Protected Virtual Networking API Using a File System Interface (NET-FS)

使用文件系统接口 (NET-FS) 的受保护虚拟网络 API

• 批准号: 0129689
• 负责人: Joseph Touch
• 金额: $ 42.5万
• 依托单位: University of Southern California
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2002
• 资助国家: 美国
• 起止时间: 2002-03-01 至 2006-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0129689&HistoricalAwards=false
• 关键词: Protected; Virtual; Networking; API; Using

NetFS is a file system interface to the network configuration parameters of an operating system. All network configuration is performed by file operations, thus inheriting file system protection, including limited user and group access, as well as support for hierarchies, which more readily support virtual networks. This results in fine-grained resource protection for individual network settings, providing in a safe environment in which applications can have controlled access to limited subsets of network configuration and control, such as routing tables, interface configurations, IP security associations, and firewall rules. NetFS also provides an interface that unifies access to these networking parameters of the operating system under a portable file system paradigm. This unified controlled interface also more readily supports advanced virtual networking, where individual applications are attached to different subsets of network infrastructure to support concurrent participation in multiple coalitions.

NetFS是操作系统的网络配置参数的文件系统接口。所有网络配置都由文件操作执行，因此继承了文件系统保护，包括有限的用户和组访问，以及对层次结构的支持，层次结构更容易支持虚拟网络。这就为单个网络设置提供了细粒度的资源保护，提供了一个安全的环境，在这个环境中，应用程序可以控制访问网络配置和控制的有限子集，比如路由表、接口配置、IP安全关联和防火墙规则。NetFS还提供了一个接口，该接口在可移植文件系统范例下统一了对操作系统这些网络参数的访问。这个统一的控制接口还更容易支持高级虚拟网络，其中单个应用程序连接到网络基础设施的不同子集，以支持多个联盟中的并发参与。