CoLoR架构中边界路由器的设计与开发

Design and development of the border router in CoLoR

为提高网络安全性,CoLoR架构提出了一种基于路径标识加密的安全通信机制。为验证CoLoR架构的可行性和正确性,设计并开发了CoLoR架构中的边界路由器,实现了对请求包、数据包和控制包的处理和转发。搭建原型系统,测试了路径标识加密机制对边界路由器吞吐量的影响和对DATA包泛洪攻击的防范效果。结果表明,该机制可以有效防御DDOS数据包泛洪攻击,并且对边界路由器性能的影响非常小。

A secure communication mechanism based on path identification encryption is proposed in CoLoR architecture to enhance the network security.A CoLoR border router is designed and developed to verify the feasibility and correctness of the CoLoR architecture.The border realized the processing and forwarding of request packets,data packets and control packets.A prototype system is built to test various performances of this mechanism on border routers,including handling capacity,flooding attacks defense.The result shows that the secure communication mechanism can effectively prevent DDOS flooding attacks with few impact on the performance of the border routers.