QoS机制在IPSec安全设备上的分析与实现

Analysis and Realization of QoS Machanism in IPSec Security Device

提出了在IPSec安全设备上实施QoS的体系方案。设计了适合IPSec安全设备特点的数据分类规则。为IPSec安全设备构建了一个系统排队理论模型,该模型以延迟作为系统运行目标,以带宽作为分配资源。据此设计了一个自适应带宽分配循环队列调度算法。实际运行的测试结果表明,在重载情况下,实施了QoS的IPSec安全设备可以为重要业务流提供带宽和时延保障。

This paper presents a QoS scheme suit for IPSec security device, and designs a data classification regulation adapt to characteristics of IPSec security device. A principle of queuing model is constructed which takes the delay as the target parameter and the bandwidth as the allocation resource of the queuing system. By this model, an adaptive bandwidth allocation circular schedule algorithm is designed. The results of test show that the IPSec security device guarantees bandwidth and delay for key streams in the situation of heavy burden by QoS mechanism.