基于GLBP和IP SLAs协议的多出口路由方法

针对校园网多出口的需求和遇到的问题,通过对比几种现有方法,提出了以GLBP协议和IP SLAs配合策略路由(PBR)及网络地址翻译(NAT)的解决方案.该方案整合了CERNET和本地ISP的网络资源优势,实现了链路故障和拥塞时的自动切换,提高了访问速度和链路使用效率.     

逆向代理功能在校园网中的应用

CERNET和非CERNET的互联互通有瓶颈,校园网实施双ISP（CERNET和ChinaNet）链路接入,以便满足用户的网络应用需求。校园网的DNS在CERNET注册,负责对校园网服务器域名做权威解析。校园网服务器使用CERNET地址,从外网访问校园网时,需在CERNET链路上进行,这又回到CERNET和非CERNET的互联互通有瓶颈这个症结上。     

迪普科技“融、慧、管、通”解决方案服务广西民族大学

正近日,杭州迪普科技有限公司成功中标广西民族大学校园网链路负载均衡项目,通过业界领先的"融、慧、管、通"校园网出口解决方案,大大提高广西民族大学业务系统的应用体验,并提高信息网络的可用性、扩展性和易维护性,大大降低用户的管理和维护成本。广西民族大学校园网互联网出口通过中国电信、中国移动和教育网进行多出口链路部署,迪普科技ADX3000通过应用层智能调度,将网络应用按需调度和带宽管     

校园网的路由策略选择及实现

校园网出口带宽不足已成为众多高校面临的严重问题，为了解决问题，我们提出了增加一条接入链路和一台路由器的方案，利用基于策略路由、静态路由选择和网络地址翻译（NAT）等技术，有效解决了网络瓶颈问题，在合理利用现有CERNET网络资源的同时，还可使用当地网络服务提供商（ISP）提供的带宽高速安全地上网。     

浅析高校校园网多链路接入的设计及实现

当今,高校校园网的应用非常流行,而校园网的出口是网络规划和建设中需要考虑的重点问题,它关系到校园网用户对网络的访问速度。文章对校园网的多链接路接入途径进行了分析,指出了多链路的优点和存在问题,并针对CIS-CO6509路由器给出了解决问题的具体实现。     

高校外网业务与出口流量规划研究

针对高校校园网多出口流量不均衡的问题,本文在对高校外网业务进行分析后,结合CDN和路由技术,提出了基于DNS的流量模型优化方案。将电信等其他运营商上的流量适当地分流到CERNET上,在提升CERNET出口流量的同时,也对电信等其他运营商出口流量进行限速。结果表明,该优化方案不仅能够充分利用多出口链路带宽,而且大大提升校园网用户上网体验。     

DNS技术在网络链路控制中的应用

针对校园网通过不同自治系统多条链路接入互联网的实际,探讨了多链路环境下的校园网应用服务器接入和DNS服务器搭建方案,提出了基于DNS技术的综合运用,识别并区分来访者的IP地址,通过返回不同的域名解析结果,对校园网应用服务器的访问流量进行链路控制的实现思路和解决方案。     

基于IP核实现PTN设备的多链测试

从PTN设备的设计挑战出发,介绍了IP核和基于IP核(BSCAN2)的多边界扫描链路实现方式,并对其应用提出了改进。     

基于流记录的非对称路由检测

针对同时使用多个ISP接入服务的校园网,网络边界路由的错误配置导致非对称路由现象发生,提出了一种基于流记录的非对称路由检测(FARD, flow-based asymmetry routing detection)方法。该方法利用TCP面向连接的传输特性结合IP地址的归属,基于边界路由器提供的流记录数据定位网络中可能存在非对称路由的IP地址。算法基于CERNET 2个主节点的接入路由器流记录进行了验证。     

Internet在中国市场的开发前景

一、Internet在中国发展的现状 从1995年起,Internet开始了在中国的商业化进程,并随着国内经济发展和开放程度的加大而飞速发展,国内的ISP(即Internet服务商)已从早期的4～5家发展到目前的约60-80家总投资规模达10-20亿元(不包括校园网和科技网),拥有近10万用户。到目前为止,全国先后建成6个In--ternet国际出口,形成了四大指定互联单位和若干商业ISP,仅在北京地区,经邮电部门批准的商业ISP就有30多家,在     

A Wireless LAN Bridging Solution Based on Campus Network

This paper presents a creative wireless LAN (WLAN) bridging solution, concentrating on the overall realization of a well designed interconnection. This solution integrates effective traffic insulation, intended access control, and required address translation without interfering with the vested interest of internet service provider (ISP). The specific solution can be widely applied on the campus-dorm (off campus)-ISP internetworking mode, where it is hard to implement wired link between campus network and dorm network in terms of cost and existing environmental constraints.     

高职院校校园网防火墙技术的应用

高职院校校园网络安全建设是一项复杂、庞大的系统工程。防火墙作为校园网与外部网的唯一出入口,是校园网络安全的关键控制环节。文章主要围绕防火墙技术在高职院校校园网中的应用进行分析,以供参考。     

Locally Restorable Routing of Highly Variable Traffic

Two-phase routing, where traffic is first distributed to intermediate nodes before being routed to the final destination, has been recently proposed for handling widely fluctuating traffic without the need to adapt network routing to changing traffic. Preconfiguring the network in a traffic independent manner using two-phase routing simplifies network operation considerably. In this paper, we extend this routing scheme by providing resiliency against link failures through fast restoration along link backup detours. We view this as important progress towards adding carrier-class reliability to the robustness of the scheme so as to facilitate its future deployment in Internet Service Provider (ISP) networks. On the theoretical side, the main contribution of the paper is the development of linear programming based and fast combinatorial algorithms for two-phase routing with link restoration so as to minimize the maximum utilization of any link in the network, or equivalently, maximize the throughput. The algorithms developed are fully polynomial time approximation schemes (FPTAS)-for any given isin > 0, an FPTAS guarantees a solution that is within a (1 + isin)-factor of the optimum and runs in time polynomial in the input size and 1/isin. To the best of our knowledge, this is the first work in the literature that considers making the scheme resilient to link failures through preprovisioned fast restoration mechanisms. We evaluate the performance of link restoration (in terms of throughput) and compare it with that of unprotected routing. For our experiments, we use actual ISP network topologies collected for the Rocketfuel project and three research network topologies.     

运用WLAN+LMDS+GPRS构建城域校园网络

近年来高校的合并和招生规模不断扩大,带来了部分师生无法接入现有校园网络的问题,如新分校区的用户不能接入本校区校园网等问题.本文提出了一种运用现代无线通信技术对现有校园网络进行扩充并建立城域校园网络的方案,分别利用WLAN覆盖校内热点地区、LMDS连接主分校区和通过GPRS在校外接入校园网,实现了城域校园网的无缝覆盖,可为高校大规模校园网建设提供一定的参考.     

Hybrid protection algorithms based on game theory in multi-domain optical networks

With the network size increasing, the optical backbone is divided into multiple domains and each domain has its own network operator and management policy. At the same time, the failures in optical network may lead to a huge data loss since each wavelength carries a lot of traffic. Therefore, the survivability in multi-domain optical network is very important. However, existing survivable algorithms can achieve only the unilateral optimization for profit of either users or network operators. Then, they cannot well find the double-win optimal solution with considering economic factors for both users and network operators. Thus, in this paper we develop the multi-domain network model with involving multiple Quality of Service (QoS) parameters. After presenting the link evaluation approach based on fuzzy mathematics, we propose the game model to find the optimal solution to maximize the user’s utility, the network operator’s utility, and the joint utility of user and network operator. Since the problem of finding double-win optimal solution is NP-complete, we propose two new hybrid protection algorithms, Intra-domain Sub-path Protection (ISP) algorithm and Inter-domain End-to-end Protection (IEP) algorithm. In ISP and IEP, the hybrid protection means that the intelligent algorithm based on Bacterial Colony Optimization (BCO) and the heuristic algorithm are used to solve the survivability in intra-domain routing and inter-domain routing, respectively. Simulation results show that ISP and IEP have the similar comprehensive utility. In addition, ISP has better resource utilization efficiency, lower blocking probability, and higher network operator’s utility, while IEP has better user’s utility.     

IP接入网

文章给出了IP接入网的定义、功能体系,介绍了IP用户终端和ISP链路层协议,重点讨论了适于支持IP接入的几种方式。     

校园网络安全设计方案

分析了校园网面临的各种安全威胁,并以南通航运职业技术学院校园网为背景,针对各种威胁提出了链路备份、防火墙与入侵检测联动、虚拟专用网、虚拟局域网、交换机端口安全以及网络存储等一系列切实可行的解决方案或建议。     

虚拟专用网络（VPN）技术

虚拟专用网指的是依靠ISP（Internet服务提供商）和其它NSP（网络服务提供商）,在公用网络中建立专用的数据通信网络的技术。在虚拟专用网中,任意两个节点之间的连接,并没有传统专用网所需的端到端的物理链路,而是利用某种公众网的资源动态组成的。VPN利用公共网络基础设施,通过一定的技术手段,达到类似私有专网的数据安全传输。