可编程性恢复是软件定义广域网(Software Defined Wide Area Network, SD-WAN)中节点失效后保障网络服务质量的有效方法 .针对可编程性恢复中失效节点形式单一的问题,提出一种基于启发式算法的主备份控制器部署方法来确保交换机和控制...可编程性恢复是软件定义广域网(Software Defined Wide Area Network, SD-WAN)中节点失效后保障网络服务质量的有效方法 .针对可编程性恢复中失效节点形式单一的问题,提出一种基于启发式算法的主备份控制器部署方法来确保交换机和控制器失效时网络的可编程性.在主控制器部署时,利用控制路径密度和强度衡量域内控制路径的可靠性,提升交换机故障情况下的路径可编程性;在备份控制器部署时,将一定数量的、相邻的主控制域划分为多个备份区域,在备份区域中部署一个备份控制器,建立它与交换机的映射策略,使脱机交换机以及离线流的恢复能力最大化,以提升控制器故障情况下的离线流的可编程性.此外,重新定义狼群算法的智能行为,提出一种离散狼群算法解决主备控制器的部署问题.在四种真实网络拓扑上进行实验,结果表明提出的方法在交换机故障的情况下能降低失效控制路径的影响,在控制器故障时能最大程度上恢复离线流.展开更多
The future Wireless Cloud Networks (WCNs) are required to satisfy both extremely high levels of service resilience and security assurance (i.e., Blue criteria) by overproviding backup network resources and cryptograph...The future Wireless Cloud Networks (WCNs) are required to satisfy both extremely high levels of service resilience and security assurance (i.e., Blue criteria) by overproviding backup network resources and cryptographic protection on wireless communication respectively, as well as minimizing energy consumption (i.e., Green criteria) by switching off unnecessary resources as much as possible. There is a contradiction to satisfy both Blue and Green design criteria simultaneously. In this paper, we propose a new BlueGreen topological control scheme to leverage the wireless link connectivity for WCNs using an adaptive encryption key allocation mechanism, named as Shared Backup Path Keys (SBPK). The BlueGreen SBPK can take into account the network dependable requirements such as service resilience, security assurance and energy efficiency as a whole, so as trading off between them to find an optimal solution. Actually, this challenging problem can be modeled as a global optimization problem, where the network working and backup elements such as nodes, links, encryption keys and their energy consumption are considered as a resource, and their utilization should be minimized. The case studies confirm that there is a trade-off optimal solution between the capacity efficiency and energy efficiency to achieve the dependable WCNs.展开更多
为提高企业网络环境的安全性和稳定性,使用防火墙双机热备技术进行网络安全策略配置。整个网络采用接入层、汇聚层、核心层的3层拓扑结构进行架构,利用VLAN(虚拟局域网,Virtual Local Area Network,简称VLAN)技术进行地址配置,采用trun...为提高企业网络环境的安全性和稳定性,使用防火墙双机热备技术进行网络安全策略配置。整个网络采用接入层、汇聚层、核心层的3层拓扑结构进行架构,利用VLAN(虚拟局域网,Virtual Local Area Network,简称VLAN)技术进行地址配置,采用trunk模式配置接入层,由两台交换机汇聚接入层流量,采用MSTP(多生成树协议,Multiple Spanning Tree Protocol,简称MSTP)解决环路问题,采用VRRP(虚拟路由冗余协议,Virtual Router Redundancy Protocol,简称VRRP)提高网络的可靠性,核心层使用两台防火墙,配置OSPF协议(开放式最短路径优先协议,Open Shortest Path First,简称OSPF)。内外网连通性测试和模拟宕机测试结果表明,防火墙双机热备技术能使企业网络环境更高效、稳定、安全。展开更多
文摘可编程性恢复是软件定义广域网(Software Defined Wide Area Network, SD-WAN)中节点失效后保障网络服务质量的有效方法 .针对可编程性恢复中失效节点形式单一的问题,提出一种基于启发式算法的主备份控制器部署方法来确保交换机和控制器失效时网络的可编程性.在主控制器部署时,利用控制路径密度和强度衡量域内控制路径的可靠性,提升交换机故障情况下的路径可编程性;在备份控制器部署时,将一定数量的、相邻的主控制域划分为多个备份区域,在备份区域中部署一个备份控制器,建立它与交换机的映射策略,使脱机交换机以及离线流的恢复能力最大化,以提升控制器故障情况下的离线流的可编程性.此外,重新定义狼群算法的智能行为,提出一种离散狼群算法解决主备控制器的部署问题.在四种真实网络拓扑上进行实验,结果表明提出的方法在交换机故障的情况下能降低失效控制路径的影响,在控制器故障时能最大程度上恢复离线流.
文摘The future Wireless Cloud Networks (WCNs) are required to satisfy both extremely high levels of service resilience and security assurance (i.e., Blue criteria) by overproviding backup network resources and cryptographic protection on wireless communication respectively, as well as minimizing energy consumption (i.e., Green criteria) by switching off unnecessary resources as much as possible. There is a contradiction to satisfy both Blue and Green design criteria simultaneously. In this paper, we propose a new BlueGreen topological control scheme to leverage the wireless link connectivity for WCNs using an adaptive encryption key allocation mechanism, named as Shared Backup Path Keys (SBPK). The BlueGreen SBPK can take into account the network dependable requirements such as service resilience, security assurance and energy efficiency as a whole, so as trading off between them to find an optimal solution. Actually, this challenging problem can be modeled as a global optimization problem, where the network working and backup elements such as nodes, links, encryption keys and their energy consumption are considered as a resource, and their utilization should be minimized. The case studies confirm that there is a trade-off optimal solution between the capacity efficiency and energy efficiency to achieve the dependable WCNs.
文摘为提高企业网络环境的安全性和稳定性,使用防火墙双机热备技术进行网络安全策略配置。整个网络采用接入层、汇聚层、核心层的3层拓扑结构进行架构,利用VLAN(虚拟局域网,Virtual Local Area Network,简称VLAN)技术进行地址配置,采用trunk模式配置接入层,由两台交换机汇聚接入层流量,采用MSTP(多生成树协议,Multiple Spanning Tree Protocol,简称MSTP)解决环路问题,采用VRRP(虚拟路由冗余协议,Virtual Router Redundancy Protocol,简称VRRP)提高网络的可靠性,核心层使用两台防火墙,配置OSPF协议(开放式最短路径优先协议,Open Shortest Path First,简称OSPF)。内外网连通性测试和模拟宕机测试结果表明,防火墙双机热备技术能使企业网络环境更高效、稳定、安全。
