本文提出了一种基于连接标识(CID)通信的方法,并添加连接标识映射服务器(CMS)来完成对连接的管理功能.CMS将网络的核心部分与接入部分进行了分离,通过在CMS中建立连接标识与口之间的映射,完成了映射通信的传输方式.本文将传统网络数据发送模式由基于对端地址变为基于连接标识,从而提升网络针对连接的可控可管性.本文详细讲述了这种基于连接的映射通信带来的优势,如:提高抗DDos攻击、防止主机身份暴露、减少核心网路由条目等.并且分析了这种映射通信对现有应用的向下兼容性,及其可能带来的新攻击方式及应对措施.最终的实现测试给出了基于连接标识映射通信的具体性能.
Ttis paper proposes to use connection identify (CID) to mark the process of obtaining a service, and add connec tion identify mapping server (CMS) to achieve the management of connections. CMSs make the core network and access network be separated.And through the mapping between CID and IP in the CMSs,the communication is separated to three steps. This map ping communication mode makes the sending of packets be based on CID instead of IP address. Thus, the controllabih'ty and man ageability of connections have gained a remarkable increasing. Moreover, this paper has particularly represented the advantages of the mapping communication,and the compatibility of current applications.In addition, we give some countermeasures aimed at the new network attacks which the mapping communication mode may bring about. At last, the experimentation results reveal the specific performances of mapping communication mode.