STI: Extending the X-Bone Overlay Deployment Tool for Research and Classroom Use

STI-Xend增强了X-bone自动互联网覆盖部署和管理工具，为本地和分布式网络实验提供安全环境，以支持高级研究和课堂使用。X-bone应用虚拟互联网架构来支持使用现有Unix操作系统、标准互联网协议(IPSec、SSL、动态路由)和应用程序的安全、并发覆盖网络(VPN)。它目前缺乏一些网络研究人员和教职员工所要求的先进设施。STI-Xend扩展了X-bone以支持访问、动态拓扑控制、将其移植到其他平台，并增强了其API以与联网应用程序集成。该工具将进一步与其他支持材料(示例、脚本演示和说明)一起打包，以加强研究和教育界对其的使用。这些扩展包括：支持大规模网络模拟：STI-Xend允许覆盖层重新访问网络组件，允许一小部分设备使用真实协议和应用程序模拟大型网络。动态拓扑控制：STI-Xend允许通过添加或删除节点或链接来修改覆盖拓扑，并指定所使用的响应节点的子集(而不是任意选择)。这提供了对参与者和拓扑的精确控制，允许重复部署。支持其他平台：X-bone支持Unix主机和基于主机的路由器；STIXTend为其他平台(MacOS、Solaris)提供端口，并添加IPv6、多播和单板系统，用于适度安装和控制关闭的平台。增强用户界面、API和组件：STI-Xend增强了X-bone的图形用户界面，并更新了其模块化组件和功能，例如动态路由(当前使用失效的和MRTd)。X-bone基于抽象的虚拟互联网(VI)体系结构，它描述了并发的并行和分层覆盖。VI模型启发了两层封装，以独特的方式将IPSec与动态路由集成在一起，并被用于将网络搜索、DNS查找、IP转发和ARP(介质层地址解析)统一为单一通用服务的实例。STI-Xend扩展了VI体系结构，包括访问和动态拓扑控制(在IPSec、IPv6和动态路由方面尤其困难)，以及确保X-bone API的正确性。在过去的3年半时间里，X-bone软件已经发布了4次公开代码和18次公开演示。它是FreeBSD端口集合的一部分，并以Linux RPM的形式提供。

STI-XTend augments the X-Bone automated Internet overlay deployment and management tool to provide a secure environment for local and distributed network experiments, to support advanced research and classroom use. The X-Bone applies a Virtual Internet architecture to support secure, concurrent overlay networks (VPNs) using existing Unix operating systems, standard Internet protocols (IPsec, SSL, dynamic routing), and applications. It currently lacks some advanced facilities requested by a number of network researchers and faculty. STI-Xtend augments the X-Bone to support revisitation, dynamic topology control, ports it to additional platforms, and augments its API for integration with networked applications. The tool will be further packaged with additional support materials (examples, scripted demonstrations, and instructions) to enhance its use by the research and educational community. The extensions are:Support large-scale network emulation: STI-XTend allows overlays to revisit network components, allowing a small set of devices to emulate a large network using real protocols and applications. Dynamic topology control: STI-XTend allows overlay topologies to be modified by adding or deleting nodes or links, and to specify subset of responding nodes used (vs. arbitrary selection). This provides precise control of the participants and topology, allowing repeatable deployments.Support additional platforms: The X-Bone supports Unix hosts and host-based routers; STIXTend provides ports for other platforms (MacOS, Solaris) and adds IPv6, multicast, and a single-board system for modest installations and control of closed platforms.Augment user interfaces, API, and components: STI-XTend augments the X-Bone's GUI and updates its modular components and capabilities, e.g., dynamic routing (currently using defunct GateD and MRTd). The X-Bone is based on the abstract Virtual Internet (VI) architecture, which describes concurrent parallel and hierarchical overlays. The VI model inspired two-layer encapsulation to uniquely integrate IPsec with dynamic routing, and is being used to unify web search, DNS lookup, IP forwarding, and ARP (media-layer address resolution) as instances of a single, generic service. STI-XTend augments the VI architecture to include revisitation and dynamic topology control (especially difficult with IPsec, IPv6, and dynamic routing), as well as ensuring the correctness of the X-Bone API.Over the past 3 1/2 years, there have been 4 public code releases and 18 public demonstrations of the X-Bone software. It is part of the FreeBSD ports collection and available as a Linux RPM.