协议 网络体系结构 网络层 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]