“接口＋编号”接入控制策略实现研究

随着网络应用的不断发展,网络业务服务质量保证变得越来越重要,接入控制功能的实现为业务提供商给用户基于策略的流量限制提供了可能,更好地满足网络成本与业务服务等级之间的公平性,同时提高了网络的安全性。边缘设备接入控制的关键技术是在实现接入控制的同时保证数据转发处理的性能。本文基于边缘设备接入控制需求和接入控制策略表的特点,设计并分析了多种匹配算法,提出了接入控制策略实现中需考虑的关键因素。文章的最后给出了"接口 编号"链表式接入控制表的实现。该实现方法被应用国内驻地网边缘设备的接入控制,应用效果良好。

Design of Interface-Num Link Architecture for Access Control

With the development of network applications, QOS becomes more important as the key role of network performance. It opens the sky of traffic control for each customer and provides better matching between cost and SLA with edge access control. How to guarantee the performance of data transmission and communication while implementing access control policies is the key technology of access control in edge facilities. In this paper, many matching arithmetics are presented and discussed first, key factors which must be considered in the design of access control policies are then proposed based on the access control demands of the edge facilities and characteristics of access control list. The implementation of port-numbering access control list is shown in the end of the paper.