可重組化叢集式虛擬私用網路閘道器之設計與實作

Design and Implementation of a Reconfigurable VPN Gateway via Adaptive Clustering

戴上為(Siong-Ui Te)

指導教授 ： 雷欽隆

國立臺灣大學/電機資訊學院/電機工程學研究所/碩士(2005年)

https://doi.org/10.6342/NTU.2005.00581

摘要

這篇論文在叢集式虛擬私用網路閘道器的基礎上，提出可重組化之叢集式虛擬私用網路閘道器。在不停止虛擬私用網路服務的前提下，此設計能動態地增加或減少叢集閘道器內機器。同時也達成了容錯的目標。除了可重組化外，此叢集閘道器同時也有負載分享的機制，可以將負載分攤到各台機器上，避免造成機器負載過重的情形。最後從實作及評估的圖表中，驗證所提出的方案正確性。

關鍵字

虛擬私用網路 ； 容錯 ； 可重組 ； 叢集

並列摘要

Based on the VPN gateway using cluster, a reconfigurable VPN gateway via adaptive clustering is proposed in the thesis. Without stopping the VPN service, the proposed VPN gateway can dynamically add or delete a node in the cluster. Reconfiguration of the gateway also implies fault tolerance of the gateway. In addition to reconfiguration, there is also load sharing mechanism in the VPN gateway. The mechanism can share load to each node in the cluster and avoid overloaded nodes in the cluster. Finally, correctness of the proposed gateway is verified from implementation and evaluation figures.

並列關鍵字

VPN ； fault tolerance ； reconfiguration ； cluster

參考文獻

[1] S. Ortiz Jr., "Virtual Private Networks: Leveraging the Internet," IEEE Computer, Vol. 30, No. 11, pp. 18-20, November 1997.

[2] S. Kent and R. Atkinson, "Security Architecture for the Internet Protocol," RFC 2401, No-vember 1998.

[3] P. Knight and C. Lewis, "Layer 2 and 3 Virtual Private Networks: Taxonomy, Technology, and Standardization Efforts," IEEE Communications Magazine, Vol. 42, No. 6, pp. 124-131, June 2004.

[5] J.-C. Lin, C.-T. Chang, and W.-T. Chung, "Design, Implementation and Performance Evaluation of IP-VPN," Proceedings of 17th International Conference on Advanced Infor-mation Networking and Applications (AINA 2003), pp. 206-209, March 2003.

[6] S. Khanvilkar and A. Khokhar, "Virtual Private Networks: An Overview with Performance Evaluation," IEEE Communications Magazine, Vol. 42, No. 10, pp. 146-154, October 2004.