通信学报Issue(z1)：1-4,4.DOI:10.3969/j.issn.1000-436x.2014.z1.001
10 Gbit网络访问控制网关的设计与实现
Design and implementation of 10 Gbit network access control gateway
摘要
Abstract
To meet the 10 gigabit Ethernet transmission rate, a second generation network access control gateway (IPcG-10G) is redeveloped following the open and general design principle. IPcG-10G can dynamically control au-thenticated users to access to network resources based on their network authorization, thereby establishing the real-name registration network accessing mechanism in order to strengthen the network security and guarantee the ra-tional use of network bandwidth. By utilizing a variety of optimal techniques, like zero-copy and socket buffer recy-cling, this system improves the performance of 10Gbps traffic forwarding. IPcG-10G breaks through the transmission bottleneck of the first generation gigabit IPcG, thus solving the mismatched rate problem and facilitating the network link management and planning.关键词
IP控制网关/10 Gbit以太网/网络访问控制/实名制/零拷贝Key words
IP control gateway/10 Gbit Ethernet/network access control/real-name registration/zero-copy分类
信息技术与安全科学引用本文复制引用
张晓军,崔建,马皓,张蓓..10 Gbit网络访问控制网关的设计与实现[J].通信学报,2014,(z1):1-4,4.基金项目
国家发改委2011信息安全专项基金资助项目Foundation Item:Project of NDFC 2011 Information Security （）
