一种可编程Slice的FC路由访问控制设计与实现  

Design and Implementation of FC Routing Access Control for a Programmable Slice

作　　者：王兆辉 邓豹[2] 沈剑良[1] 陈艇 WANG Zhaohui;DENG Bao;SHEN Jianliang;CHEN Ting(National Digital Switching System Engineering Technology Research Center,Zhengzhou 450003,China;Xi'an Aeronautics Computing Technique Research Institute,AVIC,Xi'an 710068,China)

机构地区：[1]国家数字交换系统工程技术研究中心,郑州450003 [2]航空工业西安航空计算技术研究所,西安710068

出　　处：《电讯技术》2022年第8期1184-1188,共5页Telecommunication Engineering

基　　金：国家科技重大专项(2016ZX01012101)。

摘　　要：针对传统的航空电子环境下的光纤通道(Fibre Channel-Avionics Environment,FC-AE)交换网络路由访问控制灵活性不足的问题,设计了一种可编程协议处理单元(slice)进行FC的协议解析、匹配与处理,从而实现FC网络路由访问控制。该设计可根据用户需求对自定义的报文域段进行规则检查,并根据用户定义的访问策略进行报文的输出控制。相比于传统配置ZONE(物理端口分区)或者虚拟端口分区(Virtual SAN,VSAN)的路由访问控制策略,该设计可以将可选的配置域段范围带宽增加10倍,具有更高的安全性和灵活性。For the problem of insufficient flexibility in routing access control of traditional Fibre Channel-Avionics Environment(FC-AE)switching networks,a programmable protocol processing unit(slice)is designed to perform FC protocol analysis,matching and processing to achieve FC network routing access control.The design can check the rules of custom message domains and control the output of messages according to user-defined access strategies.The experiments show that compared with the traditional configuration of ZONE(physical port partition)or virtual SAN(VSAN)(virtual port partition)routing access control strategy,this design can increase the width of the optional configuration domain by 10 times,and has a higher security and flexibility.

关 键 词：航空电子 光纤通道 网络访问控制 可编程协议处理 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]