基于pci总线的网闸数据交换系统的设计与实现-计算机系统结构专业论文.docxVIP

摘要 摘要 摘要 近几年来，网络安全隐患日益加深，各种影响网络安全事件不断发生。对 政府机关，金融和科研机构单位这些对网络安全有相当高级别要求的用户而言， 他们要保证自己内部网络的绝对安全，但更加希望能在此基础上能和外部网络 进行适当的数据交换来满足某些业务方面的需要。因此，基于网络隔离的网闸 技术就在这种背景下诞生。 本论文在充分学习当前网闸技术的原理和技术同时，从公安部提出的对城 市监控、管理的需求出发。对网络隔离网闸的数据交换系统进行了深入细致研 究和开发。首先从网络隔离技术要求和网闸的技术原理着手，提出了基于 PCI 总线的网闸“2+1”系统架构方案，并详细介绍了系统总体结构和各部分的功能。 其次从网闸的硬件设计与软件设计两大方向入手，对设计的系统进行详细阐述。 在隔离传输硬件的设计中，系统采用 PCI 总线，合理的设计 PCI 局部总线接口 电路、高速存储模块和 FPGA 控制逻辑状态机。使其支持 DMA 操作，提高网 闸数据传输的速率。最后在网闸软件设计中，介绍了基于 PCI9054 接口芯片的 Linux 驱动程序编写和内网处理单元的 HTTP 应用代理服务模块的设计与实现。 PCI 驱动程序完成了对隔离传输硬件的 DMA 数据传输操作，为应用代理程序提 供了底层设备操作接口。内网处理单元的 HTTP 应用代理服务模块采用 Linux 的 socket 网络编程和多进程技术开发编写。根据网闸技术要求实现了 HTTP 代 理服务端、协议解析模块和协议还原模块三个部分。通过实验仿真验证，各模 块初步达到预期功能。 关键词：网闸 FPGA PCI Linux 驱动 HTTP 代理 摘要 Abstract Abstract Abstract In recent years, network security risks deepening. And numbers of network security incidents continue to occur. For government agencies, financial and research institutions, which have a very high level of network security requirements, they have to ensure the absolute safety of their internal net. And they also strongly hope implementing data swap between internal network and external network to meet certain business needs. How to implement data swap in the premise of ensuring network security is presented in front of the technical staff. So, GAP technology based on network isolation was born in this context In this paper,the author fullly study the current principles and techniques of GAP technology,and do deeply research on the data swap system of GAP which based on the needs of enhancing city supervision proposed by the Ministry of public security.Firstly,the author propose a program of 2+1 system architecture based on PCI bus, and introduce the overall system structure and main function of each part in detail.Secondly,details the hardware design of data swap systerm of GAP,in which The author mainly design the interface circuit of PCI local bus,high-speed memory module and contral logic state machine based on FPGA technology.Finally,detail