支持域间分布式分组过滤的BGP扩展.pdfVIP

ISSN 1000．9825，CODENRUXUEW 3048-3059 12Dc。。“由盯2007pp 盘譬器彳j：器訾；re。,，V。。o。1．18，N0 Tc“掣豁w．．jos．org．enYFax：6-0Tc +81 o All rcserccd． 2007byJournalofSoftwarerlghts 支持域间分布式分组过滤的BGP扩展+ tit,吴建平。徐恪 (清华大学计算机科学与技术系一E京100084) Extension BGP to Inter-DomainDistributedPackets Support Filtering WANG Ke Li-Jun+。WU Jian-Ping．XU ∞epatlmentofComputerSciencemdTechnology，TsinghuaUniversity，Bering100084，China) cll +Corresponding csⅡln8hlIadu author：Phn：+86-10Fax：+86-10E—mail：wU@csnetl K．BGPextensionto inter-domaindistributed LJ,WuJP，Xu packets Wang support of cn／1000—9825／18／3048．htm Sofneare，2007，18(12)：3048-3059．http：／／wwwjos．org be isan of Abstract：To characteristicthenext Internet．The of trustworthyimportant generation routingsystem Interuetforwards tothe the destinationIP with present packetsonlyaccording address．Forgedpacketsspoofed sourceIPaddresswillalsobeforwardedtothe the ofreceiverandeoneeMsthe destination，whichsecurity impairs real ofthesender,The Internet the not forward identity trustworthyrequiresroutingsystemonly packetscorrectly, butalsovalidatethe fromtherealsender．Inter-domaindistributed isalleffective packem packeti11．