在點對點閘道器上整合與加速以內容為基礎的辨別及管理系統

Abstract

點對點軟體使用動態連接埠來隱藏自己，傳統利用連接埠來重導連線的代理伺服器架構已無法有效管理點對點連線。藉由檢查應用層的內容，一個在閘道器上的套件叫做P2PADM已經能夠管理點對點連線。此套件在核心空間進行連線辨別的動作,在使用者空間進行連線管理動作，因此內容置換和從核心空間到使用者空間的資料傳遞是必要的。我們提出一個叫做kP2PADM的新架構，此架構是將P2PADM套件從使用者空間搬移到核心空間的方式來改善效能，此工作最主要的困難是如何讓新架構能夠相容於Linux核心而不會造成核心恐慌。外部測試顯示kP2PADM的吞吐量比原始的P2PADM高出88.85Mbps。此外，此工作亦點出P2PADM的兩個弱點:(1)重覆連線的問題，(2)當封包遺失時會發生多餘的延遲，針對此兩個弱點我們提出兩個解決方法:(1)內容快取，(2)快速通過。

Peer-to-peer (P2P) software runs over dynamic ports in order to disguise their existence. Conventional port-redirecting proxy architecture cannot manage P2P traffic effectively. A gateway-based P2P administration (P2PADM) architecture had been proposed for managing P2P traffic by inspecting content at the application layer. P2PADM executes connection classification in the kernel space and connection management in the user space. Context switch and data passing from the kernel space to the user space is necessary. We propose a new architecture called kP2PADM for improving the performance of P2PADM by moving the P2PADM package from the user space to the kernel space. The main challenge in this work is how to move the code to the kernel space compatibly with Linux kernel without panicking the kernel. The external benchmarking reveals that the throughput of kP2PADM is 88.85 Mbps higher than that of P2PADM. This work also addresses two weaknesses of P2PADM: (1) reconnection issue and (2) redundant delay due to packet loss. Two solutions are proposed for the two weaknesses: (1) connection cache and (2) fast pass.