网络风暴冲击下的流量调控平台设计与实现

Design and implementation of flow control platform against impact of network storm

网络风暴冲击下的网络结构存在较高的差异性,并且外部环境存在较高的波动性,使得传统采用异构网络协作的网络流量调控方法存在控制效率低和失衡的问题。因此,设计基于Linux防火墙的嵌入式网络流量控制系统,其是基于Linux内核Netfilter框架的流量控制系统。系统将μClinux当成操作系统的嵌入式系统,其塑造在Netfilter防火墙框架上,由内核功能模块、虚拟部件以及用户配置工具构成。内核功能模块在Netfilter框架的钩子挂载点处注册处理函数,完成网络数据包的控制,实现网络流量的调控。虚拟部件实现内核空间同用户空间配置数据的传递,确保用户采用配置工具对流量调控系统的行为进行管理。用户通过用户配置工具将待控制的主机/子网信息反馈到流量调控系统中。实验结果表明,所设计系统可实现网络风暴冲击下的网络流量的平稳控制,并且具有较高的控制效率和鲁棒性。

Under the impact of network storm,the differences of network structure is higher,and the external environment has higher volatility,which make the traditional network traffic control method with heterogeneous network collaboration exist the problems of low control efficiency and imbalance.Therefore,an embedded network traffic control system based on Linux firewall was designed.It is based on the fluid flow control system with the Linux kernel Netfilter framework,takesμClinux as the embedded system of operating system,and is shaped on the firewall Netfilter framework,which is composed of kernel function module,virtual components and user configuration tool.The kernel function module registers handler function at the hook hardpoints of Netfilter framework to complete the control to the network packet and achieve network traffic control.The virtual components are used to realize the user space configuration data transmission in the kernel space to ensure that the user manages thebehavior of the fluid flow control system and feeds the host/subnet information under control back to the fluid flow control system by his configuration tool.The experimental results indicate that the designed system can realize smooth control of network traffic flow under the impact of network storm,and has high control efficiency and robustness.