基于用户地址编址方式-操作系统原型设计和实现.pptVIP

User-Oriented Addressing(Operating System Implementation) overnitary 2007.4 Operating System supports UNIX-like OS for planetary computing assigns addresses to users constrains use of owned address only limits users view for interface and routes Our Approach New socket layer in the kernel insert user-address mapping examination in several kernel functions or system calls Relative Work ULN (User Layer Network) Relative Work Based on kernel patch of ULN But we modified on: A different Data Structure and ioctl Interface Allow Multi-Mapping of user to address Cancel the privilege limitation of the usage of ports num1024 Transport to a new version of kernel Fix the bugs of original patch Kernel Modification Address Usage Checking To do user checking in several socket functions to block unauthorized address usage. Data structure and ioctl Interface To provides an user interface for super user to adjust the user-address mapping. Address Usage Checking: IPv4 uoa_inet_autobind() Blocks autobind(), so actually blocks unbound connect (UDP) and unbound sendmsg (TCP,UDP) uoa_inet_bind() Blocks bind (TCP,UDP) uoa_tcp_connect() Blocks connect (TCP) uoa_raw_sendmsg() Blocks sendmsg (ICMP) uoa_raw_bind() Blocks bind (ICMP) Address Usage Checking: IPv6 uoa_ipv6_get_saddr() Most important one. It affect the selection of source address, so it affect unbound connect (UDP) and unbound sendmsg (TCP,UDP,ICMP) uoa_inet6_bind() Blocks bind (TCP,UDP) uoa_tcp_v6_connect() Blocks connect (TCP) uoa_rawv6_bind() Blocks bind (ICMP) Data Structure Maintain a user-address mapping link list. Both v4 and v6 version are alike. int insert_ip4_token(struct in_addr * addr, uid_t uid); Returns 1 if success, -ERR... if error int check_ip4_token(struct in_addr * addr, uid_t uid); Returns 3 if a mapping of addr-uid exists. 2 if the user has mapping to other addresses, 1 if the address has mapping to other users, 0 if none of above. struct ip4_token *find_ip4_token(uid_t uid); Returns a mapping to