摘要: iSCSI协议是一种新兴的网络存储协议标准。该文分析了iSCSI协议的工作原理和安全机制,指出其存在的安全隐患,提出一种基于SSL的安全iSCSI方案,通过在iSCSI协议中加入SSL的安全功能,实现了一个安全iSCSI系统。实验表明,与基于IPSec的安全方案相比,使用该方案的iSCSI协议的I/O速率提高了25%,而CPU占用率下降了50%。
关键词:
iSCSI协议,
网络存储,
网络安全,
SSL协议
Abstract: iSCSI is an standard network storage protocol. The working theory and security mechanism of iSCSI are studied and the threat of the protocol is pointed out. In order to improve performance, this paper puts forward a secure iSCSI based on SSL. An secure iSCSI system is implemented by adding SSL functions to iSCSI protocol. Experiments show that throughput of the secure iSCSI based on SSL increases by 25% and CPU utilization decreases 50%, compared with the secure iSCSI based on IPSec.
Key words:
iSCSI protocol,
network storage,
network security,
SSL protocol
中图分类号:
何 俊;戴 浩;马琳茹;杨 明;谢永强. 基于SSL的安全iSCSI技术研究与实现[J]. 计算机工程, 2008, 34(2): 97-99.
HE Jun; DAI Hao ; MA Lin-ru; YANG Ming; XIE Yong-qiang. Research and Implementation of Secure iSCSI Based on SSL[J]. Computer Engineering, 2008, 34(2): 97-99.