面向动态异构冗余的网络代理技术

Research on DHR-Oriented Network Proxy Technology

网络代理技术广泛应用于互联网,主要功能包括突破访问限制、获取远程服务以及实现内部网络安全控制。首先介绍网络代理的实现原理以及3种常见的网络代理模式;其次结合动态异构冗余(DHR)架构来实现代理系统处理多执行体输入输出的能力,提出一种独特的面向DHR的网络代理技术,阐述这种代理技术的实现机制不是简单的“一对一”的转发,而是“一对多”的分发以及“多对一”的裁决;最后对它进行原型设计并实验验证。实验结果表明在三模的裁决机制下,面向DHR的网络代理技术比传统网络代理具有更高的安全性。

Network proxy technology is extensively utilized across the Internet,providing key function⁃alities such as circumventing access restrictions,enabling access to remote services,and ensuring in⁃ternal network security control.This paper starts by elucidating the principles of network proxy and ex⁃amining three prevalent proxy models.It integrates the Dynamic Heterogeneous Redundancy(DHR)ar⁃chitecture to enhance the proxy system's input and output management capabilities for multiple execu⁃tors.A novel network proxy technology centered on DHR is proposed,which diverges from the tradi⁃tional"one-to-one"forwarding mechanism,employing instead a"one-to-many"distribution and"manyto-one"arbitration approach.The paper concludes with the design of a prototype and experimental vali⁃dation,demonstrating that the DHR-oriented network proxy technology outperforms traditional meth⁃ods in terms of security due to the arbitration mechanism provided by its three modular components.