97¹ú¼Ê

¹¤³§ÑÐѧ Ø­ 97¹ú¼ÊÍøÂçÊý×Ö»¯ÖÇÄܹ¤³§¡°ºÚ¿Æ¼¼¡±´ó½ÒÃØ
Ô¤Ô¼Ö±²¥
¾Ü¾øÓªÒµ¡°µôÁ´×Ó¡±£º2025 97¹ú¼ÊÍøÂç ¡°½µ¹ÊÕÏ?Ç¿·À»¤¡± ÐÐÒµÔËάʵս½»Á÷»á
Ô¤Ô¼Ö±²¥
97¹ú¼Êî£Ò× 97¹ú¼Ê¹Ù·½É̳Ç
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

ÖÐÎÄ

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
  • Global / English
  • France / Fran?ais
  • Germany / Deutsch
  • Indonesia / Indonesian
  • Italy / Italiano
  • Japan / ÈÕ±¾ÕZ
  • Kazakhstan / P§å§ã§ã§Ü§Ú§Û
  • Poland / Polski
  • Portugal / Portugu¨ºs
  • Spain / Espa?ol (Espa?a)
  • Thailand / ???????
  • Vietnam / Vi?t Nam
  • LATAM / Espa?ol
    (Am¨¦rica Latina)
  • T¨¹rkiye / T¨¹rk?e
  • Brazil / Portugu¨ºs(Brazil)
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·

½»Á÷»ú

½»Á÷»úËùÓвúÆ·
< ·µ»Ø²úÆ·
½»Á÷»úÖ÷Ò³
½»Á÷»ú

ÎÞÏß

ÎÞÏßËùÓвúÆ·
< ·µ»Ø²úÆ·
ÎÞÏßÖ÷Ò³
ÎÞÏß

ÎÞÏß¹ÜÀíÓëÓ¦ÓÃ

ÔÆ×ÀÃæ

ÔÆ×ÀÃæ²úÆ·¼Æ»®ÖÐÐÄ
< ·µ»Ø²úÆ·
ÔÆ×ÀÃæÖ÷Ò³
ÔÆ×ÀÃæ

Çå¾²

Çå¾²ËùÓвúÆ·
< ·µ»Ø²úÆ·
Çå¾²Ö÷Ò³
Çå¾²

ËùÓÐÊÖÒÕ½â¾ö¼Æ»®

·þÎñ²úÆ·

·þÎñ²úÆ·ËùÓвúÆ·
< ·µ»Ø²úÆ·
·þÎñ²úÆ·Ö÷Ò³
·þÎñ²úÆ·
·þÎñÖ§³Ö
< ·µ»ØÖ÷²Ëµ¥
·þÎñÓëÖ§³ÖÖÐÐÄ
·þÎñÓëÖ§³Ö
·þÎñ¹¤¾ß
·þÎñƽ̨
  • ÔÆ×ÀÃæ·þÎñƽ̨
  • î£Ò×·þÎñƽ̨
  • ºÏ×÷»ï°é·þÎñƽ̨
½Ìѧ·þÎñ
  • 97¹ú¼ÊICTÈ˲ŽÌÓýÖÐÐÄ
  • УÆóºÏ×÷
  • ÈÏ֤ϵͳ
  • ÅàѵÍýÏë
ºÏ×÷»ï°é
< ·µ»ØÖ÷²Ëµ¥
ºÏ×÷»ï°éÖÐÐÄ
ºÏ×÷»ï°é
³ÉΪ97¹ú¼Ê»ï°é
ÊÛǰӪÏú
  • Êг¡×ÊÁÏ¿â(ºÏ×÷»ï°é)
  • 97¹ú¼Ê²úÆ·ÉèÖÃÆ÷
  • ÓªÏú×ÊÁÏÆ½Ì¨
  • ÊÛǰÈÏÖ¤
  • ÊÛǰ¹¤¾ß°ü
  • ºÏ×÷»ï°éÀñÎï¿â
  • e-Learning
  • ²úÆ·×ÊÖÊÅÌÎÊ
  • Ô¶³ÌPOC
ÏúÊÛÓë¶©µ¥
ÊÛºó¼°·þÎñ
  • ÊÛºóÈÏÖ¤
  • Êۺ󹤾߰ü
  • RSDP 97¹ú¼Ê·þÎñ½»¸¶Æ½Ì¨
  • ÊÛºó·þÎñÈÏÖ¤
  • ÊÛºó֪ʶƽ̨
  • ÇþµÀ·þÎñ¹ÜÀíϵͳ£¨CSM£©
  • SMBÇþµÀ¿Í»§·þÎñƽ̨£¨CCSP£©
Óû§ÖÐÐÄ
  • ϵͳָµ¼´óÈ«
  • Õ˺ŹÜÀí
  • ÏÂÔØµç×ÓÊÚÈ¨ÅÆ
  • ǩԼÐÅÏ¢Éó²é
  • ×ÊÖÊÅÌÎÊ
  • ǩչÜÀí
  • ·µÀû¹ÜÀí
  • î£Ò×ÊÖÒÕÈÏÖ¤ÅÌÎÊ
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/ÓïÑÔ
  • Global / English
  • Japan / ÈÕ±¾ÕZ
  • T¨¹rkiye / T¨¹rk?e
  • Vietnam / Vi?t Nam
  • Indonesia / Indonesian
  • Thailand / ???????
  • Spain / Espa?ol (Espa?a)
  • Portugal / Portugu¨ºs
  • France / Fran?ais
  • Poland / Polski
  • Kazakhstan / P§å§ã§ã§Ü§Ú§Û
  • Germany / Deutsch
  • Italy / Italiano
  • Brazil / Portugu¨ºs(Brazil)
  • LATAM / Espa?ol (Am¨¦rica Latina))
  • 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

    CSSÇ徲ϵͳÊÖÒհׯ¤Êé

    CSSÇ徲ϵͳÖ÷ÒªÊÇͨ¹ýÓ²¼þÇå¾²¼à¿ØÊÖÒÕ¡¢Ó²¼þÇå¾²·À»¤ÊÖÒÕ¡¢¸»ºñµÄ×°±¸Çå¾²¹ÜÀí°ü¹ÜϵͳµÄÇå¾² £»Í¨¹ýÌṩÍòÕ×λÇå¾²·À»¤Ä£¿é £¬¿ÉÒÔ¶ÔÍøÂçÖеÄÊý¾Ý¾ÙÐÐ2-7²ãµÄÇå¾²¼à¿Ø·À»¤¡£

    • 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

      Ðû²¼Ê±¼ä£º2009-09-25

    • 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

      µã»÷Á¿£º

    • 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

      µãÔÞ£º

    ·ÖÏíÖÁ

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

    ÎÒÏë̸ÂÛ

        ÍøÂçÇå¾²ÎÊÌâÒѾ­³ÉΪÐÅÏ¢»¯Éç»áµÄÒ»¸ö½¹µãÎÊÌâ £¬¸üÊÇÐÅÏ¢»¯Ð£Ô°µÄ½¹µãÎÊÌâ¡£ÏÖÔÚÔ°ÇøÍøÂçÇå¾²µÄÉú³¤Ç÷ÊÆÊÇ“¶à¾üÖÖЭͬ×÷Õ½” £¬Ô°ÇøÍøÂçÖÐËùÓеĻù´¡ÍøÂç×°±¸ÅäºÏÈ¥Ô¤·À¡¢·¢Ã÷Çå¾²ÎÊÌ⡣Ϊ´Ë £¬97¹ú¼ÊÍøÂçÍÆ³öÁËGSNÈ«¾ÖÇå¾²ÍøÂç £¬Í¨¹ýÕûºÏϵͳ²ãÃæºÍÍøÂç²ãÃæµÄÇå¾²ÒòËØ £¬½¨ÉèÈ«¾Ö»¯µÄÇå¾²ÍøÂç¡£¶ø×°±¸¼¶±ðµÄÇå¾²·À»¤ÊÇGSNÈ«¾ÖÇå¾²ÍøÂçµÄÒ»¸öÖ÷Òª×é³É²¿·Ö £¬²¢ÇÒ £¬Ðí¶àµÄÍøÂçÇéÐβ¢Ã»ÓÐÌõ¼þÈ¥°²ÅÅÍêÕûµÄÈ«¾Ö»¯Çå¾²ÍøÂç £¬´Ëʱװ±¸¼¶±ðµÄÇå¾²·À»¤ÏÔµÃÓÈΪÖ÷Òª¡£Îª´Ë £¬97¹ú¼ÊÍøÂçÍÆ³öÁË×°±¸¼¶µÄÇå¾²·À»¤ÏµÍ³—CSSÇ徲ϵͳ £¬Îª×ÔÁ¦×°±¸Ìṩȫ·½Î»µÄÇå¾²·À»¤¡£

      

    1 CSSÇ徲ϵͳ¸ÅÊö

     

        ºÚ¿Í¶ÔÅÌËã»úÍøÂç×é³ÉµÄÍþв¸ÅÂÔ¿É·ÖΪÁ½ÖÖ£ºÒ»ÊǶÔÍøÂçÖÐ×°±¸µÄÍþв,Õë¶Ô×°±¸ÏµÍ³µÄÎó²î»òȱ·¦¾ÙÐй¥»÷,µ¼ÖÂϵͳ²»¿ÉÕý³£ÊÂÇé £¬ÉõÖÁ̱»¾¡£¶þÊǶÔÍøÂçÖÐÐÅÏ¢µÄÍþв £¬ÒÔÖÖÖÖ·½·¨ÓÐÑ¡ÔñµØÆÆËð,ÇÔÈ¡ÍøÂçÖеÄÊý¾ÝÐÅÏ¢¡£CSSÇ徲ϵͳÕýÊÇͨ¹ý´Ó“ϵͳ”ºÍ“Êý¾Ý”Á½·½ÃæµÄÇå¾²ÊÖÒÕÀ´± £»¤ÍøÂçµÄÇå¾²¡£

     

        CSSÇ徲ϵͳÖ÷ÒªÊÇͨ¹ýÓ²¼þÇå¾²¼à¿ØÊÖÒÕ¡¢Ó²¼þÇå¾²·À»¤ÊÖÒÕ¡¢¸»ºñµÄ×°±¸Çå¾²¹ÜÀí°ü¹ÜϵͳµÄÇå¾² £¬Í¨¹ýÓ²¼þµÄËíµÀÊÖÒÕ¡¢ÈÏÖ¤ÊÖÒÕ¡¢¼ÓÃÜÊÖÒÕ± £»¤ÁËÍøÂç×°±¸´«ÊäµÄÊý¾ÝµÄÇå¾²¡£±ðµÄ £¬»¹ÌṩÁËÍòÕ×λµÄÇå¾²·À»¤Ä£¿éͬʱ± £»¤ÏµÍ³ºÍÊý¾Ý¡£Í¨¹ýÌṩÍòÕ×λÇå¾²·À»¤Ä£¿é £¬¿ÉÒÔ¶ÔÍøÂçÖеÄÊý¾Ý¾ÙÐÐ2-7²ãµÄÇå¾²¼à¿Ø·À»¤¡£

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
     

                                      ͼ1-1

     

        Ó²¼þµÄÇå¾²¼à¿ØÊÖÒÕ £¬Ö÷Òª°üÀ¨£ºÓ²¼þIPFIX£¨IP Flow Information Export£© £¬Á÷¼à¿ØºÍ×Ô¶¯Á÷ËÙÂÊ¿ØÖÆ £¬ÏÞÖÆ²»·¨Êý¾ÝÁ÷¡£

     

        Ó²¼þÇå¾²·À»¤ÊÖÒÕ £¬Ö÷ÒªÓУº·ÀDos¹¥»÷¡¢·ÀɨÃè¡¢·ÀÔ´IPµØÖ·ÓÕÆ­¡¢SPOH¡¢CPP¡¢LPM+HDR¡£

     

        ¸»ºñµÄ×°±¸Çå¾²¹ÜÀí £¬Ö÷ÒªÊÇ£ºCPP¡¢SSH¡¢SNMPV3¡¢AAA¡¢¹ÜÀíÔ´IPµØÖ·ÏÞÖÆ¡£
    Ó²¼þËíµÀ¡¢ÈÏÖ¤¡¢¼ÓÃÜ£ºMPLS¡¢VPLS¡¢VPWS¡¢Des¡¢SHA¡£

     

        ÍòÕ×λÇå¾²·À»¤Ä£¿é£ºÍòÕ×λµÄÈëÇÖ¼ì²â¡¢·À»ðǽ¡¢ÍøÂçÆÊÎöÄ£¿é¡£

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
     

                                        Í¼1-2

     

        ÏÂÃæÁÙÖÖÖÖÇå¾²ÊÖÒÕ¾ÙÐÐÏêϸµÄÏÈÈÝ

     

    2 CSSÇ徲ϵͳÐðÊö

     

    2.1 Ó²¼þµÄÇå¾²¼à¿ØÊÖÒÕ

     

        Ó²¼þµÄÇå¾²¼à¿ØÊÖÒÕÖ÷Òª°üÀ¨£ºÓ²¼þIPFIX£¨IP Flow Information Export£© £¬Á÷¼à¿ØºÍ×Ô¶¯Á÷ËÙÂÊ¿ØÖÆ £¬ÏÞÖÆ²»·¨Êý¾ÝÁ÷¡£

     

        ¾ÙÐÐÁ÷Á¿¼à¿ØºÍÁ÷Á¿ÆÊÎöÊÇÕû¸öÍøÂçºÏÀí»¯µÄÖ÷Òª»·½Ú £¬ËüÄÜÔÚ×î¶ÌµÄʱ¼äÄÚ·¢Ã÷Çå¾²Íþв £¬ÔÚµÚһʱ¼ä¾ÙÐÐÆÊÎö £¬Í¨¹ýÁ÷Á¿ÆÊÎöÀ´È·¶¨¹¥»÷ £¬È»ºó·¢³öÔ¤¾¯ £¬¿ìËÙ½ÓÄɲ½·¥¡£ÔõÑùÔÚ½¹µãµÄÍøÂç×°±¸ÉÏ¼à¿ØÁ÷Á¿¡¢ÏÞÖÆÒì³£Á÷Á¿¾Í³ÉÁׯ÷È˹Ø×¢µÄÊÖÒÕÎÊÌâ¡£

     

        ÏÖÔÚÐí¶à³§É̶¼ÓµÓÐ×Ô¼ºË½ÓеÄÁ÷Á¿¼à¿ØÊÖÒÕ £¬ÏñCiscoÓÐNetflow £¬»ªÎªÓÐNetstream £¬JuniperÓÐJ-flow¡£ÕâЩÁ÷Á¿¼à¿ØÊÖÒÕÏ໥²î±ð £¬ÐèÒªºǫ́ÌṩÏìÓ¦µÄ´¦Öóͷ£Èí¼þ £¬¼Ó´óÓû§µÄ°²ÅÅÄѶȺÍÊý¾Ý¼¯³ÉÄÑ¶È £¬ÕâÖÖÇéÐμ«´óµÄ×è°­ÁËÁ÷Á¿¼à¿ØÊÖÒÕµÄÉú³¤¡£

     

        IPFIXÊÇ×îеÄÁ÷Á¿¼à¿ØÊÖÒÕ¹ú¼Ê±ê×¼ £¬ÔÚIPFIXµÄRFC3917±»ÌáÒéÒÔºó £¬IETFÔÚ×öÁ÷Êä³öµÄ±ê×¼»¯ÊÂÇé £¬ÕâÒ²ÊÇÏÖÔÚ¸÷´ó³§É̶¦Á¦´ó¾ÙÍÆ¶¯µÄÒ»¸ö±ê×¼¡£Í¨¹ýIPFIXÕâÖÖ±ê×¼»¯µÄÁ÷Á¿¼à¿ØÊÖÒÕ £¬¸÷¸ö³§É̵ÄÍøÂç×°±¸¿ÉÒÔ½ÓÄÉͳһÖÖÁ÷Á¿¼à¿Ø±ê×¼ £¬¼«´óµØÀû±ãÁËÍøÂçÁ÷Á¿µÄ¼à¿ØºÍÏÖʵ°²ÅÅ¡£

     

        ¹Å°åµÄÊý¾ÝÁ÷Á¿¼à¿ØÊÖÒÕ½ÓÄÉÁËÌØ¶¨µÄÊý¾ÝÊôÐÔÈ¥±êʾһ¸öÊý¾ÝÁ÷¡£ÀýÈç £¬ÓÃÔ´/Ä¿µÄIPµØÖ·¡¢Ô´/Ä¿µÄ¶Ë¿ÚºÅ¡¢Èý²ãЭÒéÀàÐͱêʾһ¸öÊý¾ÝÁ÷£¨ÊÕÂÞÁ÷Á¿µÄʱ¼äÒ²Ö´ÙÕÂÞÏìÓ¦µÄÕ⼸¸öÊôÐÔ£©¡£ÍøÂçÖеÄÊý¾ÝÁ÷Á¿ÓÐ×ÅÖÖÖÖ¸÷ÑùµÄÊôÐÔ £¬Ö»ÊǼòÆÓµÄ½ÓÄÉÌØ¶¨µÄÊôÐÔÈ¥±êʾÊý¾ÝÁ÷²¢²»¿ÉÖÜÈ«ÍêÕûµÄÊÕÂÞ¼à¿ØÁ÷Á¿¡£¿ÉÊÇ £¬ÈôÊǽÓÄɶàÖÖÊôÐÔÈ¥ÌåÏÖÒ»¸öÊý¾ÝÁ÷ £¬ÄÇÊÕÂÞµÄÁ÷Á¿½«»á´ó´óÔöÌí £¬¼«´óµÄÔöÌíÁËÍøÂç×°±¸¡¢´ø¿íºÍÉϲã·þÎñÆ÷µÄѹÁ¦¡£

     

        IPFIX½ÓÄÉÁ˓ģ°å”µÄÃûÌÃÎÞаµÄ½ç˵һ¸öÊý¾ÝÁ÷¡£ÔÚIPFIXµÄÊý¾Ý½á¹¹ÖÐ £¬ÍøÂç¹ÜÀíÔ±¿ÉÒÔÔÚ“Ä£°å”ÖÐÎÞаµÄ½ç˵ÏëÊÕÂÞµÄÍøÂçÁ÷Á¿µÄÊôÐÔ £¬È»ºóÔÚÊä³öµÄÊý¾ÝÁ÷ÖпÉÒÔ°üÀ¨Òѽç˵µÄ“Ä£°å”ÒÔ¼°Ïà¶ÔӦģ°åµÄÊý¾ÝÁ÷ £¬Í¨¹ýÕâÖÖ·½·¨ £¬ÍøÂç¹ÜÀíÔ±¿ÉÒÔ×ÔÓɵÄÌí¼Ó¸ü¸ÄÓò£¨Ìí¼Ó»ò¸ü¸ÄÌØ¶¨µÄ²ÎÊý»òЭÒ飩 £¬ÒÔ±ã¸üÀû±ãµØ¼à¿ØIPÁ÷Á¿µÄÐÅÏ¢¡£ÁíÒ»·½Ãæ £¬ÓÉÓÚÊäÌØÊâʽ¾ßÓпÉÀ©Õ¹ÐÔ £¬Òò´ËÈôÊÇÁ÷Á¿¼à¿ØµÄÒªÇ󱬷¢¸Ä±ä £¬ÍøÂç¹ÜÀíÔ±ÃÇÒ²²»±ØÉý¼¶ËûÃǵÄ·ÓÉÆ÷Èí¼þ»ò¹ÜÀí¹¤¾ß¡£

     

        97¹ú¼ÊÍøÂçÊ®ÍòÕײúÆ·µÄIPFIXÊÖÒÕÊÇͨ¹ýÔÚÿ¸öÏß¿¨¶ÔÊý¾ÝÁ÷Á¿¾ÙÐÐÊÕÂÞ £¬¹ýÂË £¬È»ºó°ÑÊÕÂÞµ½µÄÊý¾Ý·¢Ë͵½½»Á÷»úµÄ¶àÓªÒµ¿¨ÉϾÙÐÐÆðÔ´ÆÊÎöͳ¼Æ £¬×îºó·¢Ë͵½Éϲã·þÎñÆ÷¾ÙÐÐÊý¾ÝÍøÂçͳ¼Æ £¬ÏÔʾ³öͼÐλ¯µÄЧ¹û¡£Í¨¹ýÏß¿¨ÍøÂçÊÕÂÞÊý¾Ý £¬ÓÉÓªÒµ¿¨¾ÙÐÐÆðÔ´ÆÊÎö £¬×îºóÓÉÉϲã·þÎñÆ÷ÍøÂçͳ¼ÆÊý¾Ý¡¢ÏÔʾЧ¹û £¬ÕæÕýʵÏÖÁËÂþÑÜʽµÄÁ÷Á¿¼à¿ØÊÖÒÕ¡£

     

        ʹÓÃIPFIXÊÖÒÕ £¬Í¨¹ý¶ÔÍøÂçÖ÷¸ÉÁ´Â·µÄÁ÷Á¿¼à¿Ø £¬Óɽ»Á÷»ú½«ÊÕÂÞµÄÊý¾Ý·¢Ë͵½Éϲã·þÎñÆ÷ £¬Æ¾Ö¤ÊÕÂÞµÄÊý¾Ý¾ÙÐÐģʽƥÅä¡¢»ùÏ߯ÊÎöµÈ £¬¿ÉÒÔ¾ÙÐÐDoS/DDoS¹¥»÷ºÍÈ䳿µÈ²¡¶¾¼ì²â £¬Í¬Ê±ÍŽá¼Í¼µÄÔ´Êý¾Ý°üÏà¹ØÌØÕ÷¿ìËÙ¶¨Î»ÍøÂçÖеÄÒì³£ÐÐΪ¡£

     

    2.2 Ó²¼þÇå¾²·À»¤ÊÖÒÕ

     

        Ó²¼þµÄÇå¾²·À»¤ÊÖÒÕ £¬Ö÷Òª°üÀ¨£º·ÀDos¹¥»÷¡¢·ÀɨÃè¡¢·ÀÔ´IPµØÖ·ÓÕÆ­¡¢SPOH¡¢CPP¡¢LPM+HDR

     

        Ëæ×ÅÍøÂçµÄÉú³¤ £¬ÏÖÔÚÕë¶ÔÍøÂçÖеÄЭÒéÒÔ¼°ÏµÍ³Îó²îµÄ¹¥»÷ÊֶΡ¢ÃûÌÃÒ²Ô½À´Ô½¶à £¬97¹ú¼ÊÍøÂçµÄÊ®ÍòÕײúƷͨ¹ý½ÓÄÉרÃÅÕë¶Ô¹¥»÷ÊÖ¶ÎÉè¼ÆµÄASICоƬÕë¶ÔÍøÂçÖеÄÖÖÖÖ¹¥»÷¾ÙÐÐÇå¾²µÄ·À»¤ £¬°ü¹ÜÔÚ´¦Öóͷ£Çå¾²ÎÊÌâµÄͬʱÒÀÈ»²»Ó°ÏìÍøÂçÕý³£Êý¾ÝµÄת·¢¡£

     

        97¹ú¼ÊÊ®ÍòÕײúÆ·¿ÉÒÔʵÏÖ¶ÔDoS¹¥»÷¡¢É¨Ãè¡¢Ô´IPµØÖ·ÓÕÆ­µÈ¹¥»÷ÊֶεķÀ»¤ £¬Í¨¹ýCPP£¨Control Plane Policy£©ÊÖÒÕ £¬Í¨¹ýÓ²¼þ·½·¨¶Ô·¢ÍùCPUµÄÖÖÖÖÊý¾Ý¾ÙÐпØÖÆ £¬°ü¹ÜÁËCPUµÄÇå¾²Îȹ̵ÄÔËÐС£±ðµÄ»¹¼ÌÐøÁËÔ­À´ÍòÕײúÆ·µÄSPOHÊÖÒÕ¡¢LPM+HDRÊÖÒÕ¡£

     

        SPOH¼´»ùÓÚÓ²¼þµÄͬ²½Ê½´¦Öóͷ£ÊÖÒÕ £¬ÔÚÏß¿¨µÄÿ¸ö¶Ë¿ÚÉÏʹÓÃFFPÓ²¼þ¾ÙÐÐÇå¾²·À»¤ºÍÖÇÄܰü¹Ü £¬¸÷¶Ë¿Ú¿ÉÒÔͬ²½µØ¡¢²»Ó°ÏìÕû»úÐÔÄܵؾÙÐÐÓ²¼þ´¦Öóͷ£¡£×ƥÅ䣨LPM£©ÊÖÒÕ½â¾öÁË“Á÷׼ȷƥÅ䔵ÄÈõµã £¬Ö§³ÖÒ»¸öÍø¶ÎʹÓÃÒ»¸öÓ²¼þת½ÒÏþÏî £¬¶Å¾øÁ˹¥»÷ºÍ²¡¶¾¶ÔÓ²¼þ´æ´¢¿Õ¼äµÄΣº¦¡£HDRÑïÆúÁ˹Ű巽·¨CPU¼ÓÈë“Ò»´Î·ÓÉ”µÄЧÂÊÓ°Ïì £¬ÔÚ·ÓÉת·¢Ç°ÐγÉ·ÓɱíÏî £¬×èÖ¹Á˹¥»÷ºÍ²¡¶¾¶ÔCPUʹÓÃÂʵÄΣº¦¡£LPM+HDRÊÖÒÕµÄÍŽ᲻µ«¼«´óµØÌáÉýÁË·ÓÉЧÂÊ £¬²¢ÇÒ°ü¹Ü×°±¸ÔÚ²¡¶¾ºÍ¹¥»÷ÇéÐÎϵÄÎȹÌÔËÐС£

     

    2.2.1 ·ÀDoS¹¥»÷

     

        Ö÷Òª¿ÉÒÔ·À»¤Land¹¥»÷¡¢·À²»·¨TCP±¨ÎĹ¥»÷¡¢·ÀÔ´IPµØÖ·ÓÕÆ­¡£

     

    Land¹¥»÷

     

        Land¹¥»÷Ö÷ÒªÊǹ¥»÷Õß½«Ò»¸öSYN°üµÄÔ´µØÖ·ºÍÄ¿µÄµØÖ·¶¼ÉèÖÃΪĿµÄÖ÷»úµÄµØÖ· £¬Ô´ºÍÄ¿µÄ¶Ë¿ÚºÅÉèÖÃΪÏàֵͬ £¬Ôì³É±»¹¥»÷Ö÷»úÒòÊÔͼÓë×Ô¼º½¨ÉèTCPÅþÁ¬¶øÏÝÈëËÀÑ­»· £¬ÉõÖÁϵͳÍ߽⡣97¹ú¼ÊÍøÂçÊ®ÍòÕײúƷͨ¹ýÑïÆúÔ´ºÍÄ¿µÄIPÏàͬµÄIPv4/IPv6Êý¾Ý°ü¡¢ÑïÆúÔ´ºÍÄ¿µÄTCP/UDP¶Ë¿ÚÏàͬµÄIPv4/IPv6Êý¾Ý°üµÄ·½·¨ÓÐÓõıÜÃâÁËLand¹¥»÷

     

    ²»·¨TCP±¨ÎĹ¥»÷

     

        ÔÚTCP±¨Îĵı¨Í·ÖÐ £¬Óм¸¸ö±ê¼Ç×ֶΣº

     

        1. SYN£ºÅþÁ¬½¨Éè±ê¼Ç £¬TCP SYN±¨ÎľÍÊǰÑÕâ¸ö±ê¼ÇÉèÖÃΪ1 £¬À´ÇëÇó½¨ÉèÅþÁ¬ £»

     

        2. ACK£º»ØÓ¦±ê¼Ç £¬ÔÚÒ»¸öTCPÅþÁ¬ÖÐ £¬³ýÁ˵ÚÒ»¸ö±¨ÎÄ£¨TCP SYN£©Íâ £¬ËùÓб¨ÎͼÉèÖøÃ×Ö¶Î £¬×÷Ϊ¶ÔÉÏÒ»¸ö±¨ÎĵÄÏìÓ¦ £»

     

        3. FIN£º¿¢Ê±ê¼Ç £¬µ±Ò»Ì¨ÅÌËã»úÎüÊÕµ½Ò»¸öÉèÖÃÁËFIN±ê¼ÇµÄTCP±¨Îĺó £¬»á²ð³ýÕâ¸öTCPÅþÁ¬ £»

     

        4. RST£º¸´Î»±ê¼Ç £¬µ±IPЭÒéÕ»ÎüÊÕµ½Ò»¸öÄ¿µÄ¶Ë¿Ú²»±£´æµÄTCP±¨ÎĵÄʱ¼ä £¬»á»ØÓ¦Ò»¸öRST±ê¼ÇÉèÖõı¨ÎÄ £»

     

        5. PSH£ºÍ¨ÖªÐ­ÒéÕ»¾¡¿ì°ÑTCPÊý¾ÝÌá½»¸øÉϲã³ÌÐò´¦Öóͷ£¡£

     

        Ðí¶à¹¥»÷Êý¾Ýͨ¹ý²»·¨ÉèÖñê¼Ç×Ö¶ÎÖÂʹÖ÷»ú´¦Öóͷ£µÄ×ÊÔ´ÏûºÄÉõÖÁϵͳÍ߽⠣¬ÀýÈçÒÔϼ¸ÖÖ¾­³£ÉèÖõIJ»·¨TCP±¨ÎÄ¡£

     

    SYN±ÈÌØºÍFIN±ÈÌØÍ¬Ê±ÉèÖÃ

     

        Õý³£ÇéÐÎÏ £¬SYN±ê¼Ç£¨ÅþÁ¬ÇëÇó±ê¼Ç£©ºÍFIN±ê¼Ç£¨ÅþÁ¬²ð³ý±ê¼Ç£©ÊDz»¿Éͬʱ·ºÆðÔÚÒ»¸öTCP±¨ÎÄÖеÄ¡£²¢ÇÒRFCҲûÓл®¶¨IPЭÒéÕ»ÈçÄÇÀïÖÃÕâÑùµÄ»ûÐα¨ÎÄ £¬Òò´Ë £¬¸÷¸ö²Ù×÷ϵͳµÄЭÒéÕ»ÔÚÊÕµ½ÕâÑùµÄ±¨ÎĺóµÄ´¦Öóͷ£·½·¨Ò²²î±ð £¬¹¥»÷Õ߾ͿÉÒÔʹÓÃÕâ¸öÌØÕ÷ £¬Í¨¹ý·¢ËÍSYNºÍFINͬʱÉèÖõı¨ÎÄ £¬À´ÅжϲÙ×÷ϵͳµÄÀàÐÍ £¬È»ºóÕë¶Ô¸Ã²Ù×÷ϵͳ £¬¾ÙÐнøÒ»²½µÄ¹¥»÷¡£

     

    ûÓÐÉèÖÃÈκαê¼ÇµÄTCP±¨ÎĹ¥»÷

     

        Õý³£ÇéÐÎÏ £¬ÈκÎTCP±¨Îͼ»áÉèÖÃSYN £¬FIN £¬ACK £¬RST £¬PSHÎå¸ö±ê¼ÇÖеÄÖÁÉÙÒ»¸ö±ê¼Ç £¬µÚÒ»¸öTCP±¨ÎÄ£¨TCPÅþÁ¬ÇëÇó±¨ÎÄ£©ÉèÖÃSYN±ê¼Ç £¬ºóÐø±¨ÎͼÉèÖÃACK±ê¼Ç¡£ÓеÄЭÒéÕ»»ùÓÚÕâÑùµÄ¼ÙÉè £¬Ã»ÓÐÕë¶Ô²»ÉèÖÃÈκαê¼ÇµÄTCP±¨ÎĵĴ¦Öóͷ£Àú³Ì £¬Òò´Ë £¬ÕâÑùµÄЭÒéÕ»ÈôÊÇÊÕµ½ÁËÕâÑùµÄ±¨ÎÄ £¬¿ÉÄÜ»áÍ߽⡣¹¥»÷ÕßʹÓÃÁËÕâ¸öÌØµã £¬¶ÔÄ¿µÄÅÌËã»ú¾ÙÐй¥»÷¡£

     

    ÉèÖÃÁËFIN±ê¼ÇȴûÓÐÉèÖÃACK±ê¼ÇµÄTCP±¨ÎĹ¥»÷

     

        Õý³£ÇéÐÎÏ £¬ACK±ê¼ÇÔÚ³ýÁ˵ÚÒ»¸ö±¨ÎÄ£¨SYN±¨ÎÄ£©Íâ £¬ËùÓеı¨ÎͼÉèÖà £¬°üÀ¨TCPÅþÁ¬²ð³ý±¨ÎÄ£¨FIN±ê¼ÇÉèÖõı¨ÎÄ£©¡£µ«ÓеĹ¥»÷ÕßÈ´¿ÉÄÜÏòÄ¿µÄÅÌËã»ú·¢ËÍÉèÖÃÁËFIN±ê¼ÇȴûÓÐÉèÖÃACK±ê¼ÇµÄTCP±¨ÎÄ £¬ÕâÑù¿ÉÄܵ¼ÖÂÄ¿µÄÅÌËã»úÍ߽⡣

     

        97¹ú¼ÊÍøÂçÊ®ÍòÕײúÆ·ÔÚ½»Á÷»úÖпÉÒÔÒÔÓ²¼þµÄ·½·¨ÊµÏÖÑïÆúSYN±ÈÌØºÍFIN±ÈÌØÍ¬Ê±ÉèÖõÄTCP±¨ÎÄ¡¢ÑïÆúûÓÐÉèÖÃÈκαê¼ÇµÄTCP±¨ÎÄ¡¢ÑïÆúÉèÖÃÁËFIN±ê¼ÇȴûÓÐÉèÖÃACK±ê¼ÇµÄTCP±¨ÎĹ¥»÷´Ó¶ø°ü¹Ü²»·¨µÄTCP±¨ÎIJ»»á¾­Óɽ¹µã½»Á÷»ú´«Êäµ½ÍøÂçµÄÆäËûÇøÓò £¬Í¬ÑùÒ²¿É°ü¹ÜÕë¶Ô½»Á÷»ú×Ô¼º¹¥»÷µÄ²»·¨TCP±¨ÎIJ»»áÓ°Ïìµ½½»Á÷»ú×Ô¼º¡£

     

    ·ÀÔ´IPµØÖ·ÓÕÆ­

     

        ´ÓÑÏ¿áÒâÒåÉÏÀ´Ëµ £¬IPÔ´µØÖ·ÓÕÆ­²¢²»ÊÇÒ»ÖÖÍøÂç¹¥»÷·½·¨ £¬¶øÊÇÍøÂç¹¥»÷ʱΪÁ˵ִïÍøÂç¹¥»÷Ä¿µÄ½ÓÄɵÄÊÖÒÕÊֶΡ£

     

        µ±Ä¿µÄÖ÷ÉñÃØÓëÔ´Ö÷»ú¾ÙÐÐͨѶʱ £¬ËüÒÔÎüÊÕµ½µÄIP°üµÄIPÍ·ÖÐIPÔ´µØÖ·×÷ΪÆä·¢Ë͵ÄIP°üµÄÄ¿µÄµØÖ· £¬À´ÓëÔ´Ö÷»ú¾ÙÐÐÊý¾ÝͨѶ¡£IPµÄÕâÖÖÊý¾ÝͨѶ·½·¨ËäÈ»ºÜÊǼòÆÓºÍ¸ßЧ £¬µ«ËüͬʱҲ×é³ÉÁËÒ»¸öIPÍøÉϵÄÇå¾²Òþ»¼ £¬Ô´IPµØÖ·ÓÕÆ­µÄ»ùÀ´Ô´Àí¾ÍÊÇʹÓÃIP°ü´«ÊäʱµÄÎó²î £¬¼´ÔÚIP°üת·¢µÄʱ¼ä·ÓÉ×°±¸Ò»Ñùƽ³£²»¾ÙÐÐÔ´IPµØÖ·µÄÑéÖ¤ £¬ÔÚÓë¶Ô·½Ö÷»úͨѶµÄʱ¼äαÔì²»ÊôÓÚ±¾»úµÄIPµØÖ·¾ÙÐÐÓÕÆ­¡£

     

        ¿ÉÒÔËµÍøÂçÖд󲿷ֹ¥»÷¶¼ÊÇÓÉ´ó´ó¶¼µÄ¹¥»÷¶¼Í¨¹ýαÔìÔ´IPµÄ·½·¨×îÏÈÌᳫ¡£

     

        Ê®ÍòÕײúÆ·½ÓÄÉÈýÖÖ·½·¨ÓÐÓõıÜÃâÁËÔ´IPµØÖ·¹¥»÷

     

        ÔÚ½»Á÷»úÖÐʵÏÖÁËRFC2827 £¬Íø¹ØÑïÆúÔ´IP·Ç±¾Íø¶ÎµÄÊý¾Ý°ü £¬¿ÉÒÔÓÐÓõرÜÃâ±¾Íø¶ÎµÄ¹¥»÷ÕßÌᳫµÄαÔìÔ´IPµØÖ·µÄ¹¥»÷¡£

     

        µØÖ·°ó¶¨ £¬°üÀ¨IP£«MAC£«¶Ë¿ÚµÄ°ó¶¨ºÍIP£«MACµÄ°ó¶¨ £¬Í¨¹ý¶ÔÖ÷»úµÄIPµØÖ·ºÍMACµØÖ·µÄ°ó¶¨ £¬¿ÉÒÔ°ü¹ÜÔÚÍâµØÍøÂçÖо­Óɽ¹µã½»Á÷»ú´«ÊäµÄÊý¾Ý¶¼ÊǵÄ׼ȷµÄÖ÷»ú·¢³öµÄ¡£²»·¨µÄÊý¾Ý½«»áÑïÆú¡£

     

        802.1x £¬ÍŽáÎÒ˾µÄSAMƽ̨¿ÉÒÔʵÏÖÓû§Õ˺š¢MACµØÖ·¡¢IPµØÖ·¡¢½»Á÷»úIP¡¢½»Á÷»ú¶Ë¿ÚµÈ¶àÔªËØÖ®¼äµÄÎÞаí§Òâ°ó¶¨ £¬¿ÉÓÐÓÿØÖÆÓû§µÄ½ÓÈë £¬È·¶¨Óû§µÄΨһÐÔ £¬Èç¸ßУ¡¢Õþ¸®»ú¹¹¡¢¿í´øÐ¡ÇøµÈ £¬°ü¹Ü²»»áÓв»·¨Î±ÔìµÄÔ´IPµØÖ·ÓÕÆ­µÄÊý¾ÝÁ÷Á¿Í¨¹ý¡£

     

    2.2.2 CPP £¬¿ØÖÆÆ½Ãæ± £»¤

     

        Ö»¹Üͨ¹ý¼ÓÃÜÈÏÖ¤¿ÉÒÔ± £»¤ÍøÂçÖеÄͨѶЭÒé £¬¿ÉÊÇËü²¢²»¿ÉÍêÈ«µÄ±ÜÃâ²»·¨¶ñÒâÓû§¶Ô·ÓÉÒýÇæ£¨CPU£©ÉÏÌØ¶¨Ð­ÒéµÄ¹¥»÷¡£ÀýÈç £¬¹¥»÷ÕßÈÔ¿ÉÒÔʹÓÃαÔìµÄÊý¾Ý°üÃé×¼ÏêϸЭÒé £¬Ïò·ÓÉÆ÷·¢¶¯¹¥»÷¡£Ö»¹ÜÕâЩÊý¾Ý°üÎÞ·¨Í¨¹ý¼øÈ¨¼ì²é £¬¿ÉÊǹ¥»÷ÈÔ¿ÉÒÔÏûºÄCPUÉϵÄ×ÊÔ´(CPUÑ­»·ºÍͨѶÐÐÁÐ) £¬Òò´ËÔÚijÖÖˮƽÉϵִ﹥»÷µÄÄ¿µÄ¡£

     

        97¹ú¼ÊÍøÂçÊ®ÍòÕײúƷͨ¹ýÓ²¼þµÄ·½·¨¶Ô·¢Íù¿ØÖÆÆ½ÃæµÄÊý¾Ý¾ÙÐзÖÀà £¬°Ñ²î±ðµÄЭÒéÊý¾Ý¹éÀൽ²î±ðµÄÐÐÁÐÈ»ºó¶Ô²î±ðµÄÐÐö¾ÙÐÐÏÞËÙ £¬×¨ÃŶÔ·ÓÉÒýÇæ¾ÙÐб £»¤ £¬×èµ²Íâ½çµÄ DOS ¹¥»÷¡£²¢ÇÒ²¢²»Ó°Ïìת·¢ËÙÂÊ £¬ÒÔÊÇCPPÄܹ»ÔÚ²»ÏÞÖÆÐÔÄܵÄÌõ¼þÏ £¬ÎÞаÇÒÓÐÁ¦µÄ±ÜÃâ¹¥»÷ £¬²¢ÇÒ°ü¹ÜÁË×ÝÈ»Óдó¹æÄ£¹¥»÷Êý¾Ý·¢ÍùCPUµÄʱ¼äÒÀÈ»¿ÉÒÔÔÚ½»Á÷»úÄÚ²¿¶ÔÊý¾Ý¾ÙÐÐÇø·Ö¶ÔÍâ¡£

     

    CPPÌṩÈýÖÖ± £»¤ÒªÁì £¬À´± £»¤CPUµÄʹÓÃÂÊ¡£

     

        1. ¿ÉÒÔÉèÖÃCPU½ÓÊÜÊý¾ÝÁ÷µÄ×Ü´ø¿í £¬´ÓÈ«¾ÖÉϱ £»¤CPU¡£

     

        2. ¿ÉÒÔ×°±¸QOSÐÐÁÐ £¬ÎªÃ¿ÖÖÐÐÁÐÉèÖôø¿í¡£

     

        3. ΪÿÖÖÀàÐ͵ı¨ÎÄÉèÖÃ×î´óËÙÂÊ¡£

     

    ÏêϸʵÏÖ·½·¨ÈçÏ£º

     

        1. Õë¶Ô²î±ðµÄϵͳ±¨ÎľÙÐзÖÀà¡£CPP¿ÉÕë¶Ôarp¡¢bpdu¡¢dhcp¡¢igmp¡¢rip¡¢ospf¡¢pim¡¢gvrp¡¢vvrpµÄ±¨ÎľÙÐзÖÀà £¬²¢»®·ÖÉèÖòî±ðµÄ´ø¿í¡£

     

        2. CPU¶Ë¿Ú¹²ÓÐ8¸öÓÅÏȼ¶ÐÐÁÐ(queue) £¬Äú¿ÉÒÔÉèÖÃÿÖÖÀàÐ͵ı¨ÎĶÔÓ¦µÄÐÐÁÐ £¬Ó²¼þ½«Æ¾Ö¤ÄúµÄÉèÖÃ×Ô¶¯µØ½«ÕâÖÖÀàÐ͵ı¨ÎĵÄË͵½Ö¸¶¨ÐÐÁÐ £¬²¢¿É»®·ÖÉèÖÃÐÐÁеÄ×î´óËÙÂÊ¡£
    ÐÐÁеĵ÷Àí¿ÉÒÔ½ÓÄɵÄËã·¨ÓÐSP £¬SP+WRR £¬WRR £¬DRR £¬SP+DRRµÈ¡£

     

        3. ¿ÉÒÔÉèÖÃCPU¶Ë¿ÚµÄ×ܵĴø¿í £¬´ÓÈ«¾ÖÉϱ £»¤CPU¡£

     

        ±ðµÄ £¬»¹¼ÌÐøÁËÔ­ÓÐRG-S6800EϵÁеÄÇå¾²ÊÖÒÕÈçSPOH £¬LPM+HDR¡£

     

    SPOH

     

        ¼´»ùÓÚÓ²¼þµÄͬ²½Ê½´¦Öóͷ£ÊÖÒÕ¡£Ô°ÇøÍøµÄÖÐÓÐÎå´óÀàÊý¾Ý´¦Öóͷ£ÐÐΪL2/L3/ACL/QOS/×é²¥ £¬ÆäÖÐL2/L3/×é²¥µÈ¹¦Ð§ÌṩµÄÊÇÊý¾ÝÔÚ²î±ð¶Ë¿ÚÖ®¼äµÄת·¢´¦Öóͷ£ £¬Êý¾ÝµÄ´¦Öóͷ£ÓëÏà¹ØµÄ¶à¸ö¶Ë¿Ú¶¼ÓйØÁª £¬ÐèҪͬʱÔÚ²î±ð¶Ë¿ÚÖ®¼äЭµ÷ºÃ³ä·ÖµÄ×ÊÔ´²Å»ª°ü¹ÜÏßËÙµÄת·¢ £¬ÐèҪΪÏà¹Ø¶Ë¿ÚÌṩͳһµ÷Àí´¦Öóͷ£¡£ACLºÍQOSµÈ¹¦Ð§ÌṩµÄÊÇÕë¶Ôµ¥¶À¶Ë¿ÚµÄÊý¾Ý´¦Öóͷ£ÐÐΪ £¬Êý¾ÝµÄ´¦Öóͷ£ÓëÆäËü¶Ë¿ÚûÓÐÈκιØÏµ¡£

     

        SPOHÊÖÒÕÕë¶ÔACL¡¢QOSµÈÕë¶Ôµ¥¶À¶Ë¿ÚµÄÊý¾Ý´¦Öóͷ£ÐÐΪ £¬Í¨¹ýΪASICоƬ¸÷¶Ë¿ÚÔöÌí¿ÉÒÔ×ÔÁ¦Ó²¼þ´¦Öóͷ£ACL/QOS¹¦Ð§µÄFFPÄ£¿é£¨fast filter processor£© £¬¸÷¶Ë¿Ú¾Í¿ÉÒÔͬ²½µØ¾ÙÐÐÕâЩ¹¦Ð§µÄÓ²¼þ´¦Öóͷ£¡£

     

        SPOHÉè¼Æ°ü¹ÜÁËÔÚ²¡¶¾ÇéÐκÍÖØ´ó´óÊý¾ÝÁ¿ÇéÐÎÏ £¬×ÝÈ»ÆôÓÃÁË´ó×ÚµÄACLºÍQOS¹¦Ð§ £¬

     

        CPUÌåÏֺ㶨 £¬²¢ÇÒ²»»áÓ°ÏìÕû»ú´¦Öóͷ£ÐÔÄÜ £¬´ó´óÌáÉýÁ˲úÆ·µÄÇå¾²·À»¤ÄÜÁ¦¡£

     

    LPM+HDR

     

        ×ƥÅ䣨LPM£©Èý²ã½»Á÷ÊÖÒÕ¿ÉÒÔ½â¾ö¹Å°å·½·¨“¶à´Î½»Á÷”ÖнÓÄÉ“Á÷׼ȷƥÅä”¶ø´øÀ´´æ´¢¿Õ¼äѹÁ¦¹ý´óµÄÎÊÌâ¡£×ƥÅ䣨LPM£©ÊÖÒÕÖ§³Ö¾²Ì¬Â·ÓÉ¡¢¶¯Ì¬Ñ§Ï°µ½µÄ·Óɶ¼Ö±½ÓÒÔÍø¶ÎÐÎʽ´æ´¢ÓÚÓ²¼þת½ÒÏþ £¬Ò»¸öÄ¿µÄÍø¶ÎʹÓÃÒ»¸öת½ÒÏþÏî £¬¶øÖ±Á¬Íø¶Î½öÌìÉú±íÏîÄÚÈÝΪ“Ä¿µÄIPµØÖ·”µÄÖ÷»úת½ÒÏþ £¬¹ØÓÚÆäËü²»Ã÷Ä¿µÄÍø¶ÎIPµØÖ·µÄÊý¾Ý°üÖ±½Óͨ¹ýÓ²¼þȱʡ·ÓÉת·¢¡£Òò´Ë £¬LPMÊÖÒÕµÄÓŵãÊǼ«´óµØ½ÚÔ¼´æ´¢¿Õ¼ä £¬²¡¶¾ºÍ¹¥»÷Êý¾Ý¿ÉÒÔͨ¹ýÓ²¼þÍø¶Î·ÓÉ»òȱʡ·ÓɾÙÐÐת·¢ £¬²»ÔöÌíÌØÁíÍâÓ²¼þ±íÏî £¬×èÖ¹ÁË´æ´¢Òç³öÎÊÌâ £¬°ü¹Ü×°±¸µÄÕý³£ÔËÐС£

     

        ÔÚLPMÊÖÒÕÖÐÒÀÈ»±£´æÁËCPU¼ÓÈëÒ»´Î·ÓɵÄÐèÒª £¬ËäȻÿ¸öÍø¶ÎÖ»ÓÐÒ»´ÎCPU¼ÓÈëµÄÐèÒª £¬¿ÉÊÇÔÚÈý²ã×°±¸ÓµÓÐÖ±Á¬Íø¶Î £¬Ö÷»úת½ÒÏþÊýÄ¿½ÏÁ¿¶àµÄÇéÐÎÏ £¬CPUµÄµÚÒ»´Î¼ÓÈëÒÀÈ»»á¶ÔÈý²ãת·¢µÄ´¦Öóͷ£Ð§Âʱ¬·¢Ò»Ð©Ó°Ïì £¬HDRÊÖÒÕ¿ÉÒÔ½øÒ»²½ÓÅ»¯LPMÊÖÒյĴ¦Öóͷ£Ð§ÂÊ £¬Ö÷»úÖ±½Ó·ÓÉ£¨HDR£ºHost direct Route£©ÓÃÓÚ½â¾öCPU¼ÓÈë“Ò»´Î·ÓÉ”µÄȱ·¦¡£Ö÷»úÖ±½Ó·ÓÉ£¨HDR£©Ö§³ÖÈý²ã×°±¸ÔÚ×ƥÅäÓ²¼þת·¢ÖеÄÏÂÒ»Ìø½ÚµãºÍÊý¾Ýת·¢³ö¿ÚÔËÐÐARPЭÒéʱ°Ñ¶ÔÓ¦µÄMACµØÖ·Ö±½ÓÏÂÔØµ½Ó²¼þת½ÒÏþ¡£Òò´Ë £¬Ã»ÓÐÁ˵ÚÒ»´ÎCPU¼ÓÈë·ÓɵÄЧÂÊÓ°Ïì £¬ÍøÂçÖеÄËùÓÐÖ÷»ú£¨Host£©¶¼¿ÉÒÔͨ¹ý×ƥÅäÓ²¼þת½ÒÏþ¾ÙÐÐÖ±½ÓµÄÈý²ãת·¢¡£

     

        LPM+HDRÈý²ã½»Á÷ÊÖÒÕ²»ÐèÒªCPU¼ÓÈë¡¢½ÚÔ¼ÁË»º´æ¿Õ¼ä £¬²»µ«¼«´óµØÌá¸ßÁË·ÓÉЧÂÊ £¬²¢ÇÒ×èÖ¹Á˲¡¶¾ºÍ¹¥»÷¶ÔÍøÂç×°±¸×Ô¼ºµÄÓ°Ïì £¬Ìá¸ß×°±¸µÄÎȹÌÐÔ¡£

     

    2.3 ¸»ºñµÄ×°±¸Çå¾²¹ÜÀí

     

        CPPÊÖÒÕ £¬°ü¹ÜÔÚ´óÊý¾ÝÁ÷Á¿µÄÍøÂçÇéÐÎÏ £¬·¢ÍùCPUµÄÊý¾Ý¶¼¾­ÓɺÏÀíµÄµ÷Àí¡¢ÏÞËÙ £¬Ê¹CPUÔÚÈκÎÇéÐÎ϶¼²»»á·ºÆð¹ýÔØµÄÇéÐÎ £¬¼«´óµØ°ü¹ÜÁ˽¹µã×°±¸µÄÎȹÌÐÔ¡£

     

        ÌṩSSHv1/v2µÄ¼ÓÃÜÉϰ¶ºÍ¹ÜÀí¹¦Ð§ £¬ÔÚÔ¶³ÌµÇ¼װ±¸µÄʱ¼ä·¢Ë͵ÄÊý¾Ý¶¼ÊǾ­ÓÉÉñÃØµÄ £¬×èÖ¹¹ÜÀíÐÅÏ¢Ã÷ÎÄ´«ÊäÒý·¢µÄDZÔÚÍþв¡£

     

        Telnet/WebµÇ¼µÄÔ´IPÏÞÖÆ¹¦Ð§ £¬ÏÞÖÆÖ»ÓÐÕýµ±IPµÄÖն˲ŻªÉϰ¶¹ÜÀí×°±¸ £¬×èÖ¹²»·¨Ö°Ô±¶ÔÍøÂç×°±¸µÄ¹ÜÀí¡£

     

        SNMPV3Ìṩ¼ÓÃܺÍÅбð¹¦Ð§ £¬¿ÉÒÔÈ·±£Êý¾Ý´ÓÕýµ±µÄÊý¾ÝÔ´·¢³ö £¬È·±£Êý¾ÝÔÚ´«ÊäÀú³ÌÖв»±»¸Ä¶¯ £¬²¢ÇÒ¼ÓÃܱ¨ÎÄ £¬È·±£Êý¾ÝµÄÉñÃØÐÔ¡£

     

    2.4 Ó²¼þËíµÀ¡¢ÈÏÖ¤¡¢¼ÓÃÜ

     

        Êý¾ÝµÄÇå¾²ÊÖÒÕ £¬Ö÷Òª°üÀ¨ËíµÀÊÖÒÕ¡¢ÈÏÖ¤ÊÖÒÕ¡¢¼ÓÃÜÊÖÒÕ¡£ËíµÀÊÖÒÕÖ÷Òª°üÀ¨MPLS¡¢VPLS¡¢VPWS £¬ÈÏÖ¤ÊÖÒÕÖ÷Òª°üÀ¨MD5¼ÓÃÜËã·¨ £¬¼ÓÃÜÊÖÒÕÖ÷ÒªÓÐDes¡¢3Des¡¢SHAµÈ¼ÓÃÜÊÖÒÕ

     

    2.4.1 ËíµÀÊÖÒÕ

     

        ËíµÀÊÖÒÕ £¬ÓÉÓÚInternetÖÐIPµØÖ·×ÊԴǷȱ £¬ÆóÒµÄÚ²¿ÍøÂçʹÓõĶàΪ˽ÓÐIPµØÖ· £¬´ÓÕâЩµØÖ··¢³öµÄÊý¾Ý°üÊDz»¿Éͨ¹ýInternet´«ÊäµÄ £¬±ØÐè½ÓÄÉÕýµ±IPµØÖ·¡£Íê³ÉÕâÖÖµØÖ·×ª»»µÄ·½·¨ÓжàÖÖ£º¾²Ì¬IPµØÖ·×ª»»¡¢¶¯Ì¬IPµØÖ·×ª»»¡¢¶Ë¿ÚÌæ»»¡¢Êý¾Ý°ü·â×°µÈ¡£ÒªÄܹ»Ê¹µÃÆóÒµÍøÄÚÒ»¸ö¾ÖÓòÍøµÄÊý¾Ý͸Ã÷µØ´©¹ý¹«ÓÃÍøµÖ´ïÁíÒ»¸ö¾ÖÓòÍø £¬ÐéÄâרÓÃÍø½ÓÄÉÁËÒ»ÖÖ³ÆÎªËíµÀµÄÊÖÒÕ¡£ËíµÀÊÖÒյĻù±¾Àú³ÌÊÇÔÚÔ´¾ÖÓòÍøÓ빫ÓÃÍøµÄ½Ó¿Ú´¦½«¾ÖÓòÍø·¢Ë͵ÄÊý¾Ý£¨¿ÉÒÔÊÇISOÆß²ãÄ£×ÓÖеÄÊý¾ÝÁ´Â·²ã»òÍøÂç²ãÊý¾Ý£©×÷Ϊ¸ºÔØ·â×°ÔÚÒ»ÖÖ¿ÉÒÔÔÚ¹«ÓÃÍøÉÏ´«ÊäµÄÊý¾ÝÃûÌÃÖÐ £¬ÔÚÄ¿µÄ¾ÖÓòÍøÓ빫ÓÃÍøµÄ½Ó¿Ú´¦½«¹«ÓÃÍøµÄÊý¾Ý½â·â×°ºó £¬È¡³ö¸ºÔؼ´Ô´¾ÖÓòÍø·¢Ë͵ÄÊý¾ÝÔÚÄ¿µÄ¾ÖÓòÍø´«Êä¡£ÓÉÓÚ·â×°Óë½â·â×°Ö»ÔÚÁ½¸ö½Ó¿Ú´¦ÓÉ×°±¸Æ¾Ö¤ËíµÀЭÒéÉèÖþÙÐÐ £¬¾ÖÓòÍøÖÐµÄÆäËû×°±¸½«²»»á¾õ²ìµ½ÕâÒ»Àú³Ì¡£±»·â×°µÄÊý¾Ý°üÔÚËíµÀµÄÁ½¸ö¶ËµãÖ®¼äͨ¹ý¹«¹²»¥ÁªÍøÂç¾ÙÐзÓÉ¡£±»·â×°µÄÊý¾Ý°üÔÚ¹«¹²»¥ÁªÍøÂçÉÏת´ïʱËù¾­ÓɵÄÂß¼­Â·¾¶³ÆÎªËíµÀ¡£

     

        ËíµÀÊÖÒÕÏÖÔÚÖ÷ÒªÓ¦ÓÃÔÚVPN£¨Virtual Private Network£©ÐéÄâ×¨ÍøÖÐ £¬Ö÷ÒªÊÇÒÔMPLSµÄ·½·¨ÊµÏÖ¡£ÓÃMPLSЭÒéʵÏÖVPNµÄ·½·¨ £¬ÓÖ¿É·ÖΪLayer2 MPLS VPNºÍLayer3 MPLS VPN ¡£

     

    Èý²ãVPN

     

        Layer3 MPLS VPN¼´BGP/MPLS VPNs £¬Ê¹ÓÃÀàËÆ¹Å°å·Óɵķ½·¨¾ÙÐÐIP·Ö×éµÄת·¢¡£ÔÚ·ÓÉÆ÷ÎüÊÕµ½IPÊý¾Ý°üÒÔºó £¬Í¨¹ýÔÚת½ÒÏþ²éÕÒIPÊý¾Ý°üµÄÄ¿µÄµØÖ· £¬È»ºóʹÓÃÔ¤ÏȽ¨ÉèµÄLSP¾ÙÐÐIPÊý¾Ý¿çÔËÓªÉÌÖ÷¸ÉÍøµÄ´«ËÍ¡£ÔËÓªÉÌÍøÂçͨ¹ýÆä·ÓÉÆ÷£¨°üÀ¨PE£©ºÍ¿Í»§Â·ÓÉÆ÷£¨CE£©¼äµÄRIP¡¢OSPF¡¢BGPµÈ·ÓÉЭÒé £¬»ñµÃÓû§Õ¾µãµÄ¿É´ïÐÅÏ¢ £¬²¢ÓÃÕâЩÐÅÏ¢À´½¨ÉèÉÏÊöLSP¡£

     

    ¶þ²ãVPN

     

        Layer2 VPN´óÖ·ÖΪÈýÀà £¬µÚÒ»ÖÖ½Ð×öVPWS(Virtual¡¡Private¡¡Wire¡¡Service) £¬Óõã¶ÔµãÅþÁ¬·½·¨ÊµÏÖVPNÄÚÿ¸öÕ¾µãÖ®¼äµÄͨѶ¡£ÕâÖÖ·½·¨¶àÓÃÓÚÕýÔÚʹÓÃATM¡¢FRÅþÁ¬µÄÓû§ £¬Óû§ºÍÍøÂçÌṩÉÌÖ®¼äµÄÅþÁ¬¼á³Öδ±ã £¬µ«ÓªÒµ¾­·â×°ºóÔÚÍøÂçÌṩÉ̵ÄIPÖ÷¸ÉÍøÉÏ´«Êä¡£ÔÚµÚ¶þÖÖ½Ð×öVPLS£¨Virtual Private LAN Service£© £¬ÔËÓªÉÌÍøÂç·ÂÕæLAN SWITCH»òÇŽӯ÷µÄ¹¦Ð§ £¬ÅþÁ¬Óû§ËùÓеÄLAN³ÆÎªÒ»¸ö¼òÆÓµÄÇŽӵÄLAN¡£VPLSºÍVPWSµÄÖ÷Òª²î±ðÔÚÓÚVPWSÖ»Ìṩµãµ½µãÓªÒµ £¬¶øVPLSÌṩµãµ½¶àµãÓªÒµ¡£¼´VPWSÖеÄCE×°±¸Ñ¡ÔñijһÌõÐéÄâÏß £¬½«Êý¾Ý·¢Ë͵½Ä³Ò»Óû§Õ¾µã £»¶øVPLSÖеÄCE×°±¸Ö»ÊǼòÆÓµÄµ½ËùÓÐÄ¿µÄµØµÄÊý¾Ý·¢Ë͵½ÅþÁ¬µ½ÆäµÄPE×°±¸¼´¿É¡£

     

    2.4.2 ÈÏÖ¤ÊÖÒÕ

     

        ʹÓÃÈÏÖ¤ÊÖÒÕ £¬Ê¹Êý¾ÝÔÚ´«ÊäÀú³ÌÖÐÈôÊDZ»ºÚ¿Í½Ø»ñ²¢¸Ä¶¯¿ÉÒÔʵʱÔÚÎüÊն˾­ÓÉУÑé±»·¢ÏÈ¡£97¹ú¼ÊÊ®ÍòÕײúÆ·Ö÷ҪʹÓÃMD5Ëã·¨ºÍSHAËã·¨°ü¹ÜÊý¾Ý´«ÊäµÄ¿É¿¿ÐÔ¡£

     

        MD5µÄµä·¶Ó¦ÓÃÊǶÔÒ»¶ÎÐÅÏ¢£¨Message£©£¨ÀýÈç·ÓÉЭÒéµÄÐÅÏ¢µÈ£©±¬·¢ÐÅÏ¢ÕªÒª£¨Message-Digest£© £¬ÒÔ±ÜÃâ±»¸Ä¶¯¡£ºÃ±È £¬ÔÚ´«Êä·ÓÉÐÅϢʱ £¬ÔÚ·¢³ö±¨ÎÄ֮ǰÓÃMD5Ëã·¨»á¶Ô±¨ÎľÙÐÐÅÌËã £¬ÌìÉúÒ»¶ÎÊðÃû¸½ÔÚ±¨Îĺó¡£ÎüÊÕ¶ËÊÕµ½±¨ÎĺóͬÑùʹÓÃMD5¾ÙÐÐÅÌËãÌìÉúÒ»¶ÎÊðÃû £¬ÈôÊÇÌìÉúµÄÊðÃûÓëÔ­À´¸½´øµÄÊðÃûÏàͬ £¬Ôò֤ʵÊý¾ÝÔÚ´«ÊäµÄÀú³ÌÖÐûÓб»¸Ä¶¯ £¬¼ÌÐøÊ¹ÓÃÔ­À´µÄ±¨ÎÄ¡£ÈôÊDzî±ðÔòÅú×¢Êý¾ÝÔÚ´«ÊäµÄÀú³ÌÖб»¸Ä¶¯ £¬ÎüÊÕµ½µÄÊý¾Ý»á±»ÑïÆú¡£ÓÐÓõıÜÃâÁ˹ýʧµÄ¡¢¶ñÒâ¸Ä¶¯µÄÐÅÏ¢±»ÎüÊÕ¡£

     

        SHAËã·¨ÓëMD5Ëã·¨²î±ðµÄÊÇ£ºMD5±¬·¢128λÐÂÎÅÕªÒª £¬SHA±¬·¢ÊÇ160λÐÂÎÅÕªÒª £¬SHAÔ½·¢Çå¾²¡£

     

    2.4.3 ¼ÓÃÜÊÖÒÕ

     

        ¼ÓÃÜÊÖÒÕʹÖ÷ÒªµÄÊý¾ÝÐÅÏ¢ÔÚ´«ÊäµÄÀú³ÌÖÐ×ÝÈ»±»ºÚ¿Í½Ø»ñ £¬ºÚ¿Í»ñµÃµÄÒ²Ö´ÙÇÒ»¶ÑÂÒÂë £¬¶¼ÊÇÎÞÓõÄÐÅÏ¢¡£°ü¹ÜÁËÖ÷ÒªÊý¾ÝÐÅÏ¢²»»áй¶¡£ÏÖÔÚÖ÷ÒªÓÃÉñÃØËã·¨ÊÇDesËã·¨¡¢3DesËã·¨¡£

     

        DES(Data Encryption Standard) £¬Ê¹ÓÃ56λÃÜÔ¿¶Ô64λµÄÊý¾Ý¿é¾ÙÐмÓÃÜ ¡£3DES £¬ÈýÖØDESÅÌËã £¬ÒªÆÆ·ÑDESµÄÈý±¶Ê±¼ä £¬´ÓÁíÒ»·½ÃæÀ´¿´ £¬ÈýÖØDESµÄÃÜÔ¿³¤¶ÈÊÇ112λ £¬Çå¾²ÐÔÊǺÜÊǸߵÄ¡£

     

    2.5 ÍòÕ×λµÄÇå¾²·À»¤Ä£¿é

     

        ·À»ðǽµÄ¹Å°å½ÇÉ«ÒѾ­±¬·¢ÁËת±ä¡£½ñÌìµÄ·À»ðǽ²»µ«¿ÉÒÔ± £»¤Ô°ÇøÍøÂçÃâÊÜδ¾­ÊÚȨµÄÍⲿ½ÓÈëµÄ¹¥»÷ £¬»¹¿ÉÒÔ±ÜÃâδ¾­ÊÚȨµÄÓû§½ÓÈëÔ°ÇøÍøÂçµÄ×ÓÍø¡¢ÊÂÇé×éºÍLAN¡£FBIÊý¾ÝÏÔʾ70%µÄÇå¾²ÎÊÌâ¶¼À´×ÔÄÚ²¿¡£Ê¹Ó÷À»ðǽ± £»¤ÄÚ²¿µÄÍøÂç³ÉΪÏÖÔÚÔ°ÇøÍøµÄÆÈÇÐÐèÒª¡£

     

        97¹ú¼ÊÍøÂçµÄÊ®ÍòÕײúÆ·ÌṩÁËÍòÕ×λµÄÇå¾²·À»¤Ä£¿é £¬ÕâÖÖÇå¾²·À»¤Ä£¿é×°ÖÃÔÚ½»Á÷»úµÄÄÚ²¿ £¬¹ØÓÚÄÇЩ»úÇãÔþ¼äºÜÊÇÓÐÏ޵ĿռäÀ´Ëµ £¬ÕâÖÖÄ£¿éºÜÊÇÖ÷Òª¡£Í¬Ê± £¬ÍòÕ×λµÄÇå¾²·À»¤Ä£¿é¿ÉÒÔÌṩ·À»ðǽ¡¢ÈëÇÖ¼ì²â¡¢ÍøÂçÆÊÎö¹¦Ð§ £¬¿ÉÒÔÌṩ2~7²ãÖÇÄܵķþÎñ £¬Ê¹97¹ú¼ÊÍøÂçµÄÊ®ÍòÕײúÆ·ÕæÕý³ÉΪÁËÄܹ»ÎªÓû§ÌṩÖÇÄÜ·þÎñµÄ½¹µã·Óɽ»Á÷»ú¡£

     

        ·À»ðǽÄ£¿é¿ÉÒÔʹÓÃÊ®ÍòÕ×½»Á÷»úµÄǿʢ´¦Öóͷ£ÄÜÁ¦ £¬Ö±½Ó´Óϵͳ±³°åÌáÈ¡Êý¾ÝÁ÷Á¿ £¬·À»ðǽÄ£¿éµÄ´¦Öóͷ£ÄÜÁ¦¿ÉÒÔµÖ´ïÍòÕ×λÒÔÉÏ¡£Õë¶ÔÏÖÔÚÒµ½çÐí¶à·À»ðǽÄ£¿é¶¼ÊÇÖ±½Ó×°ÖÃÔÚÍòÕ×½»Á÷»úÄÚ²¿ £¬¶øÕâЩ·À»ðǽÄ£¿éµÄ´¦Öóͷ£¼¶±ðÖ»ÓÐǧÕ×λ £¬ºÜÄѾÙÐÐÍòÕ×λÊý¾ÝµÄÏßËÙ´¦Öóͷ£´Ó¶øµ¼ÖÂÍøÂçÑÓʱÉõÖÁϵͳ²»Îȹ̵ÄÇéÐÎ £¬97¹ú¼ÊÍøÂçÍòÕ×·À»ðǽÄ£¿é¿ÉÒÔ°ü¹ÜÍòÕ×ÏßËÙ´¦Öóͷ£ £¬×èÖ¹Á˽¹µãÄ£¿éµÄ²»ÎȹÌÐÔ¡£Í¬Ê±·À»ðǽÄ£¿éÊǼ¯³ÉÔÚ×°±¸ÄÚ²¿µÄ £¬ïÔÌ­ÁËÐèÒª¹ÜÀíµÄ×°±¸µÄÊýÄ¿¡£

     

        ·À»ðǽÄ£¿é¿ÉÒÔ°²ÅÅÔÚÔ°ÇøÍøÂçÊý¾ÝÖÐÐĵĽ¹µã×°±¸ £¬½ñÌìµÄÔ°ÇøÍøÂç²»µ«½öÐèÒªÖܱߵÄÇå¾² £¬»¹ÐèÒªÅþÁ¬ÓªÒµ»ï°éºÍÌá¹©Ô°ÇøÇå¾²ÇøÓò £¬ÎªÔ°ÇøµÄ¸÷¸ö²¿·ÖÌṩÇå¾²·þÎñ¡£·À»ðǽÄ£¿é¿ÉÒÔÈÃÓû§ºÍ¹ÜÀíÔ±ÒÔ²î±ðµÄÕ½ÂÔÔÚÆóÒµÖÐÉèÁ¢Çå¾²ÇøÓò £¬ÌṩһÖÖÎÞа¡¢¾­¼Ã¡¢»ùÓÚÐÔÄܽâ¾ö¼Æ»®¡£
     

    Ïà¹Ø±êÇ©£º

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

    µãÔÞ

    ¸ü¶àÊÖÒÕ²©ÎÄ

    ÈκÎÐèÒª £¬ÇëÁªÏµ97¹ú¼Ê

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

    ·µ»Ø¶¥²¿

    ÊÕÆð
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
    ÇëÑ¡Ôñ·þÎñÏîÄ¿
    ¹Ø±Õ×Éѯҳ
    ÊÛǰ×Éѯ ÊÛǰ×Éѯ
    ÊÛǰ×Éѯ
    ÊÛºó·þÎñ ÊÛºó·þÎñ
    ÊÛºó·þÎñ
    Òâ¼û·´Ïì Òâ¼û·´Ïì
    Òâ¼û·´Ïì
    ¸ü¶àÁªÏµ·½·¨
    ÍøÕ¾µØÍ¼