计算机工程 ›› 2008, Vol. 34 ›› Issue (1): 131-133.doi: 10.3969/j.issn.1000-3428.2008.01.044

• 网络与通信 • 上一篇    下一篇

QoS机制在IPSec安全设备上的分析与实现

何 军1,舒 莉1,李 奇2   

  1. (1. 四川大学计算机学院,成都 610065;2. 四川师范大学软件重点实验室,成都 610068)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2008-01-05 发布日期:2008-01-05

Analysis and Realization of QoS Machanism in IPSec Security Device

HE Jun1, SHU Li1, LI Qi2   

  1. (1. College of Computer Science, Sichuan University, Chengdu 610065; 2. Key Lab. of Software, Sichuan Normal Univ., Chengdu 610068)
  • Received:1900-01-01 Revised:1900-01-01 Online:2008-01-05 Published:2008-01-05

摘要: 提出了在IPSec 安全设备上实施QoS的体系方案。设计了适合IPSec安全设备特点的数据分类规则。为IPSec安全设备构建了一个系统排队理论模型,该模型以延迟作为系统运行目标,以带宽作为分配资源。据此设计了一个自适应带宽分配循环队列调度算法。实际运行的测试结果表明,在重载情况下,实施了QoS的IPSec 安全设备可以为重要业务流提供带宽和时延保障。

关键词: 服务质量, 体系结构, 分类, 调度, 排队

Abstract: This paper presents a QoS scheme suit for IPSec security device, and designs a data classification regulation adapt to characteristics of IPSec security device. A principle of queuing model is constructed which takes the delay as the target parameter and the bandwidth as the allocation resource of the queuing system. By this model, an adaptive bandwidth allocation circular schedule algorithm is designed. The results of test show that the IPSec security device guarantees bandwidth and delay for key streams in the situation of heavy burden by QoS mechanism.

Key words: QoS, architecture, classification, schedule, queuing

中图分类号: