基于虚拟化的跨域VPN解决方案  

Solution to Cross-domain VPN Based on Virtualization

作　　者：陶志勇[1,2] 张锦 阳王东 TAO Zhiyong;ZHANG Jin;YANG Wangdong(Software School,Changsha Social Work College,Changsha 410004,China;College of Computer Science and Electronic Engineering,Hunan University,Changsha 410082,China;College of Computer Science and Electronic Engineering,Hunan Normal University,Changsha 410012,China)

机构地区：[1]长沙民政职业技术学院软件学院,长沙410004 [2]湖南大学信息科学与工程学院,长沙410082 [3]湖南师范大学信息科学与工程学院,长沙410012

出　　处：《计算机科学》2023年第9期357-362,共6页Computer Science

基　　金：国家自然科学基金(61872127);湖南省教育厅资助科究项目(22C1433);湖南省自然科学基金(2020JJ7089);长沙民政职业技术学院横向项目(HX2023025)This work was。

摘　　要：针对目前运营商网络中构建的跨域虚拟私有网实现复杂、自治系统边界设备负载过重、存在单点故障等问题,提出了采用虚拟化方式构建跨域虚拟私有网的解决方案。该方案包括公网隧道的建立、本地VPN实例的建立、自治系统边界设备的虚拟化、边界设备私网路由的交互4个关键步骤。为评估方案的可行性,对方案进行了测试与验证,测试与验证结果表明该方案达到了预期设计的目标。为了评估方案的优越性,与传统多跳EBGP方式构建的跨域虚拟私有网在交换容量、路由条目、标签条目等维度进行了对比分析。对比结果表明,采用该方案构建的跨域虚拟私有网增强了自治系统边界设备的数据处理能力,并减少了自治系统边界设备需处理的数据量,是一种构建跨域私有网的改进方案。To address the problems of complex implementation of cross-domain virtual private networks built in current carrier networks,excessive load on devices at the border of autonomous systems,and the existence of single points of failure,this paper proposes a solution for building cross-domain virtual private networks by virtualization.The scheme consists of four fundamental steps:the establishment of public network tunnels,the establishment of local VPN instances,the virtualization of autonomous system border devices,and the interaction of private network routes of border devices.To evaluate the feasibility and superiority of the scheme,comparative experiments are conducted with the cross-domain virtual private network constructed by the tradi-tional multi-hop EBGP approach in the dimensions of switching capacity,route entries,and label entries.Experimental results show that the cross-domain virtual private network constructed by this scheme enhances the data processing capability of the autonomous system boundary devices and reduces the amount of data to be processed by the autonomous system boundary devices.In general,this improved scheme is advanced and effective for building cross-domain virtual private networks.

关 键 词：虚拟化 多协议标签交换 边界网关路由协议 自治系统边界设备 虚拟私有网 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]