一种可编程Slice的FC路由访问控制设计与实现

Design and Implementation of FC Routing Access Control for a Programmable Slice

针对传统的航空电子环境下的光纤通道(Fibre Channel-Avionics Environment,FC-AE)交换网络路由访问控制灵活性不足的问题,设计了一种可编程协议处理单元(slice)进行FC的协议解析、匹配与处理,从而实现FC网络路由访问控制。该设计可根据用户需求对自定义的报文域段进行规则检查,并根据用户定义的访问策略进行报文的输出控制。相比于传统配置ZONE(物理端口分区)或者虚拟端口分区(Virtual SAN,VSAN)的路由访问控制策略,该设计可以将可选的配置域段范围带宽增加10倍,具有更高的安全性和灵活性。

For the problem of insufficient flexibility in routing access control of traditional Fibre Channel-Avionics Environment(FC-AE)switching networks,a programmable protocol processing unit(slice)is designed to perform FC protocol analysis,matching and processing to achieve FC network routing access control.The design can check the rules of custom message domains and control the output of messages according to user-defined access strategies.The experiments show that compared with the traditional configuration of ZONE(physical port partition)or virtual SAN(VSAN)(virtual port partition)routing access control strategy,this design can increase the width of the optional configuration domain by 10 times,and has a higher security and flexibility.