工业互联网网络关键技术与发展研究

近年来，工业互联网快速发展，成为促进产业数字化转型的重要途径。为充分发挥工业互联网人、机、物、企业全面互联的作用，工业自动化系统、通信网络、新一代信息技术之间要深度融合，打造既满足可靠、稳定、安全基本要求，同时又更加开放、更加弹性、更加多样的工业互联网网络。讨论了服务于生产制造的工业互联网网络的内涵，介绍了相关关键技术、适用场景及主要研究成果，总结分析了该领域的研究发展趋势，并提出进一步建设部署工业互联网网络的建议。     

The effects of network neutrality on the diffusion of new Internet application services

The debate over network neutrality started with the appearance of new Internet application services that are latency sensitive and the use of broad bandwidth. These services are still diffusing, and more applications that use broader bandwidth with greater latency sensitivity are expected to be developed. To estimate precisely the effect of network neutrality regulation, it is necessary to forecast the number of end-users that will adopt application services. However, previous studies are limited in that they assume that the potential market and the final number of adopters are constant at the current market penetration level. By computational experiments, this research estimates the effect of network neutrality regulation considering the diffusion process of application services such as IPTV and VoIP. Additionally, it deduces the relation between the effect of network neutrality regulation and the level of diffusion of new Internet application services.     

Research on the full-dimensional defined polymorphic smart network

For current Internet is confronted with some defects such as rigid structure,single IP bearing,and disability in suppressing unknown threats,the functions,performance,efficiency and security of the Internet were promoted from the perspective of network structure,the “structure definition” was introduced through all levels of the Internet,and a network architecture of multi-modal presentation of network functions was provided in all levels:full-dimensional defined polymorphic smart network (PINet),which supported full-dimensional definition and multi-modal presentation of addressing and routing,switching mode,interconnection mode,network element,transmission protocol,service properties and so on.Then the vision and goal,architecture and model,as well as the key technologies of PINet were discussed.The proposed architecture can provide a possible solution to the development of new network technologies.     

Industrial intelligent network: deepening and upgrading of industrial Internet

Manufacturing founds a major pillar of the national economy. The international community generally agrees that the core of the new wave of manufacturing upgrade is to achieve intelligent manufacturing. For this reason, the concepts of “Industrial Internet” and “Industry 4.0” was proposed by united state, Germany and other technologied, and formulated manufacturing development strategies suited to their national conditions. “Made in China 2025” was proposed by China which determines the development direction based on intelligent manufacturing in the level of national development strategy. Based on the status quo and technological advantages of China's industrial intelligent manufacturing, and aiming to help large, medium and small-sized production enterprises achieve industrial intelligence in a flexible, smooth and cost-controllable manner, the concept of “industrial intelligent network” was proposed to integrate the conditions and advantages in aspects of China's information infrastructure construction, cognitive identification, artificial intelligence, etc., to build an industrial intelligent network, to provide industrial intelligent services to large, medium and small-sized enterprises, so that production enterprises within a broader scale can benefit from intelligent manufacturing with lower costs.     

一种可演进的互联网体系结构

互联网端到湍属性使得运行于主机端的应用层协议易于修改和部署,从而促进互联网通过新应用的竞争不断发展;但是涉及到网络核心层和网络设备（交换机、路由器等）的新协议则在实现和应用上十分困难,阻碍了互联网核心技术的演进。文章提出一种可演进的网络体系结构（EIA）。网络可以通过EIA提供的接口在主机和网络设备上添加新的模块来得到试验和实际部署。不同的用户可以任意选择不同的体系结构,同时用户可以是一种或多种网络体系结构的使用者。人们可以多样化竞争的方式推动互联网的演进。     

网络大数据安全问题及其解决对策研究

现如今的21世纪,随着“互联网+”的飞速发展,网络信息数据也不断开放,因此,21世纪也被誉为了计算机互联网时代。这也导致目前人们获取数据的最主要的途径已经开始转变为从互联网上获取数据。这也在一定条件上为网络大数据的应用和发展创造了非常有利的条件。但是,在近几年,随着互联网的不断发展,网络大数据的规模不断扩大,在数据的采集、存储以及共享方面发生了巨大的变化。这也暴露出了一些网络数据安全方面的问题,例如隐私保护问题等。面对现代日益信息化的社会,网络大数据安全问题已经成为目前影响网络发展的最大的“绊脚石”。因此,目前对网络大数据的安全问题进行深入的研究,并对其进行相关对策的探究,已经成为目前主要的任务。针对于此,文章对现代网络大数据安全问题及其解决对策进行了相关的研究,希望能为相关者提供一些借鉴的经验。     

端到端确定性网络架构和关键技术

新型业务如远程控制、虚拟/增强现实等对网络提出了更高的带宽和时延要求,传统网络已经难以满足。面向6G的网络演进,需要端到端确定性网络技术保障。针对当前技术标准研究缺乏对于端到端时延保障的全局考虑,指出了确定性网络需要同时解决单跳和全局的时延问题,提出了端到端确定性网络架构,以及跨网络域和跨协议层的确定性网络技术方案。最后,针对当前确定性网络应用部署的难点,提出了相应的推进建议。     

Delayed Internet routing convergence

This paper examines the latency in Internet path failure, failover, and repair due to the convergence properties of interdomain routing. Unlike circuit-switched paths which exhibit failover on the order of milliseconds, our experimental measurements show that interdomain routers in the packet-switched Internet may take tens of minutes to reach a consistent view of the network topology after a fault. These delays stem from temporary routing table fluctuations formed during the operation of the border gateway protocol (BGP) path selection process on the Internet backbone routers. During these periods of delayed convergence, we show that end-to-end Internet paths will experience intermittent loss of connectivity, as well as increased packet loss and latency. We present a two-year study of Internet routing convergence through the experimental instrumentation of key portions of the Internet infrastructure, including both passive data collection and fault-injection machines at major Internet exchange points. Based on data from the injection and measurement of several hundred thousand interdomain routing faults, we describe several unexpected properties of convergence and show that the measured upper bound on Internet interdomain routing convergence delay is an order of magnitude slower than previously thought. Our analysis also shows that the upper theoretic computational bound on the number of router states and control messages exchanged during the process of BGP convergence is factorial with respect to the number of autonomous systems in the Internet. Finally, we demonstrate that much of the observed convergence delay stems from specific router vendor implementation decisions and ambiguity in the BGP specification     

Measuring Capacity Bandwidth of Targeted Path Segments

Accurate measurement of network bandwidth is important for network management applications as well as flexible Internet applications and protocols which actively manage and dynamically adapt to changing utilization of network resources. Extensive work has focused on two approaches to measuring bandwidth: measuring it hop-by-hop, and measuring it end-to-end along a path. Unfortunately, best-practice techniques for the former are inefficient and techniques for the latter are only able to observe bottlenecks visible at end-to-end scope. In this paper, we develop end-to-end probing methods which can measure bottleneck capacity bandwidth along arbitrary, targeted subpaths of a path in the network, including subpaths shared by a set of flows. We evaluate our technique through ns simulations, then provide a comparative Internet performance evaluation against hop-by-hop and end-to-end techniques. We also describe a number of applications which we foresee as standing to benefit from solutions to this problem, ranging from network troubleshooting and capacity provisioning to optimizing the layout of application-level overlay networks, to optimized replica placement.      

基于改进灰狼优化算法的服务功能链映射算法

随着工业互联网、车联网、元宇宙等新型互联网应用的兴起，网络的低时延、可靠性、安全性、确定性等方面的需求正面临严峻挑战。采用网络功能虚拟化技术在虚拟网络部署过程中，存在服务功能链映射效率低与部署资源开销大等问题，联合考虑节点激活成本、实例化开销，以最小化平均部署网络成本为优化目标建立了整数线性规划模型，提出基于改进灰狼优化算法的服务功能链映射（improved grey wolf optimization based service function chain mapping，IMGWO-SFCM）算法。该算法在标准灰狼优化算法基础上添加了基于无环K最短路径（K shortest path，KSP）问题算法的映射方案搜索、映射方案编码以及基于反向学习与非线性收敛改进三大策略，较好地平衡了其全局搜索及局部搜索能力，实现服务功能链映射方案的快速确定。仿真结果显示，该算法在保证更高的服务功能链请求接受率下，相较于对比算法降低了11.86%的平均部署网络成本。     

面向业务和网络协同的未来IP网络架构演进

IP技术作为互联网的技术基础,在今后5～10年如何发展是通信行业面临的关键问题。分析了传统IP网络架构的成功与不足,提出未来IP网络既要继承传统IP技术的设计原则,比如端到端原则和分层解耦原则,又要解决现有IP网络中业务和网络过于割裂的问题。从网络演进和未来业务需求的角度出发,认为未来IP网络的核心问题是要加强业务和网络的协同,提出了改进后的IP网络设计原则“横向：服务化网络赋能的端到端架构,纵向：智能控制面支撑的分层模型”,并且基于此原则提出了未来网络的参考架构。     

基于未来应用的未来网络固定特征

越来越丰富的网络应用对网络功能和性能提出了更高的要求。车联网需要网络满足低时延和高可靠性要求;远程医疗需要网络有确定性时延和安全保证;工业互联网要求网络满足大连接要求;AR/VR应用要求低时延和高带宽;量子计算也对网络安全等方面提出了新的要求。现有的IP网络由于自身架构的局限性,只提供尽力而为的服务,无法满足未来网络应用需要。调研未来20年内的网络应用,分析未来网络应该具有的功能和性能,通过对车联网、远程医疗、工业物联网、AR/VR和量子计算应用场景的描述,分析满足这些场景分别需要的网络性能,得出未来网络的性能指标。     

5G端到端网络切片进展与挑战分析

随着5G端到端网络切片商用部署的逐步推进,在切片实施过程中遇到一些问题和挑战,因此亟需对其当前的研究进展及挑战进一步分析.从对5G端到端网络切片的系统性论述切入,首先介绍了5G网络切片的架构和功能,之后梳理了目前国内外标准组织对网络切片及其增强技术的研究进展,最后识别并深入分析了端到端网络切片面临的挑战,包括SLA保障...     

轻量级容器化技术驱动的虚拟网络部署研究

近年来,由于5G、物联网等技术的快速发展,网络规模越来越庞大,对于网络应用的要求随之提高,网络应用的各项性能则需要在较为复杂的网络中进行测试,将现实生活中结构复杂的网络用于应用性能测试的可行性不高。因此,对于SDN(Software-Defined Networking,SDN)网络开发而言,迫切的需要能够进行测试的仿真平台。市面上常见的网络测试工具尽管可以实现网络仿真,但存在保真度低、可视化支持差等问题。在本设计中,采用轻量级虚拟化技术,搭建虚拟化的网络模拟仿真平台——网络魔镜。将真实网络协议“照进”虚拟环境,摆脱现有模拟网络仿真工具的局限性,对基于Docker容器搭建起来的轻量级的虚拟网络,可以方便地对其进行计算机网络的相关研究。     

大规模确定性网络转发技术

提出了一种适用于大规模网络部署的3层转发技术——LDN（large-scale deterministic network）,在保留传统IP转发技术统计复用的优势基础之上,LDN技术可实现对端到端时延上界及抖动上界的严格保证,为5G uRLLC（ultra-reliable low-latency communication）切片、工业互联网等未来应用场景提供网络服务支持。通过仿真实验对比了在相同网络环境下,传统IP及确定性IP在端到端最差时延及抖动上的差异,证明了LDN技术的有效性。     

网络中心战中端到端网络时延的确定

介绍了网络中心战的概念,分析了以太网网络资源参数。在不考虑传输质量和传输成本的前提下,网络时延与其他网络资源参数相关,为其他网络资源参数的函数。它是网络资源的关键因素。提出了一种计算网络中心战中端到端网络时延和获取链路信息的算法,开发了基于Server/Client架构的计算程序。以3节点旅(团)级网络中心战架构为例,计算了端到端网络时延并且获取了对应的链路信息。解决了网络中心战中端到端网络时延确定的关键问题,并且可用于网络中心战中服务质量选路的研究。     

Delay-tolerant networking: an approach to interplanetary Internet

Increasingly, network applications must communicate with counterparts across disparate networking environments characterized by significantly different sets of physical and operational constraints; wide variations in transmission latency are particularly troublesome. The proposed Interplanetary Internet, which must encompass both terrestrial and interplanetary links, is an extreme case. An architecture based on a "least common denominator" protocol that can operate successfully and (where required) reliably in multiple disparate environments would simplify the development and deployment of such applications. The Internet protocols are ill suited for this purpose. We identify three fundamental principles that would underlie a delay-tolerant networking (DTN) architecture and describe the main structural elements of that architecture, centered on a new end-to-end overlay network protocol called Bundling. We also examine Internet infrastructure adaptations that might yield comparable performance but conclude that the simplicity of the DTN architecture promises easier deployment and extension.     

工控网络安全检测与防护体系研究

随着人工智能、大数据、云计算等多种互联网信息技术广泛应用到工业领域,很多工控网络安全问题日渐暴露出来,工控网络安全检测及防护体系也越来越受到社会的关注。通过分析工控网络特点及工控网络安全风险,着重对工控网络安全检测与防护体系进行研究,以更有效地应对工控网络安全风险。     

SDN试验床网络虚拟化切片机制综述

未来网络体系架构和关键技术的研究需要灵活开放的测试验证环境,基于传统分布式的网络架构难以达到动态虚拟化、有效管控和新协议灵活部署的需求。随着软件定义网络（SDN）技术的出现和发展,上述问题找到了有效的解决途径,因此,基于SDN构建网络试验床成为了近年来该领域的主流研究方向之一。其中,基于SDN的网络虚拟化切片技术更是试验床中的核心支撑技术,可以根据不同试验的需求切分物理网络资源,从而提供并行、独立的网络环境。将重点研究基于SDN的试验床中使用的网络虚拟化切片机制,从“流量识别和切片网络标识”、“虚拟节点抽象”和“虚拟链路抽象”这3个关键技术出发,对当前基于SDN试验床中的典型网络虚拟化切片机制进行介绍与分析,并总结了该领域未来可行的研究方向。     

FreeBW-RPL: A New RPL Protocol Objective Function for Internet of Multimedia Things

Most of the current research has been restricted to scalar sensor data based IoT applications. However, today’s research and development activities rely on multimedia-based services and applications while this kind of applications has several requirements in terms of storage, bandwidth, latency, etc. Furthermore, protocols dedicated to IoT applications have proved their weakness in multimedia environments. Hence, a new paradigm called internet of multimedia things (IoMT) has been proposed to fulfill the requirements of multimedia applications. In this paradigm different multimedia things can interact and cooperate with each other over the Internet. Moreover, IETF ROLL working group standardized an IPv6 routing protocol for low-power and lossy networks (RPL for LLNs) for resource constrained devices. In this paper, we propose an enhanced version of RPL for IoMT called free bandwidth (FreeBW)-RPL in which the sensed data is essentially provided by multimedia devices. FreeBW-RPL protocol proposes a new objective function called FreeBW that takes the FreeBW calculation in the network layer. We set the QoS routing challenge as the amount of the bandwidth while selecting the routing path in order to measure the maximum FreeBW so as to deliver better performance of the multimedia applications. Simulations have been conducted over COOJA simulator. The obtained results proved that our proposal outperforms the basic ones in terms of end-to-end delay, throughput, packet delivery ratio and energy consumption and provides better performance than other protocols.