基于双向NAT和智能DNS内网服务器安全快速访问策略

Policy of safety and fast access to inner network server based on DNAT,SNAT and intelligent DNS

校园内网服务器的访问通过教育网链路进行,公网用户的访问速度慢。通过双向NAT策略将公网用户的请求IP封包进行有效转换,将此IP包的公网源地址和目的地址转换为内网源地址和目的地址,并避开边界路由器内网口策略路由,实现通过公网链路进行路由选路;智能DNS对公网用户和教育网用户针对同一域名分别解析各自所在网络的IP地址,保证公网用户通过公网链路访问内网服务器。实验结果表明,公网用户的访问速度明显提高。

The access to campus network inner server needs passing through cemet, the speed of access is slow for none cemet users. The request IP package of none cemet users is effectively converted by applying policy of DNAT and SNAT, none cernet source and destination addresses of the IP package are converted to the inner network addresses, moreover the policy routing is avoided on the inner network port of edge router, it is implemented that the package is routed via cnc network. One domain name is resolved to different IP address for cemet users and other users according to their network segment scope by applying intelligent DNS, and it is ensured that the inner network server is accessed through cnc network for none cernet users. It indicates that the speed of access to inner network server is mostly faster than before for none cemet users by experiment.