{"id":34279,"date":"2025-04-29T09:14:47","date_gmt":"2025-04-29T01:14:47","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/34279.html"},"modified":"2025-04-29T09:14:47","modified_gmt":"2025-04-29T01:14:47","slug":"%e7%ac%ac11%e7%ab%a0-%e5%ae%89%e5%85%a8%e7%bd%91%e7%bb%9c%e6%9e%b6%e6%9e%84%e5%92%8c%e7%bb%84%e4%bb%b6%ef%bc%88%e4%b8%80%ef%bc%89","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/34279.html","title":{"rendered":"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09"},"content":{"rendered":"

11.1 OSI \u6a21\u578b<\/p>\n

\u534f\u8bae\u53ef\u901a\u8fc7\u7f51\u7edc\u5728\u8ba1\u7b97\u673a\u4e4b\u95f4\u8fdb\u884c\u901a\u4fe1\u3002<\/p>\n

\u534f\u8bae\u662f\u4e00\u7ec4\u89c4\u5219\u548c\u9650\u5236，\u7528\u4e8e\u5b9a\u4e49\u6570\u636e\u5982\u4f55\u901a\u8fc7\u7f51\u7edc\u4ecb\u8d28（\u5982\u53cc\u7ede\u7ebf\u3001\u65e0\u7ebf\u4f20\u8f93\u7b49）\u8fdb\u884c\u4f20\u8f93\u3002<\/p>\n

\u56fd\u9645\u6807\u51c6\u5316\u7ec4\u7ec7(ISO)\u572820\u4e16\u7eaa70\u5e74\u4ee3\u665a\u671f\u5f00\u53d1\u4e86\u5f00\u653e\u7cfb\u7edf\u4e92\u8fde(OSI)\u53c2\u8003\u6a21\u578b\u3002<\/p>\n

\n

11.1.1 OSI\u6a21\u578b\u7684\u5386\u53f2<\/p>\n

OSI <\/span>\u53c2\u8003\u6a21\u578b<\/span>（\u901a\u5e38\u88ab\u79f0\u4e3aOSI<\/span>\u6a21\u578b<\/span>）：20\u4e16\u7eaa70\u5e74\u4ee3\u665a\u671f\u5f00\u53d1，（\u76f4\u52301984\u5e74\u624d\u6b63\u5f0f\u4f5c\u4e3aISO\u6807\u51c67498 \u53d1\u5e03）\u3002<\/p>\n

TCP\/IP <\/span>\u534f\u8bae<\/span>（\u73b0\u5728\u4e5f\u88ab\u79f0\u4e3aTCP\/IP<\/span>\u6a21\u578b<\/span>）：\u4f7f\u7528\u6700\u5e7f\u6cdb（\u57fa\u4e8e\u56fd\u9632\u90e8\u9ad8\u7ea7\u7814\u7a76\u8ba1\u5212\u5c40\u6a21\u578b），20\u4e16\u7eaa70\u5e74\u4ee3\u65e9\u671f\u5f00\u53d1\u3002<\/p>\n

\u3002<\/p>\n

OSI\u6a21\u578b\u7684\u5f00\u53d1\u65e8\u5728\u7ed9\u6240\u6709\u8ba1\u7b97\u673a\u7cfb\u7edf\u5efa\u7acb\u901a\u7528\u7684\u901a\u4fe1\u7ed3\u6784\u6216\u6807\u51c6\u3002<\/p>\n

OSI\u6a21\u578b\u5145\u5f53\u7740\u4e00\u4e2a\u62bd\u8c61\u6846\u67b6\u6216\u7406\u8bba\u6a21\u578b，\u7528\u4e8e\u63cf\u8ff0\u534f\u8bae\u5728\u7406\u60f3\u7684\u4e16\u754c\u91cc\u4ee5\u53ca\u7406\u60f3\u7684\u786c\u4ef6\u4e0a\u5e94\u5982\u4f55\u8fd0\u884c，\u5df2\u6210\u4e3a\u4e00\u4e2a\u5171\u540c\u53c2\u8003\u3002<\/p>\n

\n

11.1.2 OSI \u529f\u80fd<\/p>\n

OSI\u6a21\u578b\u5c06\u7f51\u7edc\u4efb\u52a1\u5206\u4e3a\u4e03\u5c42\u3002<\/p>\n

\u6bcf\u5c42\u8d1f\u8d23\u6267\u884c\u7279\u5b9a\u4efb\u52a1\u6216\u64cd\u4f5c，\u4ee5\u652f\u6301\u4e24\u53f0\u8ba1\u7b97\u673a\u4e4b\u95f4\u7684\u6570\u636e\u4ea4\u6362（\u5373\u7f51\u7edc\u901a\u4fe1）\u3002<\/p>\n

\u8fd9\u4e9b\u5c42\u7528\u540d\u79f0\u6216\u5c42\u53f7\u6765\u8868\u793a（\u53c2\u89c1\u56fe11.1)；\u6bcf\u4e00\u5c42\u90fd\u6309\u7279\u5b9a\u987a\u5b57\u6392\u5217，\u4ee5\u8868\u660e\u4fe1\u606f\u5982\u4f55\u901a\u8fc7\u4e0d\u540c\u7684\u901a\u4fe1\u5c42\u8fdb\u884c\u4f20\u9012\u3002<\/p>\n

\u6bcf\u4e00\u5c42\u76f4\u63a5\u4e0e\u4e0a\u9762\u7684\u5c42\u4ee5\u53ca\u4e0b\u9762\u7684\u5c42\u901a\u4fe1\u3002<\/p>\n

\"\"<\/p>\n

\u56fe11.1 OSI \u6a21\u578b\u7684\u8868\u793a<\/p>\n

\n

11.1.3 \u5c01\u88c5\/\u89e3\u5c01<\/p>\n

OSI\u6a21\u578b\u4ee3\u8868\u7684\u662f\u591a\u4e2a\u534f\u8bae（\u5373\u591a\u5c42\u534f\u8bae）\u5206\u5c42\u96c6\u5408\u7684\u534f\u8bae\u6808，\u534f\u8bae\u5c42\u4e4b\u95f4\u7684\u901a\u4fe1\u901a\u8fc7\u5c01\u88c5\u548c\u89e3\u5c01\u5b9e\u73b0\u3002<\/p>\n

\n

\u5c01\u88c5 <\/span>\u662f\u6307\u5728\u5c06\u6bcf\u5c42\u4ece\u4e0a\u9762\u7684\u5c42\u63a5\u6536\u5230\u7684\u6570\u636e\u4f20\u9012\u5230\u4e0b\u9762\u7684\u5c42\u4e4b\u524d，\u4e3a\u5176\u6dfb\u52a0\u5934\u90e8，\u4e5f\u53ef\u80fd\u6dfb\u52a0\u5c3e\u90e8\u3002<\/p>\n

\u5f53\u6d88\u606f\u88ab\u5c01\u88c5\u5728\u6bcf\u4e00\u5c42\u65f6，\u524d\u4e00\u5c42\u7684\u5934\u548c\u6709\u6548\u8f7d\u8377\u6210\u4e3a\u5f53\u524d\u5c42\u7684\u6709\u6548\u8f7d\u8377\u3002<\/p>\n

\u6570\u636e\u4ece\u7269\u7406\u5c42\u5230\u5e94\u7528\u5c42\u5411\u4e0a\u79fb\u52a8\u65f6\u7684\u9006\u64cd\u4f5c\u88ab\u79f0\u4e3a\u89e3\u5c01<\/span>\u3002<\/p>\n

\n

\u5c01\u88c5\/\u89e3\u5c01\u8fc7\u7a0b:<\/p>\n

  • \u5e94\u7528\u5c42\u63a5\u6536\u6570\u636e\u3002<\/li>\n

    \u5e94\u7528\u5c42\u901a\u8fc7\u6dfb\u52a0\u4fe1\u606f\u5934\u6765\u5c01\u88c5\u6d88\u606f\u3002<\/p>\n

    \u4fe1\u606f\u901a\u5e38\u4ec5\u5728\u6d88\u606f\u7684\u5f00\u5934（\u79f0\u4e3a\u5934\u90e8）\u6dfb\u52a0；\u4f46\u67d0\u4e9b\u5c42\u8fd8\u4f1a\u5728\u6d88\u606f\u672b\u5c3e\u6dfb\u52a0\u5185\u5bb9（\u79f0\u4e3a\u5c3e\u90e8）\u3002<\/p>\n

    \u5e94\u7528\u5c42\u5c06\u5c01\u88c5\u7684\u6d88\u606f\u4f20\u9012\u7ed9\u8868\u793a\u5c42\u3002<\/p>\n

    \"\"<\/p>\n

    \u56fe11.2 OSI \u6a21\u578b\u5c01\u88c5\u7684\u793a\u610f\u56fe<\/p>\n

    (2) \u5411\u4e0b\u4f20\u9012\u6d88\u606f\u5e76\u6dfb\u52a0\u7279\u5b9a\u5c42\u7684\u4fe1\u606f\u7684\u8fc7\u7a0b\u5c06\u4e00\u76f4\u6301\u7eed，\u76f4\u5230\u6d88\u606f\u5230\u8fbe\u7269\u7406\u5c42\u3002<\/p>\n

    (3) \u5728\u7269\u7406\u5c42，\u6d88\u606f\u88ab\u8f6c\u6362\u4e3a\u7528\u6bd4\u7279\u8868\u793a\u7684\u7535\u8109\u51b2，\u5e76\u901a\u8fc7\u7269\u7406\u8fde\u63a5\u4f20\u8f93\u3002<\/p>\n

    (4) \u63a5\u6536\u8ba1\u7b97\u673a\u4ece\u7269\u7406\u8fde\u63a5\u4e2d\u6355\u83b7\u6bd4\u7279，\u5728\u7269\u7406\u5c42\u4e2d\u91cd\u65b0\u521b\u5efa\u6d88\u606f，\u5e76\u5c06\u6d88\u606f\u53d1\u9001\u5230\u6570\u636e\u94fe\u8def\u5c42\u3002<\/p>\n

    (5) \u6570\u636e\u94fe\u8def\u5c42\u5265\u79bb\u5176\u4fe1\u606f\u5e76\u5c06\u6d88\u606f\u53d1\u9001\u5230\u7f51\u7edc\u5c42\u3002<\/p>\n

    (6) \u6267\u884c\u89e3\u5c01\u8fc7\u7a0b，\u76f4\u5230\u6d88\u606f\u5230\u8fbe\u5e94\u7528\u5c42\u3002<\/p>\n

    (7) \u5f53\u90ae\u4ef6\u5230\u8fbe\u5e94\u7528\u5c42\u65f6，\u90ae\u4ef6\u4e2d\u7684\u6570\u636e\u5c06\u53d1\u9001\u7ed9\u76ee\u6807\u6536\u4ef6\u4eba\u3002<\/p>\n

    \u6bcf\u5c42\u5220\u9664\u7684\u4fe1\u606f\u5305\u542b\u6307\u4ee4\u3001\u6821\u9a8c\u548c\u7b49，\u53ea\u6709\u6700\u521d\u6dfb\u52a0\u6216\u521b\u5efa\u4fe1\u606f\u7684\u5bf9\u7b49\u5c42\u80fd\u7406\u89e3（\u53c2\u89c1\u56fe11.3) \u3002<\/p>\n

    \u8fd9\u88ab\u79f0\u4e3a\u5bf9\u7b49\u5c42\u901a\u4fe1<\/span>\u3002<\/p>\n

    \"\"<\/p>\n

    \u56fe11.3 OSI\u6a21\u578b\u5bf9\u7b49\u5c42\u903b\u8f91\u4fe1\u9053\u793a\u610f\u56fe<\/p>\n

    \n

    \u53d1\u9001\u5230\u5e94\u7528\u5c42（\u7b2c7\u5c42）\u534f\u8bae\u6808\u7684\u6570\u636e\u88ab\u5c01\u88c5\u5230\u7f51\u7edc\u5bb9\u5668\u4e2d\u3002<\/p>\n

    \u534f\u8bae\u6570\u636e\u5355\u5143(PDU) <\/span>\u968f\u540e\u88ab\u4f20\u9012\u5230\u8868\u793a\u5c42（\u7b2c6\u5c42），\u8868\u793a\u5c42\u53c8\u5c06\u5176\u4f20\u9012\u5230\u4f1a\u8bdd\u5c42（\u7b2c5\u5c42）\u3002<\/p>\n

    \u8be5\u7f51\u7edc\u5bb9\u5668\u88ab\u79f0\u4e3a\u7b2c7\u3001\u7b2c6\u548c\u7b2c5\u5c42\u7684PDU, \u4e00\u65e6\u5b83\u5230\u8fbe\u4f20\u8f93\u5c42（\u7b2c4\u5c42），\u5b83\u5c06\u88ab\u79f0\u4e3a\u6bb5(TCP)\u6216\u6570\u636e\u62a5(UDP)<\/span>\u3002<\/p>\n

    \u5728\u7f51\u7edc\u5c42（\u7b2c3\u5c42）\u4e2d，\u5b83\u88ab\u79f0\u4e3a\u6570\u636e\u5305<\/span>\u3002<\/p>\n

    \u5728\u6570\u636e\u94fe\u8def\u5c42（\u7b2c2\u5c42）\u4e2d，\u5b83\u88ab\u79f0\u4e3a\u5e27<\/span>\u3002<\/p>\n

    \u5728\u7269\u7406\u5c42（\u7b2c1\u5c42）\u4e2d，\u7f51\u7edc\u5bb9\u5668\u88ab\u8f6c\u6362\u4e3a\u6bd4\u7279<\/span>，\u4ee5\u4fbf\u901a\u8fc7\u7269\u7406\u8fde\u63a5\u4ecb\u8d28\u4f20\u8f93\u3002<\/p>\n

    \u56fe11.4 \u663e\u793a\u4e86\u5e94\u7528\u4e8e\u5404\u5c42\u7f51\u7edc\u5bb9\u5668\u7684\u6807\u7b7e\u3002<\/p>\n

    \"\"<\/p>\n

    \u56fe11.4 OSI\u6a21\u578b\u57fa\u4e8e\u5c42\u7684\u7f51\u7edc\u5bb9\u5668\u540d\u79f0<\/p>\n

    \n

    11.1.4 OSI \u6a21\u578b\u5c42\u6b21<\/p>\n

    1. \u5e94\u7528\u5c42<\/p>\n

    \u5e94\u7528\u5c42（\u7b2c7\u5c42）\u8d1f\u8d23\u5c06\u7528\u6237\u5e94\u7528\u7a0b\u5e8f\u3001\u7f51\u7edc\u670d\u52a1\u6216\u64cd\u4f5c\u7cfb\u7edf\u4e0e\u534f\u8bae\u6808\u76f8\u8fde\u63a5\u3002<\/p>\n

    \u8f6f\u4ef6\u5e94\u7528\u7a0b\u5e8f\u4e0d\u5728\u6b64\u5c42\u5185；\u76f8\u53cd，\u8fd9\u91cc\u53ef\u627e\u5230\u4f20\u8f93\u6587\u4ef6\u3001\u4ea4\u6362\u6d88\u606f\u3001\u8fde\u63a5\u5230\u8fdc\u7a0b\u7ec8\u7aef\u7b49\u6240\u9700\u7684\u534f\u8bae\u548c\u670d\u52a1\u3002<\/p>\n

    2. \u8868\u793a\u5c42<\/p>\n

    \u8868\u793a\u5c42（\u7b2c6\u5c42）\u8d1f\u8d23\u5c06\u6570\u636e\u8f6c\u6362\u4e3a\u9075\u5faaOSI\u6a21\u578b\u7684\u4efb\u4f55\u7cfb\u7edf\u90fd\u80fd\u7406\u89e3\u7684\u683c\u5f0f\u3002<\/p>\n

    \u5b83\u5c06\u901a\u7528\u6216\u6807\u51c6\u5316\u7684\u7ed3\u6784\u548c\u683c\u5f0f\u89c4\u5219\u5f3a\u52a0\u5728\u6570\u636e\u4e4b\u4e0a\u3002\u8868\u793a\u5c42\u8fd8\u8d1f\u8d23\u52a0\u5bc6\u548c\u538b\u7f29\u3002<\/p>\n

    \u5728TCP\/IP\u7f51\u7edc\u4e0a，\u6ca1\u6709\u5b9e\u9645\u7684\u8868\u793a\u5c42\u3002<\/p>\n

    \u76ee\u524d\u4e0d\u9700\u8981\u4e3a\u7f51\u7edc\u4f20\u8f93\u91cd\u65b0\u683c\u5f0f\u5316\u6570\u636e，\u534f\u8bae\u6808\u538b\u7f29\u4ec5\u4e0e\u4e00\u4e9b\u52a0\u5bc6\u64cd\u4f5c\u534f\u540c\u8fdb\u884c\u3002<\/p>\n

    \u4e0e\u7f51\u7edc\u901a\u4fe1\u76f8\u5173\u7684\u52a0\u5bc6\u81f3\u5c11\u53ef\u4ee5\u5728\u4e94\u4e2a\u4f4d\u7f6e\u8fdb\u884c：<\/p>\n

    \u2022\u9884\u5148\u52a0\u5bc6，\u8f6f\u4ef6\u5728\u5c06\u6570\u636e\u53d1\u9001\u5230\u5e94\u7528\u5c42\u4e4b\u524d\u8fdb\u884c\u52a0\u5bc6\u3002<\/p>\n

    \u2022\u4f20\u8f93\u5c42\u52a0\u5bc6\u901a\u5e38\u7531TLS\u6267\u884c\u3002<\/p>\n

    \u2022VPN\u52a0\u5bc6，\u53ef\u53d1\u751f\u5728\u7b2c2\u3001\u7b2c3\u6216\u7b2c4\u5c42，\u5177\u4f53\u53d6\u51b3\u4e8e\u4f7f\u7528\u7684VPN\u6280\u672f（\u4f8b\u5982L2TP\u3001IPsec\u6216OpenVPN) \u3002<\/p>\n

    \u2022\u6570\u636e\u94fe\u8def\u5c42\u7684\u65e0\u7ebf\u52a0\u5bc6\u3002<\/p>\n

    \u2022\u7269\u7406\u5c42\u7684\u6279\u91cf\u52a0\u5bc6（\u7531\u7f51\u5361\u5916\u90e8\u7684\u8bbe\u5907\u63d0\u4f9b）\u3002<\/p>\n

    3. \u4f1a\u8bdd\u5c42<\/p>\n

    \u4f1a\u8bdd\u5c42（\u7b2c5\u5c42）\u8d1f\u8d23\u5efa\u7acb\u3001\u7ef4\u62a4\u548c\u7ec8\u6b62\u4e24\u53f0\u8ba1\u7b97\u673a\u4e4b\u95f4\u7684\u901a\u4fe1\u4f1a\u8bdd\u3002<\/p>\n

    \u5b83\u7ba1\u7406\u5bf9\u8bdd\u89c4\u5219\u6216\u5bf9\u8bdd\u63a7\u5236（\u5355\u5de5\u3001\u534a\u53cc\u5de5\u3001\u5168\u53cc\u5de5），\u5efa\u7acb\u5206\u7ec4\u548c\u6062\u590d\u7684\u68c0\u67e5\u70b9，\u5e76\u91cd\u4f20\u81ea\u4e0a\u6b21\u9a8c\u8bc1\u68c0\u67e5\u70b9\u4ee5\u6765\u5931\u8d25\u6216\u4e22\u5931\u7684PDU\u3002<\/p>\n

    \u5728TCP\/IP\u7f51\u7edc\u4e0a，\u6ca1\u6709\u5b9e\u9645\u7684\u4f1a\u8bdd\u5c42\u3002<\/p>\n

    \u4f1a\u8bdd\u5c42\u529f\u80fd\u7531TCP\u5728\u4f20\u8f93\u5c42\u5904\u7406，\u6216\u8005\u4f7f\u7528UDP\u65f6\u6839\u672c\u4e0d\u5904\u7406\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u63d0\u793a：<\/p>\n

    \u901a\u4fe1\u4f1a\u8bdd\u4e09\u79cd\u7ea6\u675f\u6216\u63a7\u5236\u6a21\u5f0f：<\/p>\n

    \u2022\u5355\u5de5\u5355\u5411\u901a\u4fe1\u3002<\/p>\n

    \u2022\u534a\u53cc\u5de5\u53cc\u5411\u901a\u4fe1，\u4f46\u4e00\u6b21\u53ea\u80fd\u5411\u4e00\u4e2a\u65b9\u5411\u53d1\u9001\u6570\u636e\u3002<\/p>\n

    \u2022\u5168\u53cc\u5de5\u53cc\u5411\u901a\u4fe1，\u53ef\u4ee5\u540c\u65f6\u5411\u4e24\u4e2a\u65b9\u5411\u53d1\u9001\u6570\u636e\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    4. \u4f20\u8f93\u5c42<\/p>\n

    \u4f20\u8f93\u5c42（\u7b2c4\u5c42）\u8d1f\u8d23\u7ba1\u7406\u8fde\u63a5\u7684\u5b8c\u6574\u6027\u5e76\u63a7\u5236\u4f1a\u8bdd\u3002<\/p>\n

    \u4f20\u8f93\u5c42\u5728\u8282\u70b9（\u4e5f\u79f0\u4e3a\u8bbe\u5907）\u4e4b\u95f4\u5efa\u7acb\u901a\u4fe1\u8fde\u63a5\u5e76\u5b9a\u4e49\u4f1a\u8bdd\u89c4\u5219\u3002<\/p>\n

    \u4f1a\u8bdd\u89c4\u5219\u6307\u5b9a\u6bcf\u4e2a\u6bb5\u53ef\u5305\u542b\u591a\u5c11\u6570\u636e，\u5982\u4f55\u9a8c\u8bc1\u6d88\u606f\u7684\u5b8c\u6574\u6027，\u4ee5\u53ca\u5982\u4f55\u786e\u5b9a\u6570\u636e\u662f\u5426\u5df2\u4e22\u5931\u3002<\/p>\n

    \u4f1a\u8bdd\u89c4\u5219\u662f\u901a\u8fc7\u63e1\u624b\u8fc7\u7a0b\u5efa\u7acb\u7684（\u8bf7\u53c2\u8003\u540e\u9762\u7684\u201c\u4f20\u8f93\u5c42\u534f\u8bae\u201d\u4e00\u8282，\u4e86\u89e3TCP\u7684SYN\/ACK\u4e09\u6b21\u63e1\u624b）\u3002<\/p>\n

    \u4f20\u8f93\u5c42\u5728\u4e24\u4e2a\u8bbe\u5907\u4e4b\u95f4\u5efa\u7acb\u903b\u8f91\u8fde\u63a5，\u5e76\u63d0\u4f9b\u7aef\u5230\u7aef\u4f20\u8f93\u670d\u52a1\u4ee5\u786e\u4fdd\u6570\u636e\u4f20\u8f93\u3002<\/p>\n

    \u8be5\u5c42\u5305\u62ec\u7528\u4e8e\u5206\u6bb5\u3001\u6392\u5e8f\u3001\u9519\u8bef\u68c0\u67e5\u3001\u63a7\u5236\u6570\u636e\u6d41\u3001\u7ea0\u9519\u3001\u591a\u8def\u590d\u7528\u548c\u7f51\u7edc\u670d\u52a1\u4f18\u5316\u7684\u673a\u5236\u3002<\/p>\n

    \n

    \u4ee5\u4e0b\u534f\u8bae\u5728\u4f20\u8f93\u5c42\u4e2d\u8fd0\u884c：<\/p>\n

    \u2022\u4f20\u8f93\u63a7\u5236\u534f\u8bae(Transmission Control Protocol，TCP)<\/p>\n

    \u2022\u7528\u6237\u6570\u636e\u62a5\u534f\u8bae(User Datagram Protocol，UDP)<\/p>\n

    \u2022\u4f20\u8f93\u5c42\u5b89\u5168(Transport Layer Security，TLS)<\/p>\n

    \n

    \u203b（TLS）\u6700\u597d\u7684\u4fdd\u62a4\u4e86\u654f\u611f\u4fe1\u606f\u6cc4\u9732<\/p>\n

    \"\"<\/p>\n

    \n

    5. \u7f51\u7edc\u5c42<\/p>\n

    \u7f51\u7edc\u5c42（\u7b2c3\u5c42）\u8d1f\u8d23\u903b\u8f91\u5bfb\u5740\u548c\u6267\u884c\u8def\u7531\u3002<\/p>\n

    \u5f53\u5730\u5740\u7531\u8f6f\u4ef6\u6216\u534f\u8bae\u5206\u914d\u548c\u4f7f\u7528，\u800c\u4e0d\u662f\u7531\u786c\u4ef6\u63d0\u4f9b\u548c\u63a7\u5236\u65f6，\u5c31\u4f1a\u53d1\u751f\u903b\u8f91\u5bfb\u5740\u3002<\/p>\n

    \u6570\u636e\u5305\u7684\u5305\u5934\u5305\u62ec，\u6e90\u548c\u76ee\u6807IP\u5730\u5740\u3002<\/p>\n

    \u7f51\u7edc\u5c42\u8d1f\u8d23\u63d0\u4f9b\u8def\u7531\u6216\u4f20\u9012\u5bfc\u822a\u4fe1\u606f，\u4f46\u5b83\u4e0d\u8d1f\u8d23\u9a8c\u8bc1\u4fe1\u606f\u662f\u5426\u4f20\u9012\u6210\u529f\u3002<\/p>\n

    \u7f51\u7edc\u5c42\u8fd8\u7ba1\u7406\u9519\u8bef\u68c0\u6d4b\u548c\u8282\u70b9\u6570\u636e\u6d41\u91cf（\u5373\u6d41\u91cf\u63a7\u5236）\u3002<\/p>\n

    \n

    \u203b<\/p>\n

    \"\"<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u975eIP\u4f20\u7edf\u534f\u8bae<\/p>\n

    \u975eIP\u534f\u8bae\u662f\u5728OSI\u7f51\u7edc\u5c42（\u7b2c3\u5c42）\u7528\u6765\u66ff\u4ee3IP\u7684\u534f\u8bae\u3002<\/p>\n

    \u968f\u7740TCP\/IP\u7684\u4e3b\u5bfc\u548c\u6210\u529f，\u975eIP\u534f\u8bae（\u5373\u4f20\u7edf\u534f\u8bae）\u5df2\u6210\u4e3a\u4e13\u7528\u7f51\u7edc\u7684\u8303\u7574，\u4f8b\u5982IPX\u3001AppleTallc\u548cNetBEUI\u3002<\/p>\n

    \u975eIP\u534f\u8bae\u5f88\u5c11\u89c1，\u56e0\u6b64\u5927\u591a\u6570\u9632\u706b\u5899\u65e0\u6cd5\u5bf9\u8fd9\u4e9b\u534f\u8bae\u6267\u884c\u6570\u636e\u5305\u6807\u5934\u3001\u5730\u5740\u6216\u6709\u6548\u8f7d\u8377\u5185\u5bb9\u8fc7\u6ee4\u3002<\/p>\n

    \u4f46\u975eIP\u534f\u8bae\u53ef\u5c01\u88c5\u5728IP\u4e2d，\u4ee5\u4fbf\u901a\u8fc7\u4e92\u8054\u7f51\u8fdb\u884c\u901a\u4fe1，\u56e0\u6b64\u4f20\u7edf\u534f\u8bae\u800c\u8981\u88ab\u963b\u6b62\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    \u8def\u7531\u5668\u662f\u5728\u7b2c3\u5c42\u8fd0\u884c\u7684\u57fa\u672c\u7f51\u7edc\u786c\u4ef6\u8bbe\u5907\u3002<\/p>\n

    \u8def\u7531\u5668\u6839\u636e\u901f\u7387\u3001\u8df3\u6570\u3001\u9996\u9009\u9879\u7b49\u786e\u5b9a\u6570\u636e\u5305\u4f20\u8f93\u7684\u6700\u4f73\u903b\u8f91\u8def\u5f84\u3002<\/p>\n

    \u8def\u7531\u5668\u4f7f\u7528\u76ee\u6807IP\u5730\u5740\u6765\u6307\u5bfc\u6570\u636e\u5305\u7684\u4f20\u8f93\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u8def\u7531\u534f\u8bae<\/p>\n

    \u5185\u90e8\u8def\u7531\u534f\u8bae\u6709\u4e24\u5927\u7c7b：\u8ddd\u79bb\u77e2\u91cf\u548c\u94fe\u8def\u72b6\u6001\u3002<\/p>\n

    1.\u8ddd\u79bb\u77e2\u91cf\u8def\u7531\u534f\u8bae，\u7ef4\u62a4\u76ee\u6807\u7f51\u7edc\u7684\u5217\u8868，\u4ee5\u53ca\u4ee5\u8df3\u6570\u5ea6\u91cf\u7684\u65b9\u5411\u548c\u8ddd\u79bb\u5ea6\u91cf（\u5373\u5230\u8fbe\u76ee\u7684\u5730\u7684\u8def\u7531\u5668\u7684\u6570\u91cf）\u3002<\/p>\n

    2.\u94fe\u8def\u72b6\u6001\u8def\u7531\u534f\u8bae，\u6536\u96c6\u8def\u7531\u7279\u6027，\u5c06\u901f\u7387\u3001\u5ef6\u8fdf\u3001\u8bef\u7801\u7387\u548c\u5b9e\u9645\u4f7f\u7528\u7684\u8d44\u91d1\u6210\u672c\u7b49\u4fe1\u606f\u5236\u6210\u8868\u683c，\u4ee5\u505a\u51fa\u4e0b\u4e00\u8df3\u7684\u8def\u7531\u51b3\u7b56\u3002<\/p>\n

    \u8ddd\u79bb\u77e2\u91cf\u8def\u7531\u534f\u8bae\u7684\u5e38\u89c1\u793a\u4f8b：RIP\u548cIGRP<\/p>\n

    \u94fe\u8def\u72b6\u6001\u8def\u7531\u534f\u8bae\u7684\u5e38\u89c1\u793a\u4f8b：OSPF \u548cIS-IS<\/p>\n

    \u8fd8\u6709\u4e00\u79cd\u5e38\u7528\u7684\u9ad8\u7ea7\u8ddd\u79bb\u5411\u91cf\u8def\u7531\u534f\u8bae(advanced distance vector routing protocol)\u4e00\u4e00\u589e\u5f3a\u578b\u5185\u90e8\u7f51\u5173\u8def\u7531\u534f\u8bae（EIGRP)，\u5b83\u66ff\u4ee3\u4e86IGRP\u3002<\/p>\n

    \n

    \u5916\u90e8\u8def\u7531\u534f\u8bae\u7684\u4e00\u79cd\u4e3b\u8981\u7c7b\u578b\u88ab\u79f0\u4e3a\u8def\u5f84\u5411\u91cf\u8def\u7531\u534f\u8bae\u3002<\/p>\n

    \u8def\u5f84\u5411\u91cf\u8def\u7531\u534f\u8bae，\u6839\u636e\u5230\u76ee\u7684\u5730\u7684\u6574\u4e2a\u5269\u4f59\u8def\u5f84（\u5373\u5411\u91cf）\u505a\u51fa\u4e0b\u4e00\u8df3\u51b3\u7b56\u3002<\/p>\n

    \u8fd9\u4e0e\u5185\u90e8\u8def\u7531\u534f\u8bae\u4e0d\u540c，\u5185\u90e8\u8def\u7531\u534f\u8bae\u4ec5\u6839\u636e\u76f8\u5173\u7684\u4fe1\u606f\u6765\u51b3\u5b9a\u4e0b\u4e00\u8df3\u3002<\/p>\n

    \u5185\u90e8\u8def\u7531\u534f\u8bae\u662f\u77ed\u89c6\u7684，\u800c\u5916\u90e8\u8def\u7531\u534f\u8bae\u662f\u6709\u8fdc\u89c1\u7684\u3002<\/p>\n

    \u8def\u5f84\u5411\u91cf\u534f\u8bae\u7684\u4e3b\u8981\u793a\u4f8b：\u8fb9\u754c\u7f51\u5173\u534f\u8bae(BGP)\u3002<\/p>\n

    \n

    \u901a\u8fc7\u914d\u7f6e\u8def\u7531\u5668，\u4f7f\u5176\u4ec5\u63a5\u53d7\u6765\u81ea\u5176\u4ed6\u7ecf\u8fc7\u8eab\u4efd\u8ba4\u8bc1\u7684\u8def\u7531\u5668\u7684\u8def\u7531\u66f4\u65b0，\u53ef\u4ee5\u5f3a\u5236\u6267\u884c\u8def\u7531\u5b89\u5168\u3002<\/p>\n

    \u5bf9\u8def\u7531\u5668\u7684\u7ba1\u7406\u8bbf\u95ee\u5728\u7269\u7406\u548c\u903b\u8f91\u4e0a\u5e94\u8be5\u4ec5\u9650\u4e8e\u7279\u5b9a\u7684\u6388\u6743\u5b9e\u4f53\u3002\u540c\u6837\u91cd\u8981\u7684\u662f\u4fdd\u6301\u8def\u7531\u5668\u56fa\u4ef6\u66f4\u65b0\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    6. \u6570\u636e\u94fe\u8def\u5c42<\/p>\n

    \u6570\u636e\u94fe\u8def\u5c42（\u7b2c2\u5c42）\u8d1f\u8d23\u5c06\u6570\u636e\u5305\u683c\u5f0f\u5316\u4e3a\u4f20\u8f93\u683c\u5f0f\u3002<\/p>\n

    \u6b63\u786e\u683c\u5f0f\u7531\u7f51\u7edc\u786c\u4ef6\u3001\u62d3\u6251\u548c\u6280\u672f\u51b3\u5b9a，\u5982\u4ee5\u592a\u7f51(IEEE 802.3)\u3002<\/p>\n

    \u5bf9\u6570\u636e\u94fe\u8def\u5c42\u5185\u7684\u7f51\u7edc\u5bb9\u5668\u5904\u7406\u5305\u62ec\u5c06\u6e90\u548c\u76ee\u6807\u786c\u4ef6\u5730\u5740\u6dfb\u52a0\u5230\u5e27\u7684\u64cd\u4f5c<\/span>\u3002<\/p>\n

    \n

    \u786c\u4ef6\u5730\u5740\u662fMAC\u5730\u5740，\u5b83\u662f\u4e00\u4e2a6\u5b57\u8282(48\u4f4d）\u7684\u4e8c\u8fdb\u5236\u5730\u5740，\u5e76\u4ee5\u5341\u516d\u8fdb\u5236\u8868\u793a\u6cd5\u7f16\u5199（\u598200-13-02- lF-58-FS)，\u4e5f\u88ab\u79f0\u4e3a\u7269\u7406\u5730\u5740\u3001NIC\u5730\u5740\u548c\u4ee5\u592a\u7f51\u5730\u5740\u3002<\/p>\n

    \u5730\u5740\u7684\u524d3\u4e2a\u5b57\u8282(24 \u4f4d）\u662f\u7ec4\u7ec7\u552f\u4e00\u6807\u8bc6\u7b26(OUI), \u8868\u793a\u7f51\u5361\u4f9b\u5e94\u5546\u6216\u5236\u9020\u5546\u3002<\/p>\n

    OUI\u5728\u7535\u6c14\u548c\u7535\u5b50\u5de5\u7a0b\u5e08\u534f\u4f1a(IEEE)\u6ce8\u518c，\u5e76\u63a7\u5236\u5176\u53d1\u884cOUI\u53ef\u7528\u4e8e\u901a\u8fc7IEEE\u7f51\u7ad9\u53d1\u73b0\u7f51\u5361\u7684\u5236\u9020\u5546\u3002<\/p>\n

    \u6700\u540e3\u4e2a\u5b57\u8282(24 \u4f4d）\u8868\u793a\u5236\u9020\u5546\u5206\u914d\u7ed9\u8be5\u63a5\u53e3\u7684\u552f\u4e00\u7f16\u53f7\u3002<\/p>\n

    \u4e00\u4e9b\u5236\u9020\u5546\u5c06\u4fe1\u606f\u7f16\u7801\u5230\u6700\u540e24\u4f4d，\u4ee3\u8868\u5236\u9020\u5546\u3001\u578b\u53f7\u548c\u751f\u4ea7\u7ebf\u7684\u552f\u4e00\u503c，\u56e0\u6b64，\u4e00\u4e9b\u4f7f\u7528\u552f\u4e00NIC\u7684\u8bbe\u5907（\u5982\u79fb\u52a8\u8bbe\u5907\u3001\u7269\u8054\u7f51\u8bbe\u5907\u548c\u5d4c\u5165\u5f0f\u7cfb\u7edf）\u53ef\u4ee5\u901a\u8fc7MAC\u5730\u5740\u8fdb\u884c\u8bc6\u522b\u3002<\/p>\n

    \n

    \u5728OSI\u6a21\u578b\u7684\u6570\u636e\u94fe\u8def\u5c42（\u7b2c2\u5c42\u7684\u534f\u8bae\u4e2d，\u4f60\u5e94\u8be5\u719f\u6089\u5730\u5740\u89e3\u6790\u534f\u8bae(ARP<\/span>)\u3002<\/p>\n

    \u8bf7\u53c2\u9605\u672c\u7ae0\u540e\u9762\u7684\u201cARP \u5173\u6ce8\u70b9\u201d\u4e00\u8282\u3002<\/p>\n

    \n

    \u5728\u7b2c2\u5c42（\u6570\u636e\u94fe\u8def\u5c42）\u8fd0\u884c\u7684\u7f51\u7edc\u786c\u4ef6\u8bbe\u5907：\u4ea4\u6362\u673a\u548c\u7f51\u6865<\/span>\u3002<\/p>\n

    \u8fd9\u4e9b\u8bbe\u5907\u652f\u6301\u57fa\u4e8eMAC\u7684\u6d41\u91cf\u8def\u7531\u3002<\/p>\n

    \u4ea4\u6362\u673a\u5728\u4e00\u4e2a\u7aef\u53e3\u4e0a\u63a5\u6536\u796f，\u5e76\u6839\u636e\u76ee\u6807MAC\u5730\u5740\u5c06\u5176\u53d1\u9001\u5230\u53e6\u4e00\u4e2a\u7aef\u53e3\u3002<\/p>\n

    MAC\u5730\u5740\u76ee\u7684\u5730\u7528\u4e8e\u786e\u5b9a\u5e27\u662f\u5426\u901a\u8fc7\u7f51\u6865\u4ece\u4e00\u4e2a\u7f51\u6bb5\u4f20\u8f93\u5230\u53e6\u4e00\u4e2a\u7f51\u6bb5\u3002<\/p>\n

    7. \u7269\u7406\u5c42<\/p>\n

    \u7269\u7406\u5c42（\u7b2c1\u5c42）\u5c06\u5e27\u8f6c\u6362\u4e3a\u6bd4\u7279<\/span>，\u4ee5\u4fbf\u901a\u8fc7\u7269\u7406\u8fde\u63a5\u4ecb\u8d28\u8fdb\u884c\u4f20\u8f93；\u53cd\u4e4b\u4ea6\u7136，\u4ee5\u4fbf\u63a5\u6536\u901a\u4fe1\u3002<\/p>\n

    \n

    \u5728\u7b2c1\u5c42（\u7269\u7406\u5c42）\u8fd0\u884c\u7684\u7f51\u7edc\u786c\u4ef6\u8bbe\u5907：NIC<\/span>\u3001\u96c6\u7ebf\u5668\u3001\u4e2d\u7ee7\u5668\u3001\u96c6\u4e2d\u5668\u548c\u653e\u5927\u5668<\/span>\u3002<\/p>\n

    \u8fd9\u4e9b\u8bbe\u5907\u6267\u884c\u57fa\u4e8e\u786c\u4ef6\u7684\u4fe1\u53f7\u64cd\u4f5c，\u4f8b\u5982\u4ece\u4e00\u4e2a\u8fde\u63a5\u7aef\u53e3\u5411\u6240\u6709\u5176\u4ed6\u7aef\u53e3（\u96c6\u7ebf\u5668）\u53d1\u9001\u4fe1\u53f7\u6216\u653e\u5927\u4fe1\u53f7，\u4ee5\u652f\u6301\u66f4\u5927\u7684\u4f20\u8f93\u8ddd\u79bb（\u4e2d\u7ee7\u5668）\u3002<\/p>\n

    \n

    11.2 TCP\/IP \u6a21\u578b<\/p>\n

    TCP\/IP\u6a21\u578b（\u4e5f\u79f0\u4e3aDARPA\u6a21\u578b\u6216DOD\u6a21\u578b）\u4ec5\u7531\u56db\u5c42\u7ec4\u6210，\u800cOSI\u53c2\u8003\u6a21\u578b\u5219\u4e3a\u4e03\u5c42\u3002<\/p>\n

    TCP\/IP<\/span>\u6a21\u578b\u7684\u56db\u4e2a\u5c42：<\/span><\/p>\n

    ￭ \u5e94\u7528\u5c42（\u4e5f\u79f0\u4e3a\u8fdb\u7a0b）<\/p>\n

    ￭ \u4f20\u8f93\u5c42（\u4e5f\u79f0\u4e3a\u4e3b\u673a\u5230\u4e3b\u673a）<\/p>\n

    ￭ \u4e92\u8054\u7f51\u5c42（\u4e5f\u79f0\u4e3a\u7f51\u7edc\u4e92\u8054）<\/p>\n

    ￭ \u94fe\u8def\u5c42（\u5c3d\u7ba1\u4f7f\u7528\u7f51\u7edc\u63a5\u53e3，\u6709\u65f6\u4e5f\u4f7f\u7528\u7f51\u7edc\u8bbf\u95ee）\u3002<\/p>\n

    \u56fe11.5 \u663e\u793a\u4e86\u5b83\u4eec\u4e0eOSI\u6a21\u578b\u7684\u4e03\u4e2a\u5c42\u7684\u5bf9\u6bd4\u3002TCP\/IP\u534f\u8bae\u5957\u4ef6\u7684\u5f00\u53d1\u65e9\u4e8eOSI\u53c2\u8003\u6a21\u578b\u7684\u521b\u5efa\u3002<\/p>\n

    \"\"<\/p>\n

    \u56fe11.5 \u5c06OSI\u6a21\u578b\u4e0eTCP\/IP\u6a21\u578b\u8fdb\u884c\u6bd4\u8f83+<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u63d0\u793a：<\/p>\n

    TCP\/IP\u6a21\u578b\u5c42\u540d\u79f0\u548cOSI\u6a21\u578b\u5c42\u540d\u79f0\u53ef\u4e92\u6362\u4f7f\u7528，\u56e0\u6b64\u5fc5\u987b\u4e86\u89e3\u5728\u5404\u79cd\u4e0a\u4e0b\u6587\u4e2d\u5982\u4f55\u9009\u7528\u6a21\u578b\u3002<\/p>\n

    \u9664\u975e\u53e6\u6709\u8bf4\u660e，\u5426\u5219\u59cb\u7ec8\u5047\u8bbe\u4ee5OSI\u6a21\u578b\u4e3a\u57fa\u7840，\u56e0\u4e3a\u5b83\u662f\u4f7f\u7528\u6700\u5e7f\u6cdb\u7684\u7f51\u7edc\u53c2\u8003\u6a21\u578b\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    TCP\/IP\u6a21\u578b\u76f4\u63a5\u6e90\u81eaTCP\/IP\u534f\u8bae\u5957\u4ef6\u6216\u8bb8\u591a\u5355\u72ec\u534f\u8bae\u7ec4\u6210\u7684\u534f\u8bae\u6808\u3002<\/p>\n

    TCP\/IP\u662f\u4e00\u79cd\u57fa\u4e8e\u5f00\u653e\u6807\u51c6\u7684\u72ec\u7acb\u4e8e\u5e73\u53f0\u7684\u534f\u8bae\u3002<\/p>\n

    TCP\/IP\u51e0\u4e4e\u652f\u6301\u6240\u6709\u64cd\u4f5c\u7cfb\u7edf，\u4f46\u4f1a\u6d88\u8017\u5927\u91cf\u7cfb\u7edf\u8d44\u6e90\u5e76\u4e14\u76f8\u5bf9\u5bb9\u6613\u88ab\u5165\u4fb5，\u56e0\u4e3a\u5b83\u7684\u8bbe\u8ba1\u521d\u8877\u662f\u6613\u7528\u6027\u548c\u4e92\u64cd\u4f5c\u6027，\u800c\u4e0d\u662f\u5b89\u5168\u6027\u3002<\/p>\n

    \n

    TCP\/IP\u7684\u6f0f\u6d1e\u5f88\u591a\u3002<\/p>\n

    \u5982\u679c\u5728\u5404\u79cd\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u4e0d\u6b63\u786e\u5730\u5b9e\u73b0TCP\/IP\u5806\u6808，\u5c06\u5bb9\u6613\u53d7\u5230\u4ee5\u4e0b\u653b\u51fb：<\/p>\n

    ￭ \u7f13\u51b2\u533a\u6ea2\u51fa\u653b\u51fb<\/p>\n

    ￭ SYN\u6d2a\u6c34\u653b\u51fb<\/p>\n

    ￭ \u5404\u79cd\u62d2\u7edd\u670d\u52a1(DoS)\u653b\u51fb<\/p>\n

    ￭ \u788e\u7247\u653b\u51fb<\/p>\n

    ￭ \u8d85\u5927\u6570\u636e\u5305\u653b\u51fb<\/p>\n

    ￭ \u6b3a\u9a97\u653b\u51fb<\/p>\n

    ￭ \u4e2d\u95f4\u4eba\u653b\u51fb（\u8def\u5f84\u653b\u51fb）<\/p>\n

    ￭ \u52ab\u6301\u653b\u51fb<\/p>\n

    ￭ \u7f16\u7801\u9519\u8bef\u653b\u51fb<\/p>\n

    TCP\/IP（\u4ee5\u53ca\u5927\u591a\u6570\u534f\u8bae）\u4e5f\u4f1a\u53d7\u5230\u76d1\u89c6\u6216\u55c5\u63a2\u7b49\u88ab\u52a8\u653b\u51fb\u3002<\/p>\n

    \n

    11.3 \u7f51\u7edc\u6d41\u91cf\u5206\u6790<\/p>\n

    \u7f51\u7edc\u6d41\u91cf\u5206\u6790<\/span>\u662f\u7ba1\u7406\u7f51\u7edc\u7684\u57fa\u672c\u529f\u80fd\u3002<\/p>\n

    \u5b83\u53ef\u4ee5\u7528\u4e8e\u8ddf\u8e2a\u6076\u610f\u901a\u4fe1\u3001\u68c0\u6d4b\u9519\u8bef\u6216\u89e3\u51b3\u4f20\u8f93\u95ee\u9898\u3002<\/p>\n

    \u7136\u800c，\u7f51\u7edc\u7a83\u542c\u4e5f\u53ef\u80fd\u88ab\u7528\u4e8e\u8fdd\u53cd\u901a\u4fe1\u4fdd\u5bc6\u6027\u548c\/\u6216\u5145\u5f53\u540e\u7eed\u653b\u51fb\u7684\u4fe1\u606f\u6536\u96c6\u9636\u6bb5\u3002<\/p>\n

    \n

    \u534f\u8bae\u5206\u6790\u5668<\/span>\u662f\u7528\u4e8e\u68c0\u67e5\u7f51\u7edc\u6d41\u91cf\u5185\u5bb9\u7684\u5de5\u5177\u3002<\/p>\n

    \u534f\u8bae\u5206\u6790\u5668\u53ef\u4ee5\u662f\u5b89\u88c5\u5728\u5178\u578b\u4e3b\u673a\u7cfb\u7edf\u4e0a\u7684\u4e13\u7528\u786c\u4ef6\u8bbe\u5907\u6216\u8f6f\u4ef6\u3002<\/p>\n

    \u534f\u8bae\u5206\u6790\u5668\u662f\u4e00\u79cd\u5e27\/\u6570\u636e\u5305\u6355\u83b7\u5de5\u5177，\u53ef\u4ee5\u6536\u96c6\u7f51\u7edc\u6d41\u91cf\u5e76\u5c06\u5176\u5b58\u50a8\u5728\u5185\u5b58\u6216\u5b58\u50a8\u8bbe\u5907\u4e2d\u3002<\/p>\n

    \u6355\u83b7\u5e27\u6216\u6570\u636e\u5305\u540e，\u53ef\u4ee5\u4f7f\u7528\u590d\u6742\u7684\u81ea\u52a8\u5316\u5de5\u5177\u548c\u811a\u672c\u6216\u624b\u52a8\u5bf9\u5176\u8fdb\u884c\u5206\u6790\u3002<\/p>\n

    \u534f\u8bae\u5206\u6790\u5668\u4e5f\u53ef\u88ab\u79f0\u4e3a\u55c5\u63a2\u5668\u3001\u7f51\u7edc\u8bc4\u4f30\u5668\u3001\u7f51\u7edc\u5206\u6790\u5668\u3001\u6d41\u91cf\u76d1\u89c6\u5668\u6216\u5305\u6355\u83b7\u5b9e\u4f53<\/span>\u3002<\/p>\n

    \u55c5\u63a2\u5668\u901a\u5e38\u662f\u4e00\u79cd\u6570\u636e\u5305（\u6216\u5e27）\u6355\u83b7\u5de5\u5177，\u800c\u534f\u8bae\u5206\u6790\u5668\u80fd\u591f\u89e3\u7801\u548c\u89e3\u91ca\u6570\u636e\u5305\/\u5e27\u5185\u5bb9\u3002<\/p>\n

    \n

    \u534f\u8bae\u5206\u6790\u5668\u901a\u5e38\u5c06NIC\u7f6e\u4e8e\u6df7\u6742\u6a21\u5f0f，\u4ee5\u67e5\u770b\u548c\u6355\u83b7\u672c\u5730\u7f51\u6bb5\u4e0a\u7684\u6240\u6709\u4ee5\u592a\u7f51\u5e27\u3002<\/p>\n

    \u5728\u6df7\u6742\u6a21\u5f0f\u4e0b，NIC\u5ffd\u7565\u4ee5\u592a\u7f51\u5e27\u7684\u76ee\u6807MAC\u5730\u5740，\u5e76\u6536\u96c6\u5230\u8fbe\u63a5\u53e3\u7684\u6bcf\u4e2a\u5e27\u3002<\/p>\n

    \u534f\u8bae\u5206\u6790\u5668\u53ef\u4ee5\u68c0\u67e5\u5355\u4e2a\u5e27，\u76f4\u81f3\u4e8c\u8fdb\u5236\u7ea7\u522b\u3002<\/p>\n

    \u5927\u591a\u6570\u5206\u6790\u5668\u6216\u55c5\u63a2\u5668\u4f1a\u81ea\u52a8\u5c06\u6807\u9898\u7684\u5185\u5bb9\u89e3\u6790\u4e3a\u53ef\u6269\u5c55\u7684\u8f93\u51fa\u884c\u5f62\u5f0f\u3002<\/p>\n

    \u5728\u6807\u9898\u8be6\u7ec6\u4fe1\u606f\u4e2d\u53ef\u4ee5\u5f88\u5bb9\u6613\u5730\u770b\u5230\u4efb\u4f55\u914d\u7f6e\u6216\u8bbe\u7f6e\u3002<\/p>\n

    \u6570\u636e\u5305\u7684\u6709\u6548\u8d1f\u8f7d\u901a\u5e38\u4ee5\u5341\u516d\u8fdb\u5236\u548cASCII\u683c\u5f0f\u663e\u793a\u3002<\/p>\n

    \u534f\u8bae\u5206\u6790\u5668\u901a\u5e38\u540c\u65f6\u63d0\u4f9b\u6355\u83b7\u8fc7\u6ee4\u5668\u548c\u663e\u793a\u8fc7\u6ee4\u5668\u3002<\/p>\n

    \u6355\u83b7\u8fc7\u6ee4\u5668\u662f\u4e00\u7ec4\u89c4\u5219，\u7528\u4e8e\u63a7\u5236\u54ea\u4e9b\u5e27\u88ab\u4fdd\u5b58\u5230\u6355\u83b7\u6587\u4ef6\u6216\u7f13\u51b2\u533a\u4e2d，\u4ee5\u53ca\u54ea\u4e9b\u5e27\u88ab\u4e22\u5f03\u3002<\/p>\n

    \u663e\u793a\u8fc7\u6ee4\u5668\u4ec5\u663e\u793a\u6570\u636e\u5305\u6587\u4ef6\u6216\u7f13\u51b2\u533a\u4e2d\u7b26\u5408\u8981\u6c42\u7684\u5e27\u3002<\/p>\n

    \n

    \u534f\u8bae\u5206\u6790\u5668\u975e\u5e38\u591a\u6837，\u4ece\u7b80\u5355\u7684\u539f\u59cb\u5e27\/\u6570\u636e\u5305\u6355\u83b7\u5de5\u5177，\u5230\u5168\u81ea\u52a8\u5206\u6790\u5f15\u64ce，\u5404\u6709\u4e0d\u540c\u3002<\/p>\n

    ￭\u5f00\u6e90（\u5982Wireshark)<\/p>\n

    ￭\u5546\u4e1a（\u5982Omnipeek\u3001NetWitness\u548cNetScout)\u9009\u9879\u3002<\/p>\n

    \n

    11.4 \u901a\u7528\u5e94\u7528\u5c42\u534f\u8bae<\/p>\n

    OSI\u6a21\u578b\u7684\u5e94\u7528\u5c42\u5b58\u5728\u8bb8\u591a\u7279\u5b9a\u4e8e\u5e94\u7528\u6216\u670d\u52a1\u7684\u534f\u8bae\u3002<\/p>\n

    ￭ Telnet，TCP 23\u7aef\u53e3<\/p>\n

    \u662f\u4e00\u4e2a\u7ec8\u7aef\u4eff\u771f\u7f51\u7edc\u5e94\u7528\u7a0b\u5e8f，\u652f\u6301\u8fdc\u7a0b\u8fde\u63a5<\/span>\u4ee5\u6267\u884c\u547d\u4ee4\u548c\u8fd0\u884c\u5e94\u7528\u7a0b\u5e8f，\u4f46\u4e0d\u652f\u6301\u6587\u4ef6\u4f20\u8f93\u3002<\/p>\n

    \u4e0d\u5e94\u4f7f\u7528Telnet, \u800c\u5e94\u8be5\u7528SSH\u66ff\u4ee3\u3002<\/p>\n

    ￭ FTP，TCP 20\u7aef\u53e3（\u6d3b\u52a8\u6570\u636e\u8fde\u63a5）\/\u77ed\u6682（\u88ab\u52a8\u6570\u636e\u8fde\u63a5）\u548c21（\u63a7\u5236\u8fde\u63a5）\u7aef\u53e3<\/p>\n

    \u662f\u4e00\u4e2a\u7f51\u7edc\u5e94\u7528\u7a0b\u5e8f，\u652f\u6301\u9700\u8981\u533f\u540d\u6216\u7279\u5b9a\u8eab\u4efd\u8ba4\u8bc1\u7684\u6587\u4ef6\u4f20\u8f93\u3002\u4e0d\u5e94\u4f7f\u7528FTP，\u800c\u5e94\u8be5\u7528SFTP\u6216FTPS\u66ff\u4ee3\u3002<\/p>\n

    ￭ TFTP，UDP 69\u7aef\u53e3（Trivial File Transfer Protocol,\u7b80\u5355\u6587\u4ef6\u4f20\u8f93\u534f\u8bae<\/span>）<\/p>\n

    \u662f\u4e00\u4e2a\u652f\u6301\u4e0d\u9700\u8981\u8eab\u4efd\u8ba4\u8bc1\u7684\u6587\u4ef6\u4f20\u8f93\u7684\u7f51\u7edc\u5e94\u7528\u7a0b\u5e8f\u3002<\/p>\n

    \u7528\u4e8e\u627f\u8f7d\u7f51\u7edc\u8bbe\u5404\u914d\u7f6e\u6587\u4ef6，\u5e76\u53ef\u652f\u6301\u591a\u64ad\u3002\u4e0d\u5e94\u4f7f\u7528TFTP\u3002<\/p>\n

    ￭ SMTP，TCP 25\u7aef\u53e3（\u7b80\u5355\u90ae\u4ef6\u4f20\u8f93\u534f\u8bae<\/span>）<\/p>\n

    \u662f\u4e00\u79cd\u7528\u4e8e\u5c06\u7535\u5b50\u90ae\u4ef6\u4ece\u5ba2\u6237\u7aef\u4f20\u8f93\u5230\u7535\u5b50\u90ae\u4ef6\u670d\u52a1\u5668\u4ee5\u53ca\u4ece\u4e00\u4e2a\u7535\u5b50\u90ae\u4ef6\u670d\u52a1\u5668\u4f20\u8f93\u5230\u53e6\u4e00\u4e2a\u7535\u5b50\u90ae\u4ef6\u670d\u52a1\u5668\u7684\u534f\u8bae\u3002<\/p>\n

    \u4ec5\u5728\u4f7f\u7528TLS\u52a0\u5bc6\u521b\u5efaSMTPS\u65f6\u4f7f\u7528\u3002<\/p>\n

    ￭ POP3，TCP 110\u7aef\u53e3（Post Office Protocol – Version 3\u201d<\/span>，\u5373\u201c\u90ae\u5c40\u534f\u8bae\u7248\u672c3\u201d<\/span>）<\/p>\n

    \u662f\u4e00\u79cd\u7528\u4e8e\u5c06\u7535\u5b50\u90ae\u4ef6\u4ece\u7535\u5b50\u90ae\u4ef6\u670d\u52a1\u5668\u4e0a\u7684\u6536\u4ef6\u7bb1\u4e2d\u62c9\u5230\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u7684\u534f\u8bae（\u5373\u5ba2\u6237\u7aef\u5b58\u6863）\u3002<\/p>\n

    \u4ec5\u5728\u4f7f\u7528TLS\u52a0\u5bc6\u521b\u5efaPOPS\u65f6\u4f7f\u7528\u3002<\/p>\n

    ￭ IMAP(IMAP4)，TCP 143\u7aef\u53e3<\/p>\n

    \u662f\u4e00\u79cd\u7528\u4e8e\u5c06\u7535\u5b50\u90ae\u4ef6\u4ece\u7535\u5b50\u90ae\u4ef6\u670d\u52a1\u5668\u4e0a\u7684\u6536\u4ef6\u7bb1\u62c9\u5230\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u7684\u534f\u8bae\u3002<\/p>\n

    IMAP\u80fd\u4ec5\u4ece\u7535\u5b50\u90ae\u4ef6\u670d\u52a1\u5668\u4e2d\u68c0\u7d22\u6807\u5934\u5e76\u76f4\u63a5\u4ece\u7535\u5b50\u90ae\u4ef6\u670d\u52a1\u5668\u5220\u9664\u90ae\u4ef6（\u5373\u670d\u52a1\u5668\u5b58\u6863）\u3002<\/p>\n

    \u4ec5\u5728\u4f7f\u7528TLS\u52a0\u5bc6\u521b\u5efaIMAPS\u65f6\u4f7f\u7528\u3002<\/p>\n

    ￭ DHCP，UDP 67（\u670d\u52a1\u5668）\u7aef\u53e3\u548c68（\u5ba2\u6237\u7aef）\u7aef\u53e3<\/p>\n

    \u7528\u4e8e\u96c6\u4e2d\u63a7\u5236\u542f\u52a8\u65f6\u4e3a\u7cfb\u7edf\u5206\u914d\u7684TCP\/IP \u914d\u7f6e\u8bbe\u7f6e\u3002<\/p>\n

    ￭ HTTP，TCP 80\u7aef\u53e3<\/p>\n

    \u662f\u7528\u660e\u6587\u5c06Web\u9875\u9762\u5143\u7d20\u4eceWeb\u670d\u52a1\u5668\u4f20\u8f93\u5230Web\u6d4f\u89c8\u5668\u7684\u534f\u8bae\u3002<\/p>\n

    ￭ HTTPS，TCP 443 \u7aef\u53e3<\/p>\n

    \u662fHTTP\u7684TLS\u52a0\u5bc6\u7248\u672c\u3002（\u5e26TLS\u7684HTTPS\u652f\u6301\u4f7f\u7528TCP 80\u7aef\u53e3，\u4f46\u4ec5\u7528\u4e8e\u670d\u52a1\u5668\u5230\u670d\u52a1\u5668\u7684\u901a\u4fe1\u3002）<\/p>\n

    ￭ LPD，TCP 515\u7aef\u53e3<\/p>\n

    \u662f\u4e00\u79cd\u7f51\u7edc\u670d\u52a1，\u7528\u4e8e\u5047\u8131\u673a\u6253\u5370\u4f5c\u4e1a\u4ee5\u53ca\u5c06\u6253\u5370\u4f5c\u4e1a\u53d1\u9001\u5230\u6253\u5370\u673a\u3002\u5e94\u5c01\u95ed\u5728VPN\u4e2d\u4f7f\u7528\u3002<\/p>\n

    ￭ X Window，TCP 6000~6063\u7aef\u53e3<\/p>\n

    \u662f\u7528\u4e8e\u547d\u4ee4\u884c\u64cd\u4f5c\u7cfb\u7edf\u7684GUI API\u3002\u5e94\u5c01\u95ed\u5728VPN\u4e2d\u4f7f\u7528\u3002<\/p>\n

    ￭ NFS，TCP 2049\u7aef\u53e3<\/p>\n

    \u662f\u4e00\u79cd\u7f51\u7edc\u670d\u52a1，\u7528\u4e8e\u652f\u6301\u4e0d\u540c\u7cfb\u7edf\u4e4b\u95f4\u7684\u6587\u4ef6\u5171\u4eab\u3002\u5e94\u5c01\u95ed\u5728VPN\u4e2d\u4f7f\u7528\u3002<\/p>\n

    ￭ SNMP，UDP 161\u7aef\u53e3（\u7528\u4e8e\u9677\u9631\u6d88\u606f\u7684\u662fUDP 162\u7aef\u53e3）<\/p>\n

    \u662f\u4e00\u79cd\u7f51\u7edc\u670d\u52a1，\u7528\u4e8e\u4ece\u4e2d\u592e\u76d1\u63a7\u670d\u52a1\u5668\u6536\u96c6\u7f51\u7edc\u8fd0\u884c\u72b6\u51b5\u548c\u72b6\u6001\u4fe1\u606f\u3002<\/p>\n

    \u4ec5SNMP v3\u662f\u5b89\u5168\u7684\u3002\u82e5\u8981\u4e86\u89e3\u66f4\u591a\u6709\u5173\u5b89\u5168\u534f\u8bae\u7684\u793a\u4f8b，\u8bf7\u53c2\u8003\u540e\u9762\u7684\u5c0f\u8282\u201c\u5b89\u5168\u901a\u4fe1\u534f\u8bae\u201d\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    SNMPv3<\/p>\n

    SNMP\u662f\u5927\u591a\u6570\u7f51\u7edc\u8bbe\u5907\u548cTCP\/IP\u517c\u5bb9\u4e3b\u673a\u652f\u6301\u7684\u6807\u51c6\u7f51\u7edc\u7ba1\u7406\u534f\u8bae<\/span>\u3002<\/p>\n

    \u8fd9\u4e9b\u8bbe\u5907\u5305\u62ec：\u8def\u7531\u5668\u3001\u4ea4\u6362\u673a\u3001\u65e0\u7ebf\u63a5\u5165\u70b9(WAP)\u3001\u9632\u706b\u5899\u3001VPN\u8bbe\u5907\u548c\u6253\u5370\u673a\u7b49\u3002<\/p>\n

    \u4ece\u7ba1\u7406\u63a7\u5236\u53f0，\u4f60\u53ef\u4f7f\u7528SNMP\u4e0e\u5404\u79cd\u7f51\u7edc\u8bbe\u5907\u8fdb\u884c\u4ea4\u4e92，\u4ee5\u83b7\u53d6\u72b6\u6001\u4fe1\u606f\u3001\u6027\u80fd\u6570\u636e\u3001\u7edf\u8ba1\u4fe1\u606f\u548c\u914d\u7f6e\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n

    \u67d0\u4e9b\u8bbe\u5907\u652f\u6301\u901a\u8fc7SNMP\u4fee\u6539\u914d\u7f6e\u8bbe\u7f6e\u3002<\/p>\n

    \n

    \u65e9\u671f\u7248\u672c\u7684SNMP\u5c06\u660e\u6587\u4f20\u8f93\u7684\u793e\u533a\u540d\u7528\u4e8e\u8eab\u4efd\u8ba4\u8bc1\u3002<\/p>\n

    \u793e\u533a\u540d\u8868\u793a\u7f51\u7edc\u8bbe\u5907\u96c6\u5408\u3002<\/p>\n

    \u539f\u59cb\u9ed8\u8ba4\u793e\u533a\u540d\u662f\u516c\u5171\u548c\u79c1\u6709\u7684\u3002<\/p>\n

    \u6700\u65b0\u7248\u672c\u7684SNMP\u5141\u8bb8\u52a0\u5bc6\u901a\u4fe1，\u4ee5\u53ca\u5f3a\u5927\u7684\u8eab\u4efd\u8ba4\u8bc1\u56e0\u7d20\u3002<\/p>\n

    \n

    SNMP\u4ee3\u7406（\u5373\u7f51\u7edc\u8bbe\u5907）\u4f7f\u7528UDP 161\u7aef\u53e3\u63a5\u6536\u8bf7\u6c42，\u7ba1\u7406\u63a7\u5236\u53f0\u4f7f\u7528UDP 162\u7aef\u53e3\u63a5\u6536\u54cd\u5e94\u548c\u901a\u77e5（\u4e5f\u88ab\u79f0\u4e3aTrap\u6d88\u606f）\u3002<\/p>\n

    \u5f53\u53d7\u76d1\u89c6\u7684\u7cfb\u7edf\u4e0a\u53d1\u751f\u4e8b\u4ef6\u5e76\u89e6\u53d1\u9608\u503c\u65f6，Trap\u6d88\u606f\u4f1a\u901a\u77e5\u7ba1\u7406\u63a7\u5236\u53f0\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    11.5 \u4f20\u8f93\u5c42\u534f\u8bae<\/p>\n

    \u5982\u679c\u8fde\u63a5\u662f\u901a\u8fc7\u4f20\u8f93\u5c42\u5efa\u7acb\u7684，\u90a3\u4e48\u8be5\u8fc7\u7a0b\u662f\u5229\u7528\u7aef\u53e3\u5b9e\u73b0\u7684\u3002<\/p>\n

    \u7aef\u53e3\u53f7\u662f16\u4f4d\u4e8c\u8fdb\u5236\u6570，\u56e0\u6b64\u7aef\u53e3\u603b\u6570\u4e3a2^16\u621665536，\u7f16\u53f7\u4e3a0\u523065535\u3002<\/p>\n

    \u7aef\u53e3\u5141\u8bb8\u5355\u4e2aIP\u5730\u5740\u540c\u65f6\u652f\u6301\u591a\u4e2a\u901a\u4fe1，\u6bcf\u4e2a\u901a\u4fe1\u4f7f\u7528\u4e0d\u540c\u7684\u7aef\u53e3\u53f7（\u5373\u901a\u8fc7IP<\/span>\u591a\u8def\u590d\u7528<\/span>）\u3002<\/p>\n

    IP\u5730\u5740\u548c\u7aef\u53e3\u53f7\u7684\u7ec4\u5408\u88ab\u79f0\u4e3a\u5957\u63a5\u5b57<\/span>\u3002<\/p>\n

    \n

    ￭ \u8fd9\u4e9b\u7aef\u53e3\u4e2d\u7684\u524d1024 \u4e2a(0~1023)\u88ab\u79f0\u4e3a\u4f17\u6240\u5468\u77e5\u7684\u7aef\u53e3<\/span>\u6216\u670d\u52a1\u7aef\u53e3<\/span>\u3002<\/p>\n

    \u8fd9\u4e9b\u7aef\u53e3\u88ab\u4fdd\u7559，\u4ee5\u4f9b\u670d\u52a1\u5668\u72ec\u5360\u4f7f\u7528\u3002<\/p>\n

    ￭ \u7aef\u53e31024-49151\u88ab\u79f0\u4e3a\u5df2\u6ce8\u518c\u7684\u8f6f\u4ef6\u7aef\u53e3<\/span>\u3002<\/p>\n

    \u8fd9\u4e9b\u7aef\u53e3\u5177\u6709\u4e00\u4e2a\u6216\u591a\u4e2a\u4e13\u95e8\u5728IANA（\u4e92\u8054\u7f51\u7f16\u53f7\u5206\u914d\u673a\u6784）\u7f51\u7ad9\u4e0a\u6ce8\u518c\u7684\u7f51\u7edc\u8f6f\u4ef6\u4ea7\u54c1\u3002<\/p>\n

    ￭ \u7aef\u53e349152-65535\u88ab\u79f0\u4e3a\u968f\u673a\u3001\u52a8\u6001\u6216\u4e34\u65f6\u7aef\u53e3<\/span>，\u5b83\u4eec\u901a\u5e38\u88ab\u5ba2\u6237\u7aef\u968f\u673a\u5730\u4e34\u65f6\u7528\u4f5c\u6e90\u7aef\u53e3\u3002<\/p>\n

    ￭ \u4f46\u662f，\u5927\u591a\u6570OS\u5141\u8bb81024\u4ee5\u540e\u7684\u4efb\u4f55\u7aef\u53e3\u88ab\u7528\u4f5c\u52a8\u6001\u5ba2\u6237\u7aef\u6e90\u7aef\u53e3<\/span>，\u524d\u63d0\u662f\u8be5\u7aef\u53e3\u5c1a\u672a\u5728\u672c\u5730\u7cfb\u7edf\u4e0a\u4f7f\u7528\u3002<\/p>\n

    \n

    TCP\/IP\u7684\u4e24\u4e2a\u4e3b\u8981\u4f20\u8f93\u5c42\u534f\u8bae\u662fTCP\u548cUDP\u3002<\/p>\n

    TCP\u662f\u4e00\u79cd\u9762\u5411\u8fde\u63a5\u7684\u5168\u53cc\u5de5\u534f\u8bae，\u800cUDP\u662f\u4e00\u79cd\u65e0\u8fde\u63a5\u5355\u5de5\u534f\u8bae\u3002<\/p>\n

    \n

    TCP<\/span>\u534f\u8bae，<\/span>\u652f\u6301\u5168\u53cc\u5de5\u901a\u4fe1，\u9762\u5411\u8fde\u63a5，\u5e76\u91c7\u7528\u53ef\u9760\u7684\u4f1a\u8bdd\u3002<\/p>\n

    TCP\u662f\u9762\u5411\u8fde\u63a5\u7684，\u56e0\u4e3a\u5b83\u5728\u4e24\u4e2a\u7cfb\u7edf\u4e4b\u95f4\u4f7f\u7528\u63e1\u624b\u8fc7\u7a0b\u6765\u5efa\u7acb\u901a\u4fe1\u4f1a\u8bdd\u3002<\/p>\n

    \n

    \u4e09\u6b21\u63e1\u624b\u8fc7\u7a0b（\u56fe11.6) \u5982\u4e0b：<\/p>\n

    (1) \u5ba2\u6237\u7aef\u5c06SYN（\u540c\u6b65）\u6807\u8bb0\u7684\u6570\u636e\u5305\u53d1\u9001\u5230\u670d\u52a1\u5668\u3002<\/p>\n

    (2) \u670d\u52a1\u5668\u4ee5SYN\/ACK（\u540c\u6b65\u548c\u786e\u8ba4）\u6807\u8bb0\u7684\u6570\u636e\u5305\u54cd\u5e94\u5ba2\u6237\u745e\u3002<\/p>\n

    (3) \u5ba2\u6237\u7aef\u4ee5ACK（\u786e\u8ba4）\u6807\u8bb0\u7684\u6570\u636e\u5305\u54cd\u5e94\u670d\u52a1\u5668\u3002<\/p>\n

    \n

    \u65ad\u5f00TCP\u4f1a\u8bdd\u7684\u65b9\u6cd5：<\/p>\n

    ￭ \u6700\u5e38\u89c1\u7684\u65b9\u6cd5\u662f\u4f7f\u7528FIN（\u5b8c\u6210）<\/span>\u6807\u8bb0\u7684\u6570\u636e\u5305\u6765\u4f18\u96c5\u5730\u7ec8\u6b62TCP\u4f1a\u8bdd\u3002<\/p>\n

    ￭ \u7b2c\u4e8c\u79cd\u65b9\u6cd5\u662f\u4f7f\u7528RST（\u91cd\u7f6e）<\/span>\u6807\u8bb0\u7684\u6570\u636e\u5305，\u8fd9\u4f1a\u5bfc\u81f4\u4f1a\u8bdd\u7acb\u5373\u6216\u7a81\u7136\u7ec8\u6b62\u3002<\/p>\n

    \"\"<\/p>\n

    \u56fe11.6 TCP \u7684\u4e8c\u6b21\u63e1\u624b<\/p>\n

    \n

    \u5f53\u9700\u8981\u6570\u636e\u4f20\u8f93\u65f6，\u5e94\u91c7\u7528TCP\u3002<\/p>\n

    \u5728\u672a\u63a5\u6536\u5230\u4f20\u8f93\u7a97\u53e3\u6240\u6709\u5206\u7ec4\u7684\u60c5\u51b5\u4e0b，\u4e0d\u53d1\u9001\u786e\u8ba4\u3002\u8d85\u65f6\u540e，\u53d1\u9001\u8005\u5c06\u518d\u6b21\u53d1\u9001\u6574\u4e2a\u4f20\u8f93\u7a97\u53e3\u7684\u6570\u636e\u5305\u3002<\/p>\n

    TCP\u80fd\u4fdd\u8bc1\u4f20\u8f93，\u56e0\u4e3a\u5b83\u5c06\u7ee7\u7eed\u91cd\u65b0\u53d1\u9001\u4efb\u4f55\u672a\u786e\u8ba4\u7684\u6bb5，\u76f4\u81f3\u5176\u6536\u5230\u786e\u8ba4\u6216\u6536\u5230RST, \u672c\u5730\u5e94\u7528\u7a0b\u5e8f\u7ec8\u6b62\u7f51\u7edc\u901a\u4fe1\u5c1d\u8bd5，\u6216\u7cfb\u7edf\u65ad\u7535\u3002<\/p>\n

    \n

    UDP<\/span>\u534f\u8bae，<\/span>\u4e5f\u5728OSI\u6a21\u578b\u7684\u7b2c4\u5c42（\u4f20\u8f93\u5c42）\u4e0a\u8fd0\u884c，\u662f\u4e00\u79cd\u65e0\u8fde\u63a5\u7684<\/span>\u201c\u5c3d\u529b\u800c\u4e3a＂\u7684\u901a\u4fe1\u534f\u8bae\u3002<\/p>\n

    \u5b83\u4e0d\u63d0\u4f9b\u9519\u8bef\u68c0\u6d4b\u6216\u7ea0\u6b63，\u4e0d\u4f7f\u7528\u6392\u5e8f，\u4e0d\u4f7f\u7528\u6d41\u91cf\u63a7\u5236\u673a\u5236，\u4e0d\u4f7f\u7528\u9884\u5148\u5efa\u7acb\u7684\u4f1a\u8bdd，\u56e0\u800c\u88ab\u8ba4\u4e3a\u662f\u4e0d\u53ef\u9760\u7684<\/span>\u3002<\/p>\n

    UDP\u5177\u6709\u975e\u5e38\u4f4e\u7684\u5f00\u9500，\u56e0\u6b64\u53ef\u4ee5\u5feb\u901f\u4f20\u8f93<\/span>\u6570\u636e\u3002\u4f46\u662f，\u53ea\u6709\u5728\u4f20\u8f93\u4e0d\u91cd\u8981\u7684\u6570\u636e\u65f6\u624d\u5e94\u4f7f\u7528UDP\u3002<\/p>\n

    UDP\u901a\u5e38\u7528\u4e8e\u97f3\u9891\u6216\u89c6\u9891\u7684\u5b9e\u65f6\u6216\u6d41\u901a\u4fe1\u3002<\/p>\n

    \n

    11.6 \u57df\u540d\u7cfb\u7edf<\/p>\n

    \u5e94\u5f53\u719f\u6089\u4e09\u79cd\u7f16\u53f7\u548c\u5bfb\u5740\u6982\u5ff5\u3002<\/p>\n

    \u2022\u57df\u540d<\/p>\n

    \u57df\u540d\u6216\u8ba1\u7b97\u673a\u540d\u662f\u5728IP\u5730\u5740\u4e0a\u5206\u914d\u7684\u4eba\u6027\u5316\u7684\u201c\u4e34\u65f6\u201c\u7ea6\u5b9a\u3002<\/p>\n

    \u2022IP\u5730\u5740<\/p>\n

    IP\u5730\u5740\u662f\u5728MAC\u5730\u5740\u4e0a\u5206\u914d\u7684\u201c\u4e34\u65f6\u201c\u903b\u8f91\u5730\u5740\u3002<\/p>\n

    \u2022MAC\u5730\u5740<\/p>\n

    MAC\u5730\u5740\u6216\u786c\u4ef6\u5730\u5740\u662f\u201d\u6c38\u4e45\u201d\u7269\u7406\u5730\u5740\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u201c\u6c38\u4e45\u201d\u548c\u201c\u4e34\u65f6\u201c\u5730\u5740<\/p>\n

    \u8fd9\u4e24\u4e2a\u8bcd\u5176\u5b9e\u4e0d\u5b8c\u5168\u51c6\u786e\u3002<\/p>\n

    MAC\u5730\u5740，\u88ab\u8bbe\u8ba1\u4e3a\u6c38\u4e45\u7269\u7406\u5730\u5740，\u4f46\u901a\u5e38\u53ef\u4ee5\u66f4\u6539\u3002\u5f53NIC\u652f\u6301\u66f4\u6539\u65f6，\u786c\u4ef6\u4e0a\u4f1a\u53d1\u751f\u66f4\u6539\u3002<\/p>\n

    \u5f53\u64cd\u4f5c\u7cfb\u7edf\u652f\u6301\u66f4\u6539\u65f6，\u66f4\u6539\u4ec5\u53d1\u751f\u5728\u5185\u5b58\u4e2d，\u4f46\u770b\u8d77\u6765\u50cf\u662f\u5bf9\u6240\u6709\u5176\u4ed6\u7f51\u7edc\u5b9e\u4f53\u7684\u786c\u4ef6\u66f4\u6539（\u79f0\u4e3aMAC\u6b3a\u9a97）\u3002<\/p>\n

    IP\u5730\u5740，\u662f\u4e34\u65f6\u7684，\u56e0\u4e3a\u5b83\u662f\u4e2a\u903b\u8f91\u5730\u5740，\u53ef\u968f\u65f6\u901a\u8fc7DHCP\u6216\u7ba1\u7406\u5458\u8fdb\u884c\u66f4\u6539\u3002\u4f46\u5728\u4e00\u4e9b\u60c5\u51b5\u4e0b，\u7cfb\u7edf\u4f1a\u9759\u6001\u5206\u914dIP\u5730\u5740\u3002<\/p>\n

    \u8ba1\u7b97\u673a\u540d\u6216DNS\u540d，\u53ef\u80fd\u770b\u8d77\u6765\u662f\u6c38\u4e45\u6027\u7684，\u4f46\u5b83\u4eec\u662f\u903b\u8f91\u7684，\u56e0\u6b64\u53ef\u7531\u7ba1\u7406\u5458\u8fdb\u884c\u4fee\u6539\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    DNS\u5c06\u4eba\u6027\u5316\u7684\u57df\u540d\u89e3\u6790\u4e3a\u5bf9\u5e94\u7684IP\u5730\u5740\u3002<\/p>\n

    \u7136\u540e，ARP(\u89c1\u540e\u9762\u7684\u201cARP\u5173\u6ce8\u70b9\u201d\u4e00\u8282）\u5c06IP\u5730\u5740\u89e3\u6790\u4e3a\u5bf9\u5e94\u7684MAC\u5730\u5740\u3002<\/p>\n

    \u5982\u679c\u57df\u6587\u4ef6\u4e2d\u5b9a\u4e49\u4e86PTR（\u5373\u6307\u9488）\u8bb0\u5f55，\u90a3\u4e48，\u8fd8\u53ef\u901a\u8fc7DNS\u53cd\u5411\u67e5\u627e\u5c06IP\u5730\u5740\u89e3\u6790\u4e3a\u5bf9\u5e94\u7684\u57df\u540d\u3002<\/p>\n

    IP\u5730\u5740\u53ef\u9759\u6001\u5206\u914d\u6216\u901a\u8fc7DHCP\u52a8\u6001\u5206\u914d\u3002<\/p>\n

    \n

    DNS\u662f\u516c\u5171\u548c\u4e13\u7528\u7f51\u7edc\u4e2d\u4f7f\u7528\u7684\u5206\u5c42\u547d\u540d\u65b9\u6848\u3002<\/p>\n

    DNS\u5c06IP\u5730\u5740\u548c\u4eba\u6027\u5316\u7684\u5b8c\u5168\u9650\u5b9a\u57df\u540d(FQDN)\u94fe\u63a5\u5728\u4e00\u8d77\u3002<\/p>\n

    FQDN\u5305\u542b\u4e09\u4e2a\u4e3b\u8981\u90e8\u5206：<\/p>\n

    \u2022\u9876\u7ea7\u57df\u540d(TLD)\u2014\u2014www.google.com \u4e2d\u7684com<\/p>\n

    \u2022\u6ce8\u518c\u57df\u540d\u2014\u2014www.google.com \u4e2d\u7684google<\/p>\n

    \u2022\u5b50\u57df\u6216\u4e3b\u673a\u540d\u2014\u2014www.google.com \u4e2d\u7684WWW<\/p>\n

    \n

    \u9876\u7ea7\u57df\u540d\u53ef\u4ee5\u662f\u4efb\u610f\u6570\u91cf\u7684\u5b98\u65b9\u9009\u9879，\u5305\u62ec：<\/p>\n

    ￭ \u6700\u521d\u7684\u4e03\u4e2a\u9876\u7ea7\u57df\u540d\u4e2d\u7684\u516d\u4e2a\u2014\u2014com\u3001org\u3001edu\u3001mil\u3001gov\u548cnet,<\/p>\n

    ￭ \u8bb8\u591a\u65b0\u7684\u9876\u7ea7\u57df\u540d，\u5982info, museum\u3001telephone\u3001mobi\u3001biz\u7b49\u3002<\/p>\n

    ￭ \u8fd8\u6709\u4e24\u5b57\u6bcd\u7684\u56fd\u5bb6\/\u5730\u533a\u7684\u53d8\u5316，\u88ab\u79f0\u4e3a\u56fd\u5bb6\/\u5730\u533a\u4ee3\u7801\u3002<\/p>\n

    \u7b2c\u4e03\u4e2a\u521d\u59cbTLD\u662fint（\u56fd\u9645\u7684）；\u56fd\u5bb6\/\u5730\u533a\u4ee3\u7801\u7528\u4e24\u4e2a\u5b57\u6bcd\u8868\u793a\u3002<\/p>\n

    \n

    \u57df\u540d\u5fc5\u987b\u5728\u4efb\u610f\u6570\u91cf\u7684\u5df2\u6279\u51c6\u57df\u540d\u6ce8\u518c\u5546\u4e4b\u4e00\u6b63\u5f0f\u6ce8\u518c，\u4f8b\u5982Network Solutions\u6216\u8005IONOS\u3002<\/p>\n

    \n

    FQDN\u6700\u5de6\u8fb9\u7684\u90e8\u5206\u53ef\u4ee5\u662f\u5355\u4e2a\u4e3b\u673a\u540d，\u5982www\u3001ftp\u3001blog\u3001image\u7b49，<\/p>\n

    \u6216\u591a\u8282\u5b50\u57df\u540d\u79f0，\u5982serverl.group3. bldg5.myexamplecompany.com\u3002<\/p>\n

    \n

    – FQDN\u7684\u603b\u957f\u4e0d\u80fd\u8d85\u8fc7253\u4e2a\u5b57\u7b26（\u5305\u62ec\u70b9）\u3002<\/p>\n

    – \u4efb\u4f55\u5355\u4e2a\u90e8\u5206\u4e0d\u80fd\u8d85\u8fc763\u4e2a\u5b57\u7b26\u3002<\/p>\n

    – FQDN\u53ea\u80fd\u5305\u542b\u5b57\u6bcd\u3001\u6570\u5b57\u548c\u8fde\u5b57\u7b26\u3002<\/p>\n

    – TLD\u53f3\u4fa7\u6709\u4e00\u4e2a\u70b9（\u901a\u5e38\u4e0d\u663e\u793a），\u8868\u793a\u6574\u4e2aDNS\u547d\u540d\u7a7a\u95f4\u7684\u6839\u3002<\/p>\n

    \n

    \u6bcf\u4e2a\u6ce8\u518c\u7684\u57df\u540d\u90fd\u6709\u4e00\u4e2a\u6307\u5b9a\u7684\u6743\u5a01\u540d\u79f0\u670d\u52a1\u5668\u3002<\/p>\n

    \u4e3b\u8981\u7684\u6743\u5a01\u540d\u79f0\u670d\u52a1\u5668\u6258\u7ba1\u57df\u7684\u53ef\u7f16\u8f91\u7684\u539f\u59cb\u533a\u57df\u6587\u4ef6\u3002<\/p>\n

    \u8f85\u52a9\u7684\u6743\u5a01\u540d\u79f0\u670d\u52a1\u5668\u53ef\u7528\u4e8e\u6258\u7ba1\u533a\u57df\u6587\u4ef6\u7684\u53ea\u8bfb\u526f\u672c\u3002<\/p>\n

    \u533a\u57df\u6587\u4ef6\u662f\u8d44\u6e90\u8bb0\u5f55\u7684\u96c6\u5408\u6216\u6709\u5173\u7279\u5b9a\u57df\u7684\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n

    \u6709\u8bb8\u591a\u53ef\u80fd\u7684\u8d44\u6e90\u8bb0\u5f55，\u4f8b\u5982，\u5c06FQDN\u94fe\u63a5\u5230IPv4\u5730\u5740\u7684\u8bb0\u5f55\u548c\u5c06FQDN\u94fe\u63a5\u5230IPv6\u5730\u5740\u7684AAAA\u8bb0\u5f55\u3002<\/p>\n

    \n

    \u6700\u521d，DNS\u7531HOSTS\u6587\u4ef6\u7684\u9759\u6001\u672c\u5730\u6587\u4ef6\u5904\u7406\u3002<\/p>\n

    HOSTS\u6587\u4ef6\u5305\u542b\u57df\u540d\u53ca\u5176\u5173\u8054IP\u5730\u5740\u7684\u56fa\u5b9a\u5f15\u7528\u3002<\/p>\n

    \u6b64\u6587\u4ef6\u73b0\u5728\u4ecd\u7136\u5b58\u5728\u4e8e\u5927\u591a\u6570\u652f\u6301TCP\/IP\u7684\u8ba1\u7b97\u673a\u4e0a，\u4f46\u52a8\u6001DNS\u67e5\u8be2\u7cfb\u7edf\u5df2\u7ecf\u57fa\u672c\u53d6\u4ee3\u5b83\u3002<\/p>\n

    \u7ba1\u7406\u5458\u6216\u9ed1\u5ba2\u53ef\u4ee5\u5411HOSTS\u6587\u4ef6\u6dfb\u52a0\u5185\u5bb9\u3002<\/p>\n

    \n

    \u5f53\u5ba2\u6237\u7aef\u8f6f\u4ef6\u6307\u5411FQDN\u65f6，\u89e3\u6790\u8fc7\u7a0b\u9996\u5148\u68c0\u67e5\u672c\u5730DNS\u7f13\u5b58\u3002<\/p>\n

    DNS\u7f13\u5b58\u5305\u62ec\u6765\u81ea\u672c\u5730HOSTS\u6587\u4ef6\u7684\u9884\u52a0\u8f7d\u5185\u5bb9\u4ee5\u53caDNS\u67e5\u8be2\u7ed3\u679c（\u5c1a\u672a\u8d85\u65f6）\u3002<\/p>\n

    \u5982\u679c\u6240\u9700\u7b54\u6848\u4e0d\u5728\u7f13\u5b58\u4e2d，\u5219DNS\u67e5\u8be2\u88ab\u53d1\u9001\u5230\u672c\u5730IP\u914d\u7f6e\u4e2d\u663e\u793a\u7684DNS\u670d\u52a1\u5668\u3002<\/p>\n

    \u89e3\u6790\u67e5\u8be2\u8fc7\u7a0b\u7684\u5269\u4f59\u73af\u8282\u65e2\u6709\u8da3\u53c8\u590d\u6742，\u4f46\u5927\u591a\u6570\u4e0e(Isc)2 CISSP\u8003\u8bd5\u65e0\u5173\u3002<\/p>\n

    \n

    DNS\u901a\u8fc7TCP\u548cUDP\u7aef\u53e353\u8fd0\u884c\u3002<\/p>\n

    TCP\u7aef\u53e353\u7528\u4e8e\u533a\u57df\u4f20\u8f93\u3002<\/p>\n

    \u8fd9\u4e9b\u662fDNS\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u533a\u57df\u6587\u4ef6\u4ea4\u6362，\u7528\u4e8e\u7279\u6b8a\u624b\u52a8\u67e5\u8be2，\u6216\u54cd\u5e94\u8d85\u8fc7512\u5b57\u8282\u7684\u60c5\u5f62\u3002<\/p>\n

    UDP\u7aef\u53e353\u7528\u4e8e\u5927\u591a\u6570\u5178\u578b\u7684DNS\u67e5\u8be2\u3002<\/p>\n

    \n

    \u57df\u540d\u7cfb\u7edf\u5b89\u5168\u6269\u5c55(Domain Name System Security Extensions, DNSSEC)<\/span>\u662f\u5bf9\u73b0\u6709DNS\u57fa\u7840\u7ed3\u6784\u7684\u5b89\u5168\u6027\u6539\u8fdb\u3002<\/p>\n

    DNSSEC\u7684\u4e3b\u8981\u529f\u80fd\u662f\u5728DNS\u64cd\u4f5c\u671f\u95f4\u5728\u8bbe\u5907\u4e4b\u95f4\u63d0\u4f9b\u76f8\u4e92\u9a8c\u8bc1\u548c\u8fc7\u7a0b\u52a0\u5bc6\u3002<\/p>\n

    DNSSEC\u5df2\u5728DNS\u7cfb\u7edf\u7684\u91cd\u8981\u90e8\u5206\u5b9e\u65bd\u3002<\/p>\n

    \u4e00\u65e6\u5b8c\u5168\u5b9e\u65bd，DNSSEC\u5c06\u663e\u8457\u51cf\u5c11\u4ee5\u670d\u52a1\u5668\u4e3a\u4e2d\u5fc3\u7684DNS\u6ee5\u7528，\u4f8b\u5982：\u57df\u6587\u4ef6\u4e2d\u6bd2\u548cDNS\u7f13\u5b58\u4e2d\u6bd2\u3002<\/p>\n

    \u4f46\u662f，DNSSEC\u4ec5\u9002\u7528\u4e8eDNS\u670d\u52a1\u5668，\u800c\u4e0d\u9002\u7528\u4e8e\u5bf9DNS\u670d\u52a1\u5668\u6267\u884c\u67e5\u8be2\u7684\u7cfb\u7edf（\u5982\u5ba2\u6237\u7aef）\u3002<\/p>\n

    \n

    \u5bf9\u4e8e\u975eDNS\u670d\u52a1\u5668（\u4e3b\u8981\u662f\u5ba2\u6237\u7aef\u8bbe\u5907），\u5c24\u5176\u662f\u5728\u4f7f\u7528\u4e92\u8054\u7f51\u65f6，\u5e94\u8be5\u8003\u8651\u901a\u8fc7HTTPS(DoH)<\/span>\u4f7f\u7528DNS\u3002<\/p>\n

    \u6b64\u7cfb\u7edf\u4e0e\u53d7TLS\u4fdd\u62a4\u7684HTTP\u7684DNS\u670d\u52a1\u5668\u521b\u5efa\u52a0\u5bc6\u4f1a\u8bdd，\u7136\u540e\u5c06\u8be5\u4f1a\u8bdd\u7528\u4f5cVPN\u7684\u4e00\u79cd\u5f62\u5f0f，\u4ee5\u4fdd\u62a4DNS\u67e5\u8be2\u548c\u54cd\u5e94\u3002<\/p>\n

    2020\u5e74\u540e\u671f\u5bf9DoH\u7684\u589e\u5f3a\u662f\u9690\u6027DoH(ODoH)<\/span>\u3002<\/p>\n

    ODoH\u5728\u5ba2\u6237\u7aef\u548cDNS\u89e3\u6790\u7a0b\u5e8f\u4e4b\u95f4\u6dfb\u52a0DNS\u4ee3\u7406，\u4ee5\u4fbf\u5c06\u5ba2\u6237\u7aef\u7684\u8eab\u4efd\u4e0eDNS\u89e3\u6790\u7a0b\u5e8f\u9694\u79bb\u3002<\/p>\n

    \u56e0\u6b64，ODoH\u4e3aDNS\u67e5\u8be2\u63d0\u4f9b\u533f\u540d\u6027\u548c\u9690\u79c1\u4fdd\u62a4\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u63d0\u793a：<\/p>\n

    \u82e5\u8981\u6df1\u5165\u8ba8\u8bbaDNS\u7684\u64cd\u4f5c\u548c\u5df2\u77e5\u95ee\u9898，\u8bf7\u53c2\u9605\u201cKatninskyDNS\u6f0f\u6d1e\u56fe\u89e3\u6307\u5357\u201d\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    11.6.1 DNS\u4e2d\u6bd2<\/p>\n

    DNS<\/span>\u4e2d\u6bd2<\/span>\u662f\u4f2a\u9020\u5ba2\u6237\u7aef\u4f7f\u7528\u7684DNS\u4fe1\u606f\u4ee5\u5230\u8fbe\u6240\u9700\u7cfb\u7edf\u7684\u884c\u4e3a\u3002\u5b83\u53ef\u4ee5\u901a\u8fc7\u591a\u79cd\u65b9\u5f0f\u53d1\u751f\u3002<\/p>\n

    \u6bcf\u5f53\u5ba2\u6237\u7aef\u9700\u8981\u5c06DNS\u540d\u79f0\u89e3\u6790\u4e3aIP\u5730\u5740\u65f6，\u5b83\u53ef\u80fd\u7ecf\u5386\u4ee5\u4e0b\u8fc7\u7a0b：<\/p>\n

    (1) \u68c0\u67e5\u672c\u5730\u7f13\u5b58（\u5305\u62ecHOSTS\u6587\u4ef6\u4e2d\u7684\u5185\u5bb9）\u3002<\/p>\n

    (2) \u5c06DNS\u67e5\u8be2\u53d1\u9001\u5230\u5df2\u77e5\u7684DNS\u670d\u52a1\u5668\u3002<\/p>\n

    (3) \u5c06\u5e7f\u64ad\u67e5\u8be2\u53d1\u9001\u5230\u4efb\u4f55\u53ef\u80fd\u7684\u672c\u5730\u5b50\u7f51DNS\u670d\u52a1\u5668（\u6b64\u6b65\u9aa4\u672a\u5f97\u5230\u5e7f\u6cdb\u652f\u6301）\u3002<\/p>\n

    \u5982\u679c\u5ba2\u6237\u7aef\u5728\u4e0a\u8ff0\u4e09\u4e2a\u6b65\u9aa4\u90fd\u6ca1\u6709\u89e3\u6790\u5230\u5bf9\u5e94\u7684IP，\u5219\u89e3\u6790\u5931\u8d25，\u65e0\u6cd5\u53d1\u9001\u901a\u4fe1\u5185\u5bb9\u3002<\/p>\n

    \u6709\u8bb8\u591a\u65b9\u6cd5\u53ef\u4ee5\u653b\u51fb\u6216\u5229\u7528DNS, \u5176\u4e2d\u5927\u591a\u6570\u65b9\u6cd5\u7528\u4e8e\u8fd4\u56de\u9519\u8bef\u7ed3\u679c\u3002<\/p>\n

    \n

    （1）\u6d41\u6c13DNS\u670d\u52a1\u5668<\/p>\n

    \u6d41\u6c13DNS\u670d\u52a1\u5668\u53ef\u4fa6\u542c\u7f51\u7edc\u6d41\u91cf\u4ee5\u67e5\u627e\u4e0e\u76ee\u6807\u7ad9\u70b9\u76f8\u5173\u7684\u4efb\u4f55DNS\u67e5\u8be2\u6216\u7279\u5b9aDNS\u6773\u8be2\u3002<\/p>\n

    \u7136\u540e，\u6d41\u6c13DNS\u670d\u52a1\u5668\u4f7f\u7528\u9519\u8bef\u7684IP\u4fe1\u606f\u5411\u5ba2\u6237\u7aef\u53d1\u9001DNS\u54cd\u5e94\u3002<\/p>\n

    \u4e00\u65e6\u5ba2\u6237\u7aef\u6536\u5230\u6765\u81ea\u6d41\u6c13DNS\u670d\u52a1\u5668\u7684\u54cd\u5e94，\u5ba2\u6237\u7aef\u5c31\u4f1a\u5173\u95edDNS\u67e5\u8be2\u4f1a\u8bdd，\u8fd9\u4f1a\u5bfc\u81f4\u771f\u5b9eDNS\u670d\u52a1\u5668\u7684\u54cd\u5e94\u88ab\u4e22\u5f03\u5e76\u4f5c\u4e3a\u4f1a\u8bdd\u5916\u6570\u636e\u5305\u88ab\u5ffd\u7565\u3002<\/p>\n

    \n

    DNS\u67e5\u8be2\u672a\u7ecf\u8fc7\u8eab\u4efd\u8ba4\u8bc1，\u4f46\u5b83\u4eec\u5305\u542b\u4e00\u4e2a16\u4f4d\u7684\u503c，\u8be5\u503c\u88ab\u79f0\u4e3a\u67e5\u8be2ID(Query ID，QID)<\/span>\u3002<\/p>\n

    DNS\u54cd\u5e94\u5fc5\u987b\u5305\u542b\u4e0e\u8981\u63a5\u53d7\u7684\u67e5\u8be2\u76f8\u540c\u7684QID\u3002<\/p>\n

    \u56e0\u6b64，\u6d41\u6c13DNS\u670d\u52a1\u5668\u5fc5\u987b\u5c06\u8bf7\u6c42QID\u7eb3\u5165\u865a\u5047\u56de\u590d\u4e2d\u3002<\/p>\n

    \n

    （2）\u6267\u884cDNS\u7f13\u5b58\u4e2d\u6bd2<\/p>\n

    DNS\u4e2d\u6bd2\u6d89\u53ca\u653b\u51fbDNS\u670d\u52a1\u5668\u5e76\u5c06\u4e0d\u6b63\u786e\u7684\u4fe1\u606f\u653e\u5165\u57df\u6587\u4ef6\u6216\u7f13\u5b58\u4e2d\u7684\u884c\u4e3a\u3002<\/p>\n

    ￭\u9488\u5bf9\u6743\u5a01DNS\u670d\u52a1\u5668<\/span> \u7684\u653b\u51fb\u65e8\u5728\u66f4\u6539\u4e3b\u6743\u5a01DNS\u670d\u52a1\u5668\u4e0a\u57df\u6587\u4ef6\u4e2dFQDN\u7684\u4e3b\u8bb0\u5f55\u3002<\/p>\n

    \u8fd9\u4f1a\u5bfc\u81f4\u771f\u6b63\u7684DNS\u670d\u52a1\u5668\u5c06\u9519\u8bef\u6570\u636e\u53d1\u9001\u56de\u5ba2\u6237\u7aef\u3002<\/p>\n

    \u7136\u800c，\u9488\u5bf9\u6743\u5a01DNS\u670d\u52a1\u5668\u7684\u653b\u51fb\u901a\u5e38\u5f88\u5feb\u5c31\u4f1a\u88ab\u6ce8\u610f\u5230，\u56e0\u6b64\u5f88\u5c11\u5bfc\u81f4\u5e7f\u6cdb\u7684\u653b\u51fb\u3002<\/p>\n

    \n

    \u56e0\u6b64，\u5927\u591a\u6570\u653b\u51fb\u8005\u5c06\u91cd\u70b9\u653e\u5728\u7f13\u5b58DNS\u670d\u52a1\u5668\u4e0a\u3002<\/p>\n

    ￭\u7f13\u5b58DNS\u670d\u52a1\u5668<\/span> \u662f\u7528\u4e8e\u7f13\u5b58\u6765\u81ea\u5176\u4ed6DNS\u670d\u52a1\u5668\u7684DNS\u4fe1\u606f\u7684DNS\u7cfb\u7edf\u3002<\/p>\n

    \u5b58\u50a8\u5728\u7f13\u5b58DNS\u670d\u52a1\u5668\u4e0a\u7684\u5185\u5bb9\u4e0d\u53d7\u5168\u7403\u5b89\u5168\u793e\u533a\u7684\u76d1\u63a7，\u800c\u53ea\u53d7\u672c\u5730\u8fd0\u8425\u5546\u7684\u76d1\u63a7\u3002<\/p>\n

    \u56e0\u6b64，\u9488\u5bf9\u7f13\u5b58DNS\u670d\u52a1\u5668\u7684\u653b\u51fb\u53ef\u80fd\u4f1a\u5728\u5f88\u957f\u4e00\u6bb5\u65f6\u95f4\u5185\u4e0d\u7ecf\u901a\u77e5\u5c31\u53d1\u751f，\u8fd9\u79cd\u53d8\u5316\u88ab\u79f0\u4e3aDNS\u7f13\u5b58\u4e2d\u6bd2\u3002<\/p>\n

    \n

    \u5c3d\u7ba1\u8fd9\u4e24\u79cd\u653b\u51fb\u90fd\u96c6\u4e2d\u5728DNS\u670d\u52a1\u5668\u4e0a，\u4f46\u5b83\u4eec\u6700\u7ec8\u4f1a\u5f71\u54cd\u5ba2\u6237\u7aef\u3002<\/p>\n

    \u4e00\u65e6\u5ba2\u6237\u7aef\u6267\u884c\u4e86\u52a8\u6001DNS\u89e3\u6790，\u4ece\u6743\u5a01DNS\u670d\u52a1\u5668\u6216\u7f13\u5b58DNS\u670d\u52a1\u5668\u63a5\u6536\u7684\u4fe1\u606f\u5c06\u4e34\u65f6\u5b58\u50a8\u5728\u5ba2\u6237\u7aef\u7684\u672c\u5730DNS\u7f13\u5b58\u4e2d\u3002<\/p>\n

    \u5982\u679c\u8be5\u4fe1\u606f\u4e3a\u5047，\u5219\u5ba2\u6237\u7aef\u7684DNS\u7f13\u5b58\u5df2\u4e2d\u6bd2\u3002<\/p>\n

    \n

    （3）DNS\u57df\u6b3a\u9a97（DNS Pharming）<\/p>\n

    \u57df\u6b3a\u9a97<\/span>\u662f\u5c06\u6709\u6548\u7f51\u7ad9\u7684URL\u6216IP\u5730\u5740\u6076\u610f\u91cd\u5b9a\u5411<\/span>\u5230\u5047\u7f51\u7ad9\u7684\u884c\u4e3a\u3002<\/p>\n

    \u57df\u6b3a\u9a97\u901a\u5e38\u901a\u8fc7\u4fee\u6539\u7cfb\u7edf\u4e0a\u7684\u672c\u5730HOSTS\u6587\u4ef6\u6216\u901a\u8fc7\u6bd2\u5316\u6216\u6b3a\u9a97DNS\u89e3\u6790\u6765\u5b9e\u73b0\u3002<\/p>\n

    \n

    （4）\u6539\u53d8HOSTS\u6587\u4ef6<\/p>\n

    \u901a\u8fc7\u5728HOSTS\u6587\u4ef6\u4e2d\u653e\u7f6e\u865a\u5047DNS\u6570\u636e\u6765\u4fee\u6539\u5ba2\u6237\u7aef\u4e0a\u7684HOSTS\u6587\u4ef6\u7684\u884c\u4e3a\u4f1a\u5c06\u7528\u6237\u91cd\u5b9a\u5411\u5230\u9519\u8bef\u4f4d\u7f6e\u3002<\/p>\n

    \u5982\u679c\u653b\u51fb\u8005\u80fd\u591f\u5728HOSTS\u6587\u4ef6\u4e2d\u690d\u5165\u9519\u8bef\u4fe1\u606f，\u5219\u5f53\u7cfb\u7edf\u5f15\u5bfcHOSTS\u6587\u4ef6\u7684\u5185\u5bb9\u65f6，\u8fd9\u4e9b\u4fe1\u606f\u5c06\u88ab\u8bfb\u5165\u5185\u5b58，\u5e76\u5728\u5185\u5b58\u4e2d\u5360\u636e\u4f18\u5148\u5730\u4f4d\u3002<\/p>\n

    \u8fd9\u79cd\u653b\u51fb\u662f\u6709\u6548\u7684，\u4f46\u4e5f\u5177\u6709\u5f88\u5f3a\u7684\u9488\u5bf9\u6027\u3002\u5b83\u53ea\u5f71\u54cd\u672c\u5730HOSTS\u6587\u4ef6\u635f\u574f\u7684\u5355\u4e2a\u7cfb\u7edf\u3002<\/p>\n

    \u5982\u679c\u653b\u51fb\u8005\u5e0c\u671b\u9020\u6210\u66f4\u5e7f\u6cdb\u7684\u4f24\u5bb3，\u5219\u5e94\u91c7\u7528\u5176\u4ed6\u65b9\u6cd5，\u90a3\u6837\u4f1a\u66f4\u6709\u6548\u3002<\/p>\n

    \n

    （5）\u7834\u574fIP\u914d\u7f6e<\/p>\n

    \u7834\u574fIP\u914d\u7f6e\u7684\u884c\u4e3a\u53ef\u80fd\u5bfc\u81f4\u5ba2\u6237\u7aef\u5177\u6709\u9519\u8bef\u7684DNS\u670d\u52a1\u5668\u5b9a\u4e49（\u5373DNS\u67e5\u627e\u5730\u5740\u66f4\u6539）\u3002<\/p>\n

    DNS\u670d\u52a1\u5668\u5730\u5740\u901a\u5e38\u901a\u8fc7DHCP\u88ab\u5206\u914d\u7ed9\u5ba2\u6237\u7aef，\u4e5f\u53ef\u4ee5\u88ab\u9759\u6001\u5206\u914d\u3002<\/p>\n

    \u901a\u8fc7\u7834\u574fDHCP\u6216\u811a\u672c，\u53ef\u4ee5\u6267\u884c\u66f4\u6539DNS\u670d\u52a1\u5668\u4e2d\u5ba2\u6237\u7aef\u67e5\u627e\u5730\u5740\u7684\u653b\u51fb\u3002<\/p>\n

    \n

    （6）DNS\u67e5\u8be2\u6b3a\u9a97<\/p>\n

    \u5f53\u9ed1\u5ba2\u80fd\u591f\u7a83\u542c\u5ba2\u6237\u7aef\u5bf9DNS\u670d\u52a1\u5668\u7684\u67e5\u8be2\u65f6，\u5c31\u4f1a\u53d1\u751fDNS\u67e5\u8be2\u6b3a\u9a97\u653b\u51fb\u3002<\/p>\n

    \u7136\u540e，\u653b\u51fb\u8005\u53d1\u56de\u5e26\u6709\u865a\u5047\u4fe1\u606f\u7684\u56de\u590d\u3002\u4e3a\u4f7f\u6b64\u64cd\u4f5c\u6210\u529f，\u9519\u8bef\u56de\u590d\u5fc5\u987b\u5305\u542b\u6b63\u786e\u514b\u9686\u7684\u67e5\u8be2QID\u3002<\/p>\n

    \n

    （7）\u4f7f\u7528\u4ee3\u7406\u4f2a\u9020<\/p>\n

    \u867d\u7136\u4ee3\u7406\u4f2a\u9020\u653b\u51fb\u4e25\u683c\u6765\u8bf4\u4e0d\u662fDNS\u95ee\u9898，\u4f46\u5982\u679c\u5ba2\u6237\u7aef\u5fc5\u987b\u89e3\u6790\u4ee3\u7406\u7684\u57df\u540d\u624d\u80fd\u4f7f\u7528\u4ee3\u7406，\u5219\u53ef\u4ee5\u901a\u8fc7DNS\u6765\u5b9e\u65bd\u4ee3\u7406\u4f2a\u9020\u653b\u51fb\u3002<\/p>\n

    \u653b\u51fb\u53ef\u80fd\u4f1a\u4fee\u6539\u672c\u5730\u914d\u7f6e\u3001\u914d\u7f6e\u811a\u672c\u6216\u8def\u7531\u8868，\u4ee5\u5c06\u901a\u4fe1\u91cd\u5b9a\u5411\u5230\u9519\u8bef\u7684\u4ee3\u7406\u3002<\/p>\n

    \u6b64\u65b9\u6cd5\u4ec5\u9002\u7528\u4e8eWeb\u901a\u4fe1（\u6216\u4f7f\u7528\u4ee3\u7406\u7684\u5176\u4ed6\u670d\u52a1\u6216\u534f\u8bae）\u3002<\/p>\n

    \u6076\u610f\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4fee\u6539\u6d41\u91cf\u5305，\u4ee5\u5c06\u8bf7\u6c42\u91cd\u65b0\u5b9a\u5411\u5230\u9ed1\u5ba2\u60f3\u8981\u7684\u4efb\u4f55\u7ad9\u70b9\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u63d0\u793a：<\/p>\n

    \u53ef\u4ee5\u4f7f\u7528DNS\u6ee5\u7528（\u5982DNS\u7f13\u5b58\u4e2d\u6bd2）\u6267\u884c\u8def\u5f84\u653b\u51fb（\u4e5f\u79f0\u4e3a\u4e2d\u95f4\u4eba\u653b\u51fbMITM)\u3002<\/p>\n

    \u4e00\u65e6\u5ba2\u6237\u7aef\u63a5\u6536\u5230\u6765\u81eaDNS\u7684\u54cd\u5e94，\u8be5\u54cd\u5e94\u5c06\u88ab\u7f13\u5b58\u4ee5\u4f9b\u5c06\u6765\u4f7f\u7528\u3002<\/p>\n

    \u5982\u679c\u53ef\u4ee5\u5c06\u9519\u8bef\u4fe1\u606f\u8f93\u5165DNS\u7f13\u5b58，\u5219\u53ef\u975e\u5e38\u8f7b\u6613\u5730\u5c06\u901a\u4fe1\u9519\u8bef\u5730\u5b9a\u5411\u3002<\/p>\n

    \u6709\u5173\u6b64\u7c7b\u653b\u51fb\u7684\u66f4\u591a\u4fe1\u606f，\u8bf7\u53c2\u89c1\u7b2c17\u7ae0\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    DNS\u4e2d\u6bd2\u7684\u9632\u5fa1\u63aa\u65bd<\/p>\n

    \u867d\u7136\u6709\u8bb8\u591aDNS\u4e2d\u6bd2\u65b9\u6cd5，\u4f46\u4f60\u53ef\u91c7\u53d6\u4e00\u4e9b\u57fa\u672c\u7684\u5b89\u5168\u63aa\u65bd，\u4ece\u800c\u6781\u5927\u5730\u964d\u4f4e\u5176\u5a01\u80c1\u7a0b\u5ea6\u3002<\/p>\n

    \u2022 \u9650\u5236\u4ece\u5185\u90e8DNS\u670d\u52a1\u5668\u5230\u5916\u90e8DNS\u670d\u52a1\u5668\u7684\u533a\u57df\u4f20\u8f93\u3002<\/p>\n

    \u8fd9\u662f\u901a\u8fc7\u963b\u6b62\u5165\u7ad9TCP\u7aef\u53e353（\u533a\u57df\u4f20\u8f93\u8bf7\u6c42）\u548cUDP\u7aef\u53e353（\u67e5\u8be2）\u6765\u5b9e\u73b0\u7684\u3002<\/p>\n

    \u2022 \u8981\u6c42\u5185\u90e8\u5ba2\u6237\u7aef\u901a\u8fc7\u5185\u90e8DNS\u89e3\u6790\u6240\u6709\u57df\u540d\u3002<\/p>\n

    \u8fd9\u5c06\u8981\u6c42\u4f60\u963b\u6b62\u51fa\u7ad9UDP\u7aef\u53e353 （\u7528\u4e8e\u67e5\u8be2），\u540c\u65f6\u4fdd\u6301\u6253\u5f00\u7684\u51fa\u7ad9TCP\u7aef\u53e353 （\u7528\u4e8e\u533a\u57df\u4f20\u8f93）\u3002<\/p>\n

    \u2022 \u9650\u5236\u5916\u90e8DNS\u670d\u52a1\u5668\u3002\u5185\u90e8DNS\u670d\u52a1\u5668\u4ece\u8fd9\u4e9b\u5916\u90e8DNS\u670d\u52a1\u5668\u62c9\u53d6\u533a\u57df\u4f20\u8f93\u3002<\/p>\n

    \u2022 \u90e8\u7f72\u7f51\u7edc\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf(NIDS) \u4ee5\u76d1\u89c6\u5f02\u5e38DNS\u6d41\u91cf\u3002<\/p>\n

    \u2022 \u6b63\u786e\u52a0\u56fa\u4e13\u7528\u7f51\u7edc\u4e2d\u7684\u6240\u6709DNS\u3001\u670d\u52a1\u5668\u548c\u5ba2\u6237\u7aef\u7cfb\u7edf\u3002<\/p>\n

    \u2022 \u4f7f\u7528DNSSEC\u4fdd\u62a4DNS\u57fa\u7840\u8bbe\u65bd\u3002<\/p>\n

    \u2022 \u5728\u6240\u6709\u652f\u6301\u7684\u5ba2\u6237\u7aef\u4e0a\u4f7f\u7528DoH\u6216ODoH \u3002<\/p>\n

    \n

    \u6ca1\u6709\u7b80\u5355\u7684\u8865\u4e01\u6216\u66f4\u65b0\u53ef\u4ee5\u963b\u6b62\u8fd9\u4e9b\u9488\u5bf9\u5ba2\u6237\u7aef\u7684\u653b\u51fb\u3002<\/p>\n

    \u8fd9\u662f\u56e0\u4e3a\u8fd9\u4e9b\u653b\u51fb\u5229\u7528\u4e86\u5404\u79cd\u534f\u8bae\u3001\u670d\u52a1\u548c\u5e94\u7528\u7a0b\u5e8f\u4e2d\u5185\u7f6e\u7684\u6b63\u5e38\u548c\u9002\u5f53\u7684\u673a\u5236\u3002<\/p>\n

    \u56e0\u6b64，\u9632\u5fa1\u591a\u4e3a\u63a2\u6d4b\u6027\u548c\u9884\u9632\u6027\u7684\u3002<\/p>\n

    \n

    \u2022 \u5b89\u88c5HIDS\u548cNIDS\u5de5\u5177\u4ee5\u76d1\u63a7\u8fd9\u4e9b\u7c7b\u578b\u7684\u6ee5\u7528\u3002<\/p>\n

    \u2022 \u5b9a\u671f\u67e5\u770bDNS\u548cDHCP\u7cfb\u7edf\u7684\u65e5\u5fd7，\u4ee5\u53ca\u672c\u5730\u5ba2\u6237\u7aef\u7cfb\u7edf\u65e5\u5fd7，\u8fd8\u6709\u9632\u706b\u5899\u3001\u4ea4\u6362\u673a\u548c\u8def\u7531\u5668\u65e5\u5fd7，\u4ee5\u67e5\u627e\u5f02\u5e38\u6216\u53ef\u7591\u4e8b\u4ef6\u7684\u6761\u76ee\u3002<\/p>\n

    \n

    \u2022 \u7ec4\u7ec7\u5e94\u4f7f\u7528\u62c6\u5206DNS\u7cfb\u7edf（\u4e5f\u88ab\u79f0\u4e3a\u5206\u88c2\u5730\u5e73\u7ebfDNS\u3001\u5206\u5272\u89c6\u56feDNS\u548c\u62c6\u5206\u5927\u8111DNS) \u3002<\/p>\n

    \u62c6\u5206DNS<\/span>，\u90e8\u7f72\u4f9b\u516c\u5171\u4f7f\u7528\u7684DNS\u670d\u52a1\u5668\u548c\u4f9b\u5185\u90e8\u4f7f\u7528\u7684\u72ec\u7acbDNS \u670d\u52a1\u5668\u3002<\/p>\n

    \u516c\u5171DNS<\/span>，\u670d\u52a1\u5668\u4e0a\u57df\u6587\u4ef6\u4e2d\u7684\u6240\u6709\u6570\u636e\u90fd\u53ef\u7531\u516c\u4f17\u901a\u8fc7\u67e5\u8be2\u6216\u63a2\u67e5\u8fdb\u884c\u8bbf\u95ee\u3002<\/p>\n

    \u5185\u90e8DNS<\/span>，\u4ec5\u4f9b\u5185\u90e8\u4f7f\u7528，\u53ea\u6709\u5185\u90e8\u7cfb\u7edf\u88ab\u6388\u4e88\u4e0e\u5185\u90e8DNS \u670d\u52a1\u5668\u4ea4\u4e92\u7684\u6743\u9650\u3002<\/p>\n

    \n

    \u2022 \u901a\u8fc7\u963b\u6b62TCP\u548cUDP\u7684\u5165\u7ad9\u7aef\u53e353,\u53ef\u7981\u6b62\u5916\u90e8\u4eba\u5458\u8bbf\u95ee\u5185\u90e8DNS\u670d\u52a1\u5668\u3002<\/p>\n

    TCP53\u7528\u4e8e\u533a\u57df\u4f20\u8f93（\u5305\u62ec\u5927\u591a\u6570DNS\u670d\u52a1\u5668\u5230DNS\u670d\u52a1\u5668\u7684\u901a\u4fe1），UDP 53\u7528\u4e8e\u67e5\u8be2（\u4efb\u4f55\u5411DNS\u670d\u52a1\u5668\u53d1\u9001\u67e5\u8be2\u7684\u975eDNS\u7cfb\u7edf）\u3002<\/p>\n

    \u2022 \u53ef\u5bf9\u5185\u90e8\u7cfb\u7edf\u8fdb\u884c\u914d\u7f6e，\u4f7f\u5176\u4ec5\u4e0e\u5185\u90e8DNS\u670d\u52a1\u5668\u4ea4\u4e92，\u4e5f\u53ef\u5141\u8bb8\u5b83\u4eec\u5411\u5916\u90e8DNS\u670d\u52a1\u5668\u53d1\u9001\u67e5\u8be2（\u8fd9\u8981\u6c42\u9632\u706b\u5899\u662f\u4e00\u4e2a\u72b6\u6001\u68c0\u67e5\u9632\u706b\u5899，\u5176\u914d\u7f6e\u5141\u8bb8\u54cd\u5e94\u4ece\u5df2\u6279\u51c6\u7684\u51fa\u7ad9\u67e5\u8be2\u8fd4\u56de\u5230\u5185\u90e8\u7cfb\u7edf）\u3002<\/p>\n

    \n

    \u2022 \u53e6\u4e00\u4e2aDNS\u9632\u5fa1\u673a\u5236\u662fDNS\u9677\u5751\u3002<\/p>\n

    DNS<\/span>\u9677\u5751，<\/span>\u662f\u865a\u5047\u6d4b\u91cf\u7cfb\u7edf（\u53c8\u540d\u9677\u5751\u670d\u52a1\u5668\u3001\u4e92\u8054\u7f51\u9677\u5751\u548cDNS\u9ed1\u6d1e）\u7684\u5177\u4f53\u793a\u4f8b\u3002<\/p>\n

    \u8fd9\u79cd\u6280\u672f\u88ab\u6709\u6548\u5730\u7528\u4e8e\u9632\u5fa1DNS\u6b3a\u9a97\u3002<\/p>\n

    ￭ DNS\u9677\u5751\u8bd5\u56fe\u5bf9\u6765\u81ea\u6076\u610f\u8f6f\u4ef6（\u5982\u673a\u5668\u4eba）\u7684DNS\u67e5\u8be2\u63d0\u4f9b\u9519\u8bef\u664c\u5e94，\u4ee5\u963b\u6b62\u8bbf\u95ee\u547d\u4ee4，\u5e76\u9632\u6b62\u7cfb\u7edf\u88ab\u63a7\u5236\u3002<\/p>\n

    ￭ \u5b83\u8fd8\u53ef\u7528\u6765\u963b\u6b62\u7528\u6237\u8bbf\u95ee\u5df2\u77e5\u7684\u6076\u610f\u6216\u9493\u9c7c\u7f51\u7ad9\u3002<\/p>\n

    \u56e0\u6b64，DNS\u9677\u5751\u53ef\u7528\u4e8e\u6076\u610f\u548c\u5584\u610f\/\u8c03\u67e5\/\u9632\u5fa1\u76ee\u7684\u3002<\/p>\n

    \n

    11.6.2 \u57df\u540d\u52ab\u6301<\/p>\n

    \u57df\u540d\u52ab\u6301<\/span>\u6216\u57df\u540d\u76d7\u7a83<\/span>，\u662f\u5728\u672a\u7ecf\u6240\u6709\u8005\u6388\u6743\u7684\u60c5\u51b5\u4e0b\u66f4\u6539\u57df\u540d\u6ce8\u518c\u7684\u6076\u610f\u884c\u4e3a\u3002<\/p>\n

    \u5b9e\u73b0\u65b9\u5f0f：\u901a\u8fc7\u7a83\u53d6\u6240\u6709\u8005\u7684\u767b\u5f55\u51ed\u8bc1\u3001\u4f7f\u7528XSRF\u3001\u4f1a\u8bdd\u52ab\u6301\u3001\u8def\u5f84\/MITM\u653b\u51fb\u6216\u5229\u7528\u57df\u540d\u6ce8\u518c\u5546\u7cfb\u7edf\u4e2d\u7684\u7f3a\u9677\u3002<\/p>\n

    \n

    \u4f8b\u5b50：2017\u5e749\u6708\u53d1\u751f\u7684Fox-IT.com\u57df\u540d\u88ab\u76d7\u4e8b\u4ef6\u3002<\/span><\/p>\n

    \u6709\u65f6，\u5982\u679c\u53e6\u4e00\u4e2a\u4eba\u5728\u539f\u59cb\u6240\u6709\u8005\u7684\u6ce8\u518c\u8fc7\u671f\u540e\u7acb\u5373\u6ce8\u518c\u57df\u540d，\u8fd9\u79cd\u884c\u4e3a\u4e5f\u88ab\u79f0\u4e3a\u57df\u540d\u52ab\u6301，\u4f46\u4e8b\u5b9e\u5e76\u975e\u5982\u6b64\u3002<\/span><\/p>\n

    \u8fd9\u53ef\u80fd\u662f\u4e00\u79cd\u4e0d\u9053\u5fb7\u7684\u505a\u6cd5，\u4f46\u5b83\u5e76\u975e\u771f\u6b63\u7684\u9ed1\u5ba2\u653b\u51fb\u3002\u5b83\u6b63\u662f\u5229\u7528\u539f\u59cb\u6240\u6709\u8005\u672a\u80fd\u81ea\u52a8\u7eed\u8ba2\u57df\u540d\u7684\u6f0f\u6d1e\u5b9e\u73b0\u7684\u3002<\/span><\/p>\n

    \u5982\u679c\u539f\u59cb\u6240\u6709\u8005\u56e0\u672a\u80fd\u4fdd\u6301\u6ce8\u518c\u800c\u4e22\u5931\u57df\u540d，\u90a3\u4e48\u4ed6\u901a\u5e38\u6ca1\u6709\u8ffd\u7d22\u6743，\u800c\u53ea\u80fd\u8054\u7cfb\u65b0\u6240\u6709\u8005\u5e76\u8bf7\u6c42\u91cd\u65b0\u83b7\u5f97\u63a7\u5236\u6743\u3002<\/span><\/p>\n

    \u5982\u679c\u4e00\u4e2a\u7ec4\u7ec7\u5931\u53bb\u57df\u540d\u63a7\u5236\u6743\u5e76\u4e14\u7531\u5176\u4ed6\u4eba\u63a5\u7ba1\u63a7\u5236\u6743，\u8fd9\u5bf9\u7ec4\u7ec7\u53ca\u5176\u5ba2\u6237\u548c\u8bbf\u95ee\u8005\u6765\u8bf4\u90fd\u53ef\u80fd\u662f\u4e00\u4e2a\u6bc1\u706d\u6027\u4e8b\u4ef6\u3002<\/span><\/p>\n

    \u65b0FQDN\u6240\u6709\u8005\u53ef\u80fd\u6258\u7ba1\u5b8c\u5168\u4e0d\u540c\u7684\u5185\u5bb9\u6216\u4e0a\u4e00\u4e2a\u7f51\u7ad9\u7684\u865a\u5047\u526f\u672c\u3002<\/span><\/p>\n

    \u540e\u7eed\u6d3b\u52a8\u53ef\u80fd\u6b3a\u9a97\u8bbf\u95ee\u8005，\u7c7b\u4f3c\u4e8e\u7f51\u7edc\u9493\u9c7c\u653b\u51fb，\u53ef\u80fd\u4f1a\u63d0\u53d6\u548c\u6536\u96c6\u4e2a\u4eba\u8eab\u4efd\u4fe1\u606f(PII)\u3002<\/span><\/p>\n

    \n

    \u9632\u6b62\u57df\u540d\u52ab\u6301\u7684\u6700\u4f73\u63aa\u65bd：\u5728\u767b\u5f55\u57df\u6ce8\u518c\u5668\u65f6\u4f7f\u7528\u5f3a\u591a\u56e0\u7d20\u8eab\u4efd\u8ba4\u8bc1\u3002<\/p>\n

    \u4e3a\u4e86\u9632\u6b62\u57df\u540d\u6ce8\u518c\u5931\u6548，\u8bf7\u8bbe\u7f6e\u81ea\u52a8\u7eed\u8d39，\u5e76\u5728\u7eed\u8d39\u65e5\u671f\u524d\u4e00\u5468\u518d\u6b21\u68c0\u67e5\u4ed8\u6b3e\u65b9\u5f0f\u3002<\/p>\n

    \n

    \u8bef\u690d\u57df\u540d\u653b\u51fb(typosquatting)<\/span><\/p>\n

    \u5f53\u7528\u6237\u9519\u8bef\u8f93\u5165\u9884\u671f\u57df\u540d\u6216IP\u5730\u5740\u65f6，\u8fd9\u79cd\u9519\u8bef\u5982\u679c\u88ab\u653b\u51fb\u8005\u5229\u7528，\u5219\u603b\u5473\u7740\u53d1\u751f\u4e86\u8bef\u690d\u57df\u540d\u653b\u51fb\u3002<\/p>\n

    \u653b\u51fb\u8005\u9884\u6d4bURL\u53ef\u80fd\u7684\u8f93\u5165\u9519\u8bef，\u7136\u540e\u6ce8\u518c\u8fd9\u4e9b\u57df\u540d，\u5c06\u6d41\u91cf\u5f15\u5bfc\u5230\u81ea\u5df1\u7684\u7f51\u7ad9\u3002<\/p>\n

    \n

    \u7528\u4e8e\u8bef\u690d\u57df\u540d\u7684\u53d8\u4f53\u5305\u62ec：<\/p>\n

    – \u5e38\u89c1\u7684\u62fc\u5199\u9519\u8bef（\u5982googel.com)<\/p>\n

    – \u540d\u79f0\u6216\u5355\u8bcd\u4e0a\u7684\u952e\u5165\u9519\u8bef（\u5982gooogle.com)<\/p>\n

    – \u53d8\u4f53（\u5982googles.com \u4e2d\u7684\u590d\u6570）<\/p>\n

    – \u4e0d\u540c\u7684\u9876\u7ea7\u57df(TLD) \u5982google.edu\u7b49<\/p>\n

    \n

    \u540c\u5f62\u8bcd\u653b\u51fb<\/span><\/p>\n

    \u53e6\u4e00\u4e2aDNS\u3001\u5730\u5740\u6216\u8d85\u94fe\u63a5\u95ee\u9898\u662f\u540c\u5f62\u8bcd\u653b\u51fb\u3002<\/p>\n

    \u8fd9\u4e9b\u653b\u51fb\u5229\u7528\u5b57\u7b26\u96c6\u7684\u76f8\u4f3c\u6027\u6765\u6ce8\u518c\u8089\u773c\u770b\u8d77\u6765\u5408\u6cd5\u7684\u865a\u5047\u56fd\u9645\u57df\u540d(IDN) \u3002<\/p>\n

    \u4f8b\u5982，\u5728\u8bb8\u591a\u5b57\u4f53\u4e2d，\u897f\u91cc\u5c14\u6587\u7684\u4e00\u4e9b\u5b57\u6bcd\u770b\u8d77\u6765\u50cf\u62c9\u4e01\u5b57\u7b26；<\/p>\n

    \u4f8b\u5982，\u62c9\u4e01\u8bed\u4e2d\u7684l（\u5373\u5c0f\u5199L)\u770b\u8d77\u6765\u50cf\u5e15\u6d1b\u5361\u897f\u91cc\u5c14\u5b57\u6bcd\u3002<\/p>\n

    \u56e0\u6b64，apple.com\u548cpaypal.com \u7684\u57df\u540d\u770b\u8d77\u6765\u53ef\u80fd\u662f\u62c9\u4e01\u5b57\u7b26，\u4f46\u5b9e\u9645\u4e0a\u53ef\u80fd\u5305\u542b\u897f\u91cc\u5c14\u5b57\u7b26，\u89e3\u6790\u540e\u4f1a\u5c06\u4f60\u6307\u5411\u4e0d\u540c\u7684\u7ad9\u70b9\u3002<\/p>\n

    \n

    URL<\/span>\u52ab\u6301<\/span><\/p>\n

    URL\u52ab\u6301\u6307\u7684\u662f\u663e\u793a\u5176\u4ed6\u94fe\u63a5\u6216\u5e7f\u544a\u7684\u884c\u4e3a\u3002<\/p>\n

    \u8be5\u94fe\u63a5\u6216\u5e7f\u544a\u770b\u8d77\u6765\u50cf\u77e5\u540d\u4ea7\u54c1\u3001\u670d\u52a1\u6216\u7f51\u7ad9\u7684\u94fe\u63a5\u6216\u5e7f\u544a，\u4f46\u5355\u51fb\u540e\u4f1a\u5c06\u7528\u6237\u91cd\u5b9a\u5411\u5230\u5176\u4ed6\u4f4d\u7f6e\u3001\u670d\u52a1\u6216\u4ea7\u54c1\u3002<\/p>\n

    \u8fd9\u53ef\u4ee5\u901a\u8fc7\u53d1\u5e03\u7ad9\u70b9\u548c\u9875\u9762\u3001\u5229\u7528\u641c\u7d22\u5f15\u64ce\u4f18\u5316(SEO)\u6765\u5b9e\u73b0，\u6216\u8005\u901a\u8fc7\u4f7f\u7528\u5e7f\u544a\u8f6f\u4ef6\u6765\u53d6\u4ee3\u5408\u6cd5\u5e7f\u544a\u548c\u94fe\u63a5，\u4ece\u800c\u4f7f\u5176\u5bfc\u5411\u5176\u4ed6\u6216\u6076\u610f\u7684\u4f4d\u7f6e\u3002<\/p>\n

    \n

    \u70b9\u51fb\u52ab\u6301<\/span><\/p>\n

    \u70b9\u51fb\u52ab\u6301\u653b\u51fb\u5c06\u7528\u6237\u5728\u7f51\u9875\u4e0a\u7684\u70b9\u51fb\u6216\u9009\u62e9\u91cd\u5b9a\u5411\u5230\u53e6\u4e00\u4e2a\u76ee\u6807（\u901a\u5e38\u662f\u6076\u610f\u7684），\u800c\u4e0d\u662f\u5176\u9884\u671f\u4f4d\u7f6e\u3002<\/p>\n

    \u70b9\u51fb\u52ab\u6301\u7684\u624b\u6bb5\u4e4b\u4e00\u662f\u5728\u663e\u793a\u7684\u9875\u9762\u4e0a\u6dfb\u52a0\u4e0d\u53ef\u89c1\u6216\u9690\u85cf\u7684\u8986\u76d6\u3001\u6846\u67b6\u6216\u56fe\u50cf\u3002<\/p>\n

    \u7528\u6237\u770b\u5230\u539f\u59cb\u9875\u9762，\u4f46\u4efb\u4f55\u9f20\u6807\u70b9\u51fb\u6216\u9009\u62e9\u90fd\u5c06\u88ab\u9875\u9762\u4e0a\u6d6e\u52a8\u7684\u5e27\u6355\u83b7\u5e76\u88ab\u91cd\u5b9a\u5411\u5230\u6076\u610f\u76ee\u6807\u3002<\/p>\n

    \n

    11.7 \u4e92\u8054\u7f51\u534f\u8bae\u7f51\u7edc<\/p>\n

    TCP\/IP\u534f\u8bae\u5957\u4ef6\u4e2d\u7684\u53e6\u4e00\u4e2a\u91cd\u8981\u534f\u8bae\u5728OSI\u6a21\u578b\u7684\u7f51\u7edc\u5c42\u8fd0\u884c，\u5373IP\u3002IP\u4e3a\u6570\u636e\u5305\u63d0\u4f9b\u8def\u7531\u5bfb\u5740\u3002<\/p>\n

    \u8fd9\u6761\u8def\u7ebf\u6210\u4e3a\u5168\u7403\u4e92\u8054\u7f51\u901a\u4fe1\u7684\u57fa\u7840，\u56e0\u4e3a\u5b83\u63d0\u4f9b\u4e86\u4e00\u79cd\u8eab\u4efd\u8bc6\u522b\u624b\u6bb5\u5e76\u89c4\u5b9a\u4e86\u4f20\u8f93\u8def\u5f84\u3002<\/p>\n

    \u4e0eUDP\u7c7b\u4f3c，IP\u662f\u65e0\u8fde\u63a5\u7684，\u56e0\u800c\u662f\u4e00\u79cd\u4e0d\u53ef\u9760\u7684\u901a\u4fe1\u670d\u52a1\u3002<\/p>\n

    IP\u4e0d\u4fdd\u8bc1\u6570\u636e\u5305\u4e00\u5b9a\u80fd\u88ab\u4f20\u9001\u6216\u6570\u636e\u5305\u4ee5\u6b63\u786e\u987a\u5e8f\u4f20\u9001，\u4e5f\u4e0d\u4fdd\u8bc1\u6570\u636e\u5305\u53ea\u88ab\u4f20\u9001\u4e00\u6b21\u3002<\/p>\n

    \u7136\u800c，\u5b83\u7684\u8bbe\u8ba1\u76ee\u7684\u662f\u5c3d\u6700\u5927\u52aa\u529b\u627e\u5230\u901a\u5f80\u76ee\u7684\u5730\u7684\u901a\u9053\u6216\u8def\u7531，\u800c\u4e0d\u7ba1\u7f51\u7edc\u7ed3\u6784\u662f\u5426\u5df2\u635f\u574f\u3002<\/p>\n

    \u56e0\u6b64，\u4f60\u5fc5\u987b\u5728IP\u4e0a\u4f7f\u7528TCP\u6765\u5efa\u7acb\u53ef\u9760\u548c\u53d7\u63a7\u7684\u901a\u4fe1\u4f1a\u8bdd\u3002<\/p>\n

    \n

    11.7.1 IPv4\u4e0eIPv6<\/p>\n

    IPv4\u662f\u4e16\u754c\u4e0a\u4f7f\u7528\u6700\u5e7f\u6cdb\u7684\u4e92\u8054\u7f51\u534f\u8bae\u7248\u672c\u3002\u4f46\u662f，IPv6\u7248\u672c\u6b63\u5feb\u901f\u7528\u4e8e\u79c1\u4eba\u548c\u516c\u5171\u7f51\u7edc\u3002<\/p>\n

    IPv4\u4f7f\u752832\u4f4d\u5bfb\u5740\u65b9\u6848，\u800cIPv6\u4f7f\u7528128\u4f4d\u5bfb\u5740\u3002IPv6\u63d0\u4f9bIPv4\u4e2d\u6ca1\u6709\u7684\u8bb8\u591a\u65b0\u529f\u80fd\u3002<\/p>\n

    IPv6\u7684\u4e00\u4e9b\u65b0\u529f\u80fd\u5305\u62ec：\u4f5c\u7528\u57df\u5730\u5740\u3001\u81ea\u52a8\u914d\u7f6e\u548c\u670d\u52a1\u8d28\u91cf(QoS)\u4f18\u5148\u7ea7\u503c\u3002<\/p>\n

    \u901a\u8fc7\u5206\u533a\u5730\u5740，\u7ba1\u7406\u5458\u53ef\u8fdb\u884c\u5206\u7ec4，\u7136\u540e\u963b\u6b62\u6216\u5141\u8bb8\u8bbf\u95ee\u7f51\u7edc\u670d\u52a1，\u5982\u6587\u4ef6\u670d\u52a1\u5668\u6216\u6253\u5370\u3002<\/p>\n

    \u81ea\u52a8\u914d\u7f6e\u4e0d\u518d\u9700\u8981DHCP\u548cNAT\u3002QoS\u4f18\u5148\u7ea7\u503c\u5141\u8bb8\u57fa\u4e8e\u4f18\u5148\u7ea7\u5185\u5bb9\u7684\u6d41\u91cf\u7ba1\u7406\u3002<\/p>\n

    \u53e6\u5916，IPsec\u5185\u7f6e\u4e8eIPv6\u4e2d，\u4f46\u5b83\u662fIPv4\u7684\u9644\u52a0\u7ec4\u4ef6\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u63d0\u793a：<\/p>\n

    IPv4\u7684\u670d\u52a1\u7c7b\u578b(ToS)\u662f\u4e0eIPv6\u7684QoS\u5bf9\u7b49\u7684\u6982\u5ff5\u3002\u7136\u800c，\u5b83\u672a\u88ab\u4f7f\u7528，\u5e76\u88ab\u540e\u6765\u7684\u89c4\u8303\u8f6c\u6362\u4e3a\u5dee\u5f02\u670d\u52a1(DS)\u3002<\/p>\n

    DS\u5b57\u6bb5\u63d0\u4f9b\u4e86\u5404\u79cd\u53ef\u5b9a\u4e49\u7684\u7279\u5f81，\u7528\u4e8e\u7ba1\u7406\u4e1a\u52a1\u6d41\u3002<\/p>\n

    \u7136\u800c，\u5b83\u4ecd\u7136\u6ca1\u6709\u88ab\u6267\u884c\u8fd9\u79cd\u7ba1\u7406\u7684\u7f51\u7edc\u8bbe\u5907\u5e7f\u6cdb\u4f7f\u7528\u6216\u652f\u6301\u3002<\/p>\n

    IPv6\u7f51\u7edc\u5305\u62ec\u66f4\u591a\u7684\u901a\u7528\u652f\u6301，\u5e76\u5b9e\u9645\u63d0\u4f9b\u57fa\u4e8eIPv6\u62a5\u5934\u6570\u503c\u7684\u6d41\u91cf\u4f18\u5148\u7ea7\u670d\u52a1\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    2000\u5e74\u4ee5\u540e\u53d1\u5e03\u7684\u5927\u591a\u6570\u64cd\u4f5c\u7cfb\u7edf\u90fd\u652f\u6301IPv6，\u65e0\u8bba\u662f\u7cfb\u7edf\u81ea\u5e26\u7684\u8fd8\u662f\u901a\u8fc7\u989d\u5916\u7684\u7a0b\u5e8f\u5b9e\u73b0\u7684\u3002<\/p>\n

    IPv6\u5df2\u88ab\u9010\u6e10\u63a8\u5e7f\u4f7f\u7528\u3002\u5927\u591a\u6570IPv6\u7f51\u7edc\u76ee\u524d\u4f4d\u4e8e\u79c1\u4eba\u7f51\u7edc\u4e2d，\u4f8b\u5982\u5927\u516c\u53f8\u3001\u5b9e\u9a8c\u5ba4\u548c\u5927\u5b66\u3002<\/p>\n

    \u82e5\u6b32\u4ece\u8c37\u6b4c\u7684\u89d2\u5ea6\u6765\u4e86\u89e3\u4e92\u8054\u7f51\u4e0aIPv4\u5230IPv6\u7684\u8f6c\u6362\u72b6\u6001，\u8bf7\u53c2\u9605IPv6\u7edf\u8ba1\u4fe1\u606f\u3002<\/p>\n

    \n

    \u5411IPv6\u7684\u8fc7\u6e21\u6216\u8fc1\u79fb\u5f15\u8d77\u4e86\u51e0\u4e2a\u5b89\u5168\u95ee\u9898\u3002<\/p>\n

    ￭ \u4e00\u4e2a\u95ee\u9898\u662f，\u968f\u7740128\u4f4d\u5730\u5740\u7a7a\u95f4\u7684\u589e\u5927，\u653b\u51fb\u8005\u53ef\u5c06\u66f4\u591a\u7684\u5730\u5740\u7528\u4f5c\u6e90\u5730\u5740；<\/p>\n

    \u56e0\u6b64，IP\u8fc7\u6ee4\u548c\u963b\u6b62\u5217\u8868\u7684\u6548\u679c\u4f1a\u964d\u4f4e，\u56e0\u4e3a\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u4e0d\u540c\u7684\u5730\u5740\u901a\u8fc7\u8fc7\u6ee4\u5668\u3002<\/p>\n

    \n

    ￭ \u7b2c\u4e8c\u4e2a\u95ee\u9898\u662f，IPv6\u7684\u5b89\u5168\u90e8\u7f72\u8981\u6c42\u5728\u751f\u4ea7\u7f51\u7edc\u4e0a\u542f\u7528\u534f\u8bae\u4e4b\u524d，\u5fc5\u987b\u5bf9\u6240\u6709\u5b89\u5168\u7b5b\u9009\u548c\u76d1\u89c6\u4ea7\u54c1\u8fdb\u884c\u5347\u7ea7，\u4ee5\u5b8c\u5168\u652f\u6301IPv6\u3002<\/p>\n

    \u5426\u5219，IPv6\u5c06\u5145\u5f53\u4e00\u4e2a\u9690\u853d\u901a\u9053，\u4e0d\u53d7\u76d1\u63a7\u548c\u8fc7\u6ee4\u3002<\/p>\n

    \n

    ￭ IPv6\u7684\u7b2c\u4e09\u4e2a\u95ee\u9898\u662fNAT\u7684\u4e22\u5931\u6216\u7f3a\u4e4f（\u89c1\u7b2c12 \u7ae0）\u3002<\/p>\n

    \u56e0\u4e3a\u516c\u5171IP\u5730\u5740\u7684\u6570\u91cf\u6b63\u5728\u51cf\u5c11，IPv4\u8981\u6c42\u4f7f\u7528NAT\u6765\u652f\u6301\u8d8a\u6765\u8d8a\u591a\u7684\u5ba2\u6237\u7aef\u7cfb\u7edf\u3002<\/p>\n

    \u5728IPv6\u4e2d，\u5730\u5740\u7684\u6570\u91cf\u662f\u5929\u6587\u6570\u5b57(340 282 366 920 938 463 463 374 607 431768211 456)，\u56e0\u6b64NAT\u4e0d\u4ec5\u4e0d\u662f\u5fc5\u9700\u7684，\u800c\u4e14\u89c4\u8303\u4e2d\u672a\u63d0\u53ca\u3002<\/p>\n

    \n

    \u6709\u4eba\u8ba4\u4e3a\u8fd9\u4f1a\u964d\u4f4e\u5b89\u5168\u6027；\u73b0\u5b9e\u662f，\u8fd9\u5728\u5f88\u5927\u7a0b\u5ea6\u4e0a\u964d\u4f4e\u4e86\u9690\u79d8\u6027\u3002<\/p>\n

    \u88ab\u8ba4\u4e3a\u6765\u81eaNAT\u7684\u771f\u6b63\u5b89\u5168\u6027\u5b9e\u9645\u4e0a\u662f\u7531\u72b6\u6001\u68c0\u67e5\u9632\u706b\u5899\u7279\u610f\u63d0\u4f9b\u7684，\u5927\u591a\u6570\u7f51\u7edc\u5df2\u7ecf\u5728\u4f7f\u7528\u8fd9\u79cd\u9644\u5e26NAT\u7684\u9632\u706b\u5899\u3002<\/p>\n

    \u56e0\u4e3a\u7cfb\u7edf\u672c\u5730\u5206\u914d\u7684IP\u5730\u5740\u6ca1\u6709\u88abNAT\u8f6c\u6362\u4e3a\u516c\u5171\u5730\u5740，\u56e0\u6b64\u4f1a\u964d\u4f4e\u6216\u5931\u53bb\u9690\u79d8\u6027\u3002<\/p>\n

    \u672a\u6765\u968f\u7740IPv6\u5730\u5740\u88ab\u56fa\u5b9a\u5230NIC, \u6e90\u7cfb\u7edf\u7684\u8eab\u4efd\u53ef\u80fd\u4f1a\u53d8\u5f97\u96be\u4ee5\u9690\u85cf，\u65e0\u8bba\u5176\u662f\u653b\u51fb\u8005，\u8fd8\u662f\u9700\u8981\u9690\u79c1\u7684\u6216\u9700\u8981\u4e0d\u88ab\u8ffd\u8e2a\u7684\u5728\u7ebf\u4ea4\u6613\u7684\u4e2a\u4eba（\u5982\u5439\u54e8\u8005\u6216\u56e0\u5bb6\u66b4\u5bfb\u6c42\u5e2e\u52a9\u7684\u4eba）\u3002<\/p>\n

    \n

    \u4f7f\u7528\u4ee5\u4e0b\u4e09\u79cd\u65b9\u6cd5\u4e2d\u7684\u4e00\u4e2a\u6216\u591a\u4e2a，\u5373\u53ef\u5728\u540c\u4e00\u7f51\u7edc\u4e0a\u4f7f\u7528IPv6 \u548cIPv4: \u53cc\u5806\u6808\u3001\u96a7\u9053\u6216NAT-PT\u3002<\/p>\n

    \u53cc\u5806\u6808，<\/span>\u610f\u5473\u7740\u8ba9\u7cfb\u7edf\u540c\u65f6\u8fd0\u884cIPv4\u548cIPv6, \u5e76\u4e3a\u6bcf\u4e2a\u4f1a\u8bdd\u4f7f\u7528\u9002\u5f53\u7684\u534f\u8bae\u3002<\/p>\n

    \u96a7\u9053，<\/span>\u5141\u8bb8\u5927\u591a\u6570\u7cfb\u7edf\u64cd\u4f5cIPv4 \u6216IPv6\u7684\u5355\u4e2a\u5806\u6808，\u5e76\u4f7f\u7528\u5c01\u88c5\u96a7\u9053\u8bbf\u95ee\u5176\u4ed6\u534f\u8bae\u7684\u7cfb\u7edf\u3002<\/p>\n

    \u7f51\u7edc\u5730\u5740\u53ca\u534f\u8bae\u8f6c\u6362(NAT-PT)(RFC-2766)<\/span>，\u53ef\u7528\u4e8eIPv4\u548cIPv6\u7f51\u6bb5\u4e4b\u95f4\u7684\u8f6c\u6362，\u7c7b\u4f3c\u4e8eNAT\u5728\u5185\u90e8\u548c\u5916\u90e8\u5730\u5740\u4e4b\u95f4\u7684\u8f6c\u6362\u65b9\u5f0f\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u63d0\u793a：<\/p>\n

    IPv４\u548cIPv6\u90fd\u6709\u4e00\u4e2a\u5934\u5b57\u6bb5，\u7528\u4e8e\u63a7\u5236\u6216\u9650\u5236\u65e0\u9650\u4f20\u8f93\u3002<\/p>\n

    IPv4\u7684\u751f\u5b58\u65f6\u95f4(TTL)\u5b57\u6bb5\u548cIPv6\u7684\u8df3\u6570\u9650\u5236\u5b57\u6bb5\u7531\u8def\u7531\u5668\u9012\u51cf，\u76f4\u81f3\u8fbe\u5230\u96f6(0) \u3002<\/p>\n

    \u4e00\u65e6\u53d1\u751f\u8fd9\u79cd\u60c5\u51b5，\u6570\u636e\u5305\u5c06\u88ab\u4e22\u5f03，\u5e76\u5c06ICMP\u7c7b\u578b11\u8d85\u65f6\u9519\u8bef\u6d88\u606f\u53d1\u9001\u56de\u6e90\u7ad9\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    11.7.2 IP\u5206\u7c7b<\/p>\n

    \u886811.1\u548c\u886811.2\u6982\u8ff0\u4e86\u7c7b\u548c\u9ed8\u8ba4\u5b50\u7f51\u7684\u5173\u952e\u7ec6\u8282\u3002<\/p>\n

    \u5b8c\u6574\u7684A\u7c7b\u5b50\u7f51\u652f\u630116777214\u4e2a\u4e3b\u673a，\u5b8c\u6574\u7684B\u7c7b\u5b50\u7f51\u652f\u630165534\u4e2a\u4e3b\u673a，\u5b8c\u6574\u7684C\u7c7b\u5b50\u7f51\u652f\u6301254\u4e2a\u4e3b\u673a\u3002<\/p>\n

    D\u7c7b\u7528\u4e8e\u591a\u64ad，E\u7c7b\u4f9b\u5c06\u6765\u4f7f\u7528\u3002<\/p>\n

    \n

    \"\"<\/p>\n

    \u886811.1 IP\u5206\u7c7b<\/p>\n

    \n

    \u6ce8\u610f，\u4e3a\u73af\u56de\u5730\u5740\u7559\u51fa\u6574\u4e2aA\u7c7b\u7f51\u7edc\u7684127\u4e2a\u5730\u5740，\u867d\u7136\u6b64\u76ee\u7684\u5b9e\u9645\u4e0a\u53ea\u9700\u8981\u4e00\u4e2a\u5730\u5740\u3002<\/p>\n

    \u51680\u7684A\u7c7b\u7f51\u7edc\u88ab\u5b9a\u4e49\u4e3a\u7f51\u7edc\u9ed1\u6d1e<\/span>，\u8def\u7531\u5230\u8be5\u7f51\u7edc\u7684\u6d41\u91cf\u4f1a\u88ab\u4e22\u5f03\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \u63d0\u793a：<\/p>\n

    IPv4<\/span>\u7684\u73af\u56de\u5730\u5740<\/span>\u662fA\u7c7b\u5b50\u7f51(127.0.0. l-127.255.255.254) \u4e2d\u7684\u4efb\u4f55\u5730\u5740，\u5373\u4f7f\u901a\u5e38\u53ea\u4f7f\u7528127.0.0.1\u8fd9\u4e00\u5730\u5740\u3002<\/p>\n

    \u5f53\u4e3a\u73af\u56de\u914d\u7f6e\u63a5\u53e3\u65f6，\u672a\u5b9a\u4e49\u5b50\u7f51\u63a9\u7801；\u9ed8\u8ba4\u60c5\u51b5\u4e0b，\u5b83\u5c06\u4f7f\u7528255.255.255.255, \u4e0d\u8fc7\u6709\u4e9b\u4eba\u4f1a\u5c06\u5176\u8bb0\u5f55\u4e3a127.0.0.0\/8\u3002<\/p>\n

    \u8fd8\u8981\u6ce8\u610f，\u5728IPV4\u4e0b，\u5b50\u7f51\u7684\u7b2c\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u7f51\u6bb5\u5730\u5740（\u5373127.0.0.0) ，\u6700\u540e\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u5b9a\u5411\u5e7f\u64ad\u5730\u5740（\u5373127.255.255.255) ，\u56e0\u6b64\u4e0d\u80fd\u88ab\u76f4\u63a5\u7528\u4f5c\u4e3b\u673a\u5730\u5740（\u6216\u73af\u56de\u5730\u5740）\u3002<\/p>\n

    IPv6<\/span>\u73af\u56de\u5730\u5740<\/span>\u4e0d\u662f\u7279\u5b9a\u5730\u5740，\u800c\u662f\u4e00\u4e2a\u7b26\u53f7：::1\/128\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    \"\"<\/p>\n

    \u886811. 2 IP \u7c7b\u7684\u9ed8\u8ba4\u5b50\u7f51\u63a9\u7801<\/p>\n

    \n

    \u7c7b\u4f3c\u4e8eIPv4\u5730\u5740\u7684\u57fa\u4e8e\u7c7b\u7684\u539f\u59cb\u5206\u7ec4\u4e0d\u518d\u88ab\u4e25\u683c\u9075\u5b88\u3002<\/p>\n

    \u76f8\u53cd，\u4eba\u4eec\u91c7\u7528\u57fa\u4e8e\u53ef\u53d8\u957f\u5ea6\u5b50\u7f51\u63a9\u7801(VLSM)<\/span>\u548c\u65e0\u7c7b\u522b\u57df\u95f4\u8def\u7531(CIDR)<\/span>\u7684\u66f4\u7075\u6d3b\u7684\u7cfb\u7edf\u3002<\/p>\n

    CIDR\u4f7f\u7528\u63a9\u7801\u4f4d（\u800c\u4e0d\u662f\u5b8c\u6574\u7684\u70b9\u5206\u5341\u8fdb\u5236）\u8868\u793a\u5b50\u7f51\u63a9\u7801\u3002<\/p>\n

    \u4f8b\u5982，\u63a9\u7801\u4e3a255.255.0.0\u7684\u7f51\u6bb5172.16.0.0\u53ef\u7528CIDR\u7b26\u53f7\u8868\u793a\u4e3a172.16.0.0\/16\u3002<\/p>\n

    \u76f8\u5bf9\u4e8e\u4f20\u7edf\u5b50\u7f51\u63a9\u7801\u6280\u672f，CIDR\u7684\u4e00\u4e2a\u663e\u8457\u4f18\u52bf\u662f\u80fd\u5c06\u591a\u4e2a\u4e0d\u8fde\u7eed\u7684\u5730\u5740\u7ec4\u5408\u6210\u4e00\u4e2a\u5b50\u7f51\u3002<\/p>\n

    \u4f8b\u5982，\u53ef\u5c06\u591a\u4e2aC\u7c7b\u5b50\u7f51\u7ec4\u5408\u6210\u4e00\u4e2a\u66f4\u5927\u7684\u5b50\u7f51\u5206\u7ec4\u3002<\/p>\n

    \n

    11.7.3 ICMP<\/p>\n

    ICMP\u7528\u4e8e\u786e\u5b9a\u7f51\u7edc\u6216\u7279\u5b9a\u94fe\u8def\u7684\u8fd0\u884c\u72b6\u51b5\u3002<\/p>\n

    ICMP\u53ef\u7528\u4e8eping\u3001traceroute\u3001pathping\u7b49\u7f51\u7edc\u7ba1\u7406\u5de5\u5177\u3002<\/p>\n

    ping\u5b9e\u7528\u7a0b\u5e8f\u4f7f\u7528ICMP\u56de\u663e\u5305\u5e76\u5c06\u5b83\u4eec\u4ece\u8fdc\u7a0b\u7cfb\u7edf\u53cd\u9988\u56de\u6765\u3002<\/p>\n

    \u53ef\u4f7f\u7528ping\u6765\u786e\u5b9a：<\/p>\n

    \u2022\u8fdc\u7a0b\u7cfb\u7edf\u662f\u5426\u5728\u7ebf<\/p>\n

    \u2022\u8fdc\u7a0b\u7cfb\u7edf\u662f\u5426\u6b63\u5728\u53ca\u65f6\u54cd\u5e94<\/p>\n

    \u2022\u4e2d\u95f4\u7cfb\u7edf\u662f\u5426\u652f\u6301\u901a\u4fe1<\/p>\n

    \u2022\u4e2d\u95f4\u7cfb\u7edf\u6b63\u5728\u901a\u4fe1\u7684\u6027\u80fd\u6548\u7387\u7ea7\u522b<\/p>\n

    \n

    ping\u5b9e\u7528\u7a0b\u5e8f\u5305\u542b\u4e00\u4e2a\u91cd\u5b9a\u5411\u51fd\u6570，\u8be5\u51fd\u6570\u5141\u8bb8\u5c06\u56de\u663e\u54cd\u5e94\u53d1\u9001\u5230\u4e0e\u6e90\u7cfb\u7edf\u4e0d\u540c\u7684\u76ee\u7684\u5730\u3002<\/p>\n

    \u4e0d\u5e78\u7684\u662f，ICMP<\/span>\u7684\u529f\u80fd\u5e38\u7528\u4e8e\u5404\u79cd\u5f62\u5f0f\u7684\u57fa\u4e8e\u5e26\u5bbd\u7684DoS\u653b\u51fb<\/span>，\u4f8b\u5982：\u6b7b\u4ea1\u4e4bping\u3001Smurf\u653b\u51fb\u548cping\u6d2a\u6c34\u653b\u51fb\u3002<\/p>\n

    \u8fd9\u4e00\u4e8b\u5b9e\u5f71\u54cd\u4e86\u7f51\u7edc\u5904\u7406ICMP\u6d41\u91cf\u7684\u65b9\u5f0f，\u5bfc\u81f4\u8bb8\u591a\u7f51\u7edc\u9650\u5236\u4e86ICMP\u7684\u4f7f\u7528，\u6216\u8005\u81f3\u5c11\u9650\u5236\u4e86\u5176\u541e\u5410\u91cf\u3002<\/p>\n

    \n

    11.7.4 IGMP<\/p>\n

    IGMP\u5141\u8bb8\u7cfb\u7edf\u652f\u6301\u591a\u64ad\u3002\u591a\u64ad\u5c06\u6570\u636e\u4f20\u8f93\u5230\u591a\u4e2a\u7279\u5b9a\u63a5\u6536\u8005，RFC1112\u8ba8\u8bba\u4e86\u6267\u884cIGMP\u591a\u64ad\u7684\u8981\u6c42\u3002<\/p>\n

    IGMP\u7528\u4e8e\u7ba1\u7406\u4e3b\u673a\u7684\u52a8\u6001\u591a\u64ad\u7ec4\u6210\u5458\u8d44\u683c<\/span>\u3002<\/p>\n

    \u5bf9\u4e8eIGMP, \u5982\u679c\u548c\u9884\u671f\u63a5\u6536\u8005\u4e4b\u95f4\u5b58\u5728\u4e0d\u540c\u8def\u5f84，\u5219\u5355\u4e2a\u521d\u59cb\u4fe1\u53f7\u5728\u8def\u7531\u5668\u5904\u590d\u7528\u3002<\/p>\n

    \u591a\u64ad\u53ef\u4ee5\u901a\u8fc7\u7b80\u5355\u6587\u4ef6\u4f20\u8f93\u534f\u8bae(TFTP)\u7cfb\u7edf\u6765\u7ec4\u7ec7\u6216\u7f13\u5b58\u8981\u53d1\u9001\u7ed9\u591a\u4e2a\u6536\u4ef6\u4eba\u7684\u5185\u5bb9\u3002<\/p>\n

    \n

    11.8 ARP\u5173\u6ce8\u70b9<\/p>\n

    \u5730\u5740\u89e3\u6790\u534f\u8bae（Address Resolution Protocol,\u7f29\u5199ARP）<\/span><\/p>\n

    ARP\u7528\u4e8e\u5c06IP\u5730\u5740（\u7528\u4e8e\u903b\u8f91\u5bfb\u5740\u768432\u4f4d\u4e8c\u8fdb\u5236\u6570）\u89e3\u6790\u4e3aMAC\u5730\u5740（\u7528\u4e8e\u7269\u7406\u5bfb\u5740\u768448\u4f4d\u4e8c\u8fdb\u5236\u6570）\u3002<\/p>\n

    \u7f51\u6bb5\u4e0a\u7684\u6d41\u91cf（\u4f8b\u5982\u901a\u8fc7\u4ea4\u6362\u673a\u4ece\u5ba2\u6237\u7aef\u5230\u9ed8\u8ba4\u7684\u7f51\u5173，\u5373\u8def\u7531\u5668）\u4f7f\u7528MAC\u5730\u5740\u4ece\u6e90\u7cfb\u7edf\u5b9a\u5411\u5230\u5176\u76ee\u6807\u7cfb\u7edf\u3002<\/p>\n

    ARP\u627f\u8f7d\u4ee5\u592a\u7f51\u5e27\u7684\u6709\u6548\u8f7d\u8377，\u662f\u4e00\u4e2a\u4ece\u5c5e\u7684\u7b2c2\u5c42\u534f\u8bae\u3002<\/p>\n

    \n

    ARP\u4f7f\u7528\u7f13\u5b58\u548c\u5e7f\u64ad\u6765\u6267\u884c\u5176\u64cd\u4f5c\u3002<\/p>\n

    \u7b2c\u4e00\u6b65，\u662f\u68c0\u67e5\u672c\u5730ARP\u7f13\u5b58\u3002\u5982\u679c\u6240\u9700\u4fe1\u606f\u5df2\u5b58\u5728\u4e8eARP \u7f13\u5b58\u4e2d，\u5219\u4f7f\u7528\u5b83\u3002<\/p>\n

    \u5982\u679cARP\u7f13\u5b58\u4e0d\u5305\u542b\u5fc5\u8981\u4fe1\u606f，\u5219\u53d1\u9001\u5e7f\u64ad\u5f62\u5f0f\u7684ARP\u8bf7\u6c42\u3002<\/p>\n

    \u5982\u679c\u67e5\u8be2\u5730\u5740\u7684\u6240\u6709\u8005\u4f4d\u4e8e\u672c\u5730\u5b50\u7f51，\u5219\u53ef\u4f7f\u7528ARP\u5e94\u7b54\u6216\u54cd\u5e94\u4f30\u606f\u8fdb\u884c\u54cd\u5e94\u3002<\/p>\n

    \u5982\u679c\u4e0d\u662f，\u7cfb\u7edf\u5c06\u9ed8\u8ba4\u4f7f\u7528\u5176\u9ed8\u8ba4\u7f51\u5173\u7684MAC\u5730\u5740\u6765\u8f6c\u53d1\u3002<\/p>\n

    \u7136\u540e，\u9ed8\u8ba4\u7f51\u5173（\u6216\u8005\u8def\u5dfe\u5668）\u5c06\u9700\u8981\u6267\u884c\u81ea\u5df1\u7684ARP\u8fc7\u7a0b\u3002<\/p>\n

    \u653b\u51fb\u8005\u82e5\u5728ARP\u7f13\u5b58\u4e2d\u63d2\u5165\u865a\u5047\u4fe1\u606f，\u53ef\u5bfc\u81f4\u7f13\u5b58\u4e2d\u6bd2，\u8be5\u6280\u672f\u88ab\u79f0\u4e3aARP<\/span>\u6ee5\u7528<\/span>\u3002<\/p>\n

    \n

    \u2022 ARP\u7f13\u5b58\u4e2d\u6bd2<\/span>\u6216ARP<\/span>\u6b3a\u9a97<\/span>\u662f\u7531\u4ee5\u4f2a\u9020\u7684\u56de\u590d\u8fdb\u884c\u54cd\u5e94\u7684\u653b\u51fb\u8005\u5f15\u8d77\u7684\u3002<\/p>\n

    \u6bcf\u6b21\u6536\u5230ARP\u56de\u590d\u65f6，ARP\u7f13\u5b58\u90fd\u4f1a\u66f4\u65b0\u3002<\/p>\n

    ARP\u7f13\u5b58\u7684\u52a8\u6001\u5185\u5bb9，\u65e0\u8bba\u662f\u4e2d\u6bd2\u7684\u8fd8\u662f\u5408\u6cd5\u7684，\u90fd\u5c06\u4fdd\u7559\u5728\u7f13\u5b58\u4e2d，\u76f4\u5230\u51fa\u73b0\u8d85\u65f6（\u901a\u5e38\u4e0d\u523010\u5206\u949f）\u3002<\/p>\n

    \u4e00\u65e6IP\u5730\u5740\u5230MAC\u5730\u5740\u7684\u6620\u5c04\u5728\u7f13\u5b58\u4e2d\u88ab\u6e05\u9664，\u653b\u51fb\u8005\u5c31\u6709\u673a\u4f1a\u5728\u5ba2\u6237\u7aef\u91cd\u65b0\u6267\u884cARP\u5e7f\u64ad\u67e5\u8be2\u65f6\u6bd2\u5bb3ARP\u7f13\u5b58\u3002<\/p>\n

    \n

    \u2022 \u53e6\u4e00\u79cd\u5f62\u5f0f\u7684ARP\u4e2d\u6bd2\u4f7f\u7528\u65e0\u76ee\u7684\u7684<\/span>\u6216\u672a\u7ecf\u8bf7\u6c42\u7684ARP\u56de\u590d<\/span>\u3002<\/p>\n

    \u5f53\u7cfb\u7edf\u5728\u6ca1\u6709ARP\u67e5\u8be2\u63d0\u793a\u7684\u60c5\u51b5\u4e0b\u5ba3\u5e03MAC\u5730\u5740\u5230IP\u5730\u5740\u7684\u6620\u5c04\u65f6，\u5c31\u4f1a\u53d1\u751f\u8fd9\u79cd\u60c5\u51b5\u3002<\/p>\n

    \u65e0\u76ee\u7684\u7684ARP\u5e7f\u64ad\u53ef\u4ee5\u4f5c\u4e3a\u8282\u70b9\u5b58\u5728\u7684\u901a\u77e5\u53d1\u9001，\u4ee5\u66f4\u65b0\u7531\u4e8eIP\u5730\u5740\u6216MAC\u5730\u5740\u53d8\u5316\u800c\u4ea7\u751f\u7684ARP\u6620\u5c04，<\/p>\n

    \u53e6\u5916，\u5f53\u5171\u4eabIP\u5730\u5740\u4e14\u53ef\u80fd\u5171\u4eab\u76f8\u540cMAC\u5730\u5740\u7684\u5197\u4f59\u8bbe\u5907\u88ab\u4f7f\u7528\u65f6，\u5b9a\u671f\u53d1\u9001\u65e0\u76ee\u7684\u7684ARP\u901a\u77e5\u6709\u52a9\u4e8e\u786e\u4fdd\u53ef\u9760\u7684\u6545\u969c\u5207\u6362\u3002<\/p>\n

    \n

    \u2022 \u7b2c\u4e09\u79cd\u5f62\u5f0f\u7684ARP\u7f13\u5b58\u4e2d\u6bd2\u662f\u9759\u6001ARP\u6761\u76ee\u7684\u521b\u5efa<\/span>\u3002<\/p>\n

    \u8fd9\u662f\u901a\u8fc7ARP\u547d\u4ee4\u5b8c\u6210\u7684，\u5fc5\u987b\u5728\u672c\u5730\u5b8c\u6210\u3002<\/p>\n

    \u4e0d\u5e78\u7684\u662f，\u8fd9\u5f88\u5bb9\u6613\u901a\u8fc7\u5728\u5ba2\u6237\u7aef\u4e0a\u6267\u884c\u6076\u610f\u811a\u672c\u6765\u5b9e\u73b0\u3002<\/p>\n

    \u4f46\u662f，\u9759\u6001ARP\u6761\u76ee\u5728\u91cd\u65b0\u542f\u52a8\u65f6\u4e0d\u4f1a\u7559\u5b58\u3002<\/p>\n

    \n

    \u9632\u5fa1\u65b9\u6cd5：<\/p>\n

    \u2022 \u9488\u5bf9\u57fa\u4e8eARP\u7684\u653b\u51fb\u7684\u6700\u4f73\u9632\u5fa1\u662f：\u5b9e\u65bd\u4ea4\u6362\u673a\u4e0a\u7684\u7aef\u53e3\u5b89\u5168<\/span>\u3002<\/p>\n

    \u4ea4\u6362\u673a\u7aef\u53e3\u5b89\u5168\u63aa\u65bd\u53ef\u4ee5\u7981\u6b62\u4e0e\u672a\u77e5\u3001\u672a\u7ecf\u6388\u6743\u7684\u6076\u610f\u8bbe\u5907\u4e4b\u95f4\u7684\u901a\u4fe1，\u5e76\u4e14\u53ef\u4ee5\u786e\u5b9a\u54ea\u4e2a\u7cfb\u7edf\u6b63\u5728\u54cd\u5e94\u6240\u6709ARP\u67e5\u8be2，\u5e76\u963b\u6b62\u6765\u81ea\u8fdd\u89c4\u7cfb\u7edf\u7684ARP\u56de\u590d\u3002<\/p>\n

    \u672c\u5730\u6216\u8f6f\u4ef6\u9632\u706b\u5899\u3001\u4e3b\u673a\u5165\u4fb5\u68c0\u6d4b\u548c\u9632\u5fa1\u7cfb\u7edf(HIDPS)\u6216\u7279\u5b9a\u7aef\u70b9\u5b89\u5168\u4ea7\u54c1\u4e5f\u53ef\u7528\u4e8e\u963b\u6b62\u672a\u8bf7\u6c42\u7684ARP\u56de\u590d\u6216\u901a\u544a\u3002<\/p>\n

    \u68c0\u6d4bARP\u4e2d\u6bd2\u7684\u4e00\u4e2a\u6d41\u884c\u5de5\u5177\u662farpwatch\u3002<\/p>\n

    \n

    \u2022 \u53e6\u4e00\u79cd\u9632\u5fa1\u63aa\u65bd\u662f\u5efa\u7acb\u9759\u6001ARP\u6761\u76ee<\/span>\u3002\u8fd9\u53ef\u4ee5\u7528\u4f5c\u653b\u51fb\/\u6ee5\u7528，\u4e5f\u53ef\u4ee5\u7528\u4f5c\u9632\u5fa1\u3002<\/p>\n

    \u4f46\u4e0d\u63a8\u8350\u8fd9\u6837\u505a，\u56e0\u4e3a\u5b83\u6d88\u9664\u4e86\u7cfb\u7edf\u9002\u5e94\u4e0d\u65ad\u53d8\u5316\u7684\u7f51\u7edc\u6761\u4ef6\u7684\u7075\u6d3b\u6027，\u4f8b\u5982\u5728\u8bbe\u5907\u8fdb\u5165\u548c\u79bb\u5f00\u7f51\u7edc\u65f6\u81ea\u52a8\u66f4\u65b0\u3002<\/p>\n

    \u4e00\u65e6\u5b9a\u4e49\u4e86\u9759\u6001ARP \u6761\u76ee，\u5b83\u5c06\u662f\u201c\u6c38\u4e45\u7684\u201c，\u56e0\u4e3a\u5b83\u4e0d\u4f1a\u88ab\u4efb\u4f55ARP\u56de\u590d\u8986\u76d6，\u4f46\u5b83\u4e0d\u4f1a\u5728\u91cd\u65b0\u542f\u52a8\u65f6\u4fdd\u7559（\u8be5\u529f\u80fd\u88ab\u79f0\u4e3a\u6301\u4e45\u6027）\u3002<\/p>\n

    \u6bcf\u5f53\u7cfb\u7edf\u91cd\u65b0\u542f\u52a8\u65f6，\u90fd\u9700\u8981\u5728\u6bcf\u4e2a\u7cfb\u7edf\u4e0a\u7cbe\u5fc3\u7f16\u5236\u5f15\u5bfc\u6216\u767b\u5f55\u811a\u672c，\u4ee5\u91cd\u65b0\u521b\u5efa\u9759\u6001\u6761\u76ee\u3002<\/p>\n

    \n

    11.9 \u5b89\u5168\u901a\u4fe1\u534f\u8bae<\/p>\n

    \u4e3a\u7279\u5b9a\u5e94\u7528\u7a0b\u5e8f\u7684\u901a\u4fe1\u901a\u9053\u63d0\u4f9b\u5b89\u5168\u670d\u52a1\u7684\u534f\u8bae\u88ab\u79f0\u4e3a\u5b89\u5168\u901a\u4fe1\u534f\u8bae\u3002\u4f8b\u5b50\u5305\u62ec：<\/p>\n

    \n

    \u2022 IPsec（Internet Protocol Security，IPsec）<\/span>\u57fa\u4e8eIP\u534f\u8bae，\u4f7f\u7528\u516c\u94a5\u52a0\u5bc6\u7cfb\u7edf\u6765\u63d0\u4f9b\u52a0\u5bc6\u3001\u8bbf\u95ee\u63a7\u5236\u3001\u4e0d\u53ef\u5426\u8ba4\u6027\u548c\u6d88\u606f\u9a8c\u8bc1\u3002<\/p>\n

    IPsec\u4e3b\u8981\u7528\u4e8e\u865a\u62df\u4e13\u7528\u7f51\u7edc(VPN)，\u56e0\u6b64IPsec\u53ef\u4ee5\u5728\u4f20\u8f93\u6216\u96a7\u9053\u6a21\u5f0f\u4e0b\u8fd0\u884c\u3002<\/p>\n

    IPsec\u662fIP\u5b89\u5168\u6269\u5c55\u7684\u6807\u51c6，\u88ab\u7528\u4f5cIPv4\u7684\u9644\u52a0\u7ec4\u4ef6，\u5e76\u96c6\u6210\u5230IPv6\u4e2d\u3002<\/p>\n

    \u7b2c12\u7ae0\u5c06\u8fdb\u4e00\u6b65\u8ba8\u8bbaIPsec\u3002<\/p>\n

    \n

    \u2022 Kerberos<\/span> \u4e3a\u7528\u6237\u63d0\u4f9b\u5355\u70b9\u767b\u5f55(SSO)\u89e3\u51b3\u65b9\u6848，\u5e76\u4e3a\u767b\u5f55\u51ed\u8bc1\u63d0\u4f9b\u4fdd\u62a4\u3002<\/p>\n

    Kerberos\u7684\u6700\u65b0\u5b9e\u73b0\u662f\u4f7f\u7528\u6df7\u5408\u52a0\u5bc6\u6765\u63d0\u4f9b\u53ef\u9760\u7684\u8eab\u4efd\u8ba4\u8bc1\u4fdd\u62a4\u3002<\/p>\n

    Kerberos\u5c06\u5728\u7b2c14\u7ae0\u4e2d\u8fdb\u4e00\u6b65\u8ba8\u8bba\u3002<\/p>\n

    \n

    \u2022 SSH（Secure Shell，SSH）<\/span>\u662f\u7aef\u5230\u7aef\u52a0\u5bc6\u6280\u672f\u7684\u4e00\u4e2a\u5f88\u597d\u7684\u4f8b\u5b50\u3002<\/p>\n

    \u8fd9\u79cd\u5b89\u5168\u5de5\u5177\u53ef\u7528\u4e8e\u52a0\u5bc6\u8bb8\u591a\u660e\u6587\u5e94\u7528\u7a0b\u5e8f（\u5982rep\u3001rlogin\u548crexec)，\u6216\u7528\u4f5c\u534f\u8bae\u52a0\u5bc6（\u5982SFTP)，\u4e5f\u53ef\u7528\u4f5c\u4f20\u8f93\u6a21\u5f0fVPN（\u5373\u4ec5\u9650\u4e3b\u673a\u5230\u4e3b\u673a\u94fe\u8def\u52a0\u5bc6）\u3002<\/p>\n

    SSH\u5c06\u5728\u7b2c12\u7ae0\u4e2d\u8fdb\u4e00\u6b65\u8ba8\u8bba\u3002<\/p>\n

    \n

    \u2022 \u4fe1\u4ee4\u534f\u8bae <\/span>\u662f\u4e00\u79cd\u52a0\u5bc6\u534f\u8bae，\u4e3a\u8bed\u97f3\u901a\u4fe1\u3001\u89c6\u987b\u4f1a\u8bae\u548c\u6587\u672c\u6d88\u606f\u670d\u52a1\u63d0\u4f9b\u7aef\u5230\u7aef\u52a0\u5bc6\u3002<\/p>\n

    \u4fe1\u4ee4\u534f\u8bae\u662f\u975e\u8054\u90a6(nonfederated)\u534f\u8bae，\u662f\u540d\u4e3a\u201cSignal" \u7684\u5373\u65f6\u901a\u4fe1APP\u4e2d\u7684\u6838\u5fc3\u5143\u7d20\u3002<\/p>\n

    \n

    \u2022 \u5b89\u5168\u8fdc\u7a0b\u8fc7\u7a0b\u8c03\u7528（Secure Remote Procedure Call，S-RPC）<\/span>\u662f\u7528\u4e8e\u8de8\u7f51\u7edc\u670d\u52a1\u901a\u4fe1\u7684\u8eab\u4efd\u8ba4\u8bc1\u670d\u52a1，\u65e8\u5728\u9632\u6b62\u5728\u8fdc\u7a0b\u7cfb\u7edf\u4e0a\u672a\u7ecf\u6388\u6743\u6267\u884c\u4ee3\u7801\u3002<\/p>\n

    \n

    \u2022 \u4f20\u8f93\u5c42\u5b89\u5168（Transport Layer Security，TLS）<\/span>\u662f\u4e00\u79cd\u5728OSI\u7b2c4\u5c42\u8fd0\u884c\u7684\u52a0\u5bc6\u534f\u8bae（\u52a0\u5bc6TCP\u901a\u4fe1\u7684\u6709\u6548\u8f7d\u8377）\u3002<\/p>\n

    \u5b83\u4e3b\u8981\u7528\u4e8e\u52a0\u5bc6HTTPS\u7b49Web\u901a\u4fe1，\u4e5f\u53ef\u52a0\u5bc6\u5e94\u7528\u5c42\u534f\u8bae\u3002<\/p>\n

    \u4f20\u8f93\u5c42\u5b89\u5168\u53d6\u4ee3\u4e86\u5b89\u5168\u5957\u63a5\u5b57\u5c42(SSL)，\u540e\u8005\u57282015\u5e74\u88ab\u6b63\u5f0f\u5f03\u7528\u3002<\/p>\n

    \n

    TLS\u7684\u7279\u70b9\u5305\u62ec\u5982\u4e0b\u51e0\u70b9\u3002<\/p>\n

    \u2022 \u652f\u6301\u8de8\u4e0d\u5b89\u5168\u7f51\u7edc\u7684\u5b89\u5168\u5ba2\u6237\u7aef-\u670d\u52a1\u5668\u901a\u4fe1，\u540c\u65f6\u9632\u6b62\u7be1\u6539\u3001\u6b3a\u9a97\u548c\u7a83\u542c\u3002<\/p>\n

    \u2022 \u652f\u6301\u5355\u5411\u8eab\u4efd\u8ba4\u8bc1\u3002<\/p>\n

    \u2022 \u652f\u6301\u4f7f\u7528\u6570\u5b57\u8bc1\u4e66\u8fdb\u884c\u53cc\u5411\u8eab\u4efd\u8ba4\u8bc1\u3002<\/p>\n

    \u2022 \u901a\u5e38\u5e94\u7528\u4e8eTCP\u5305\u7684\u57fa\u672c\u6709\u6548\u8f7d\u8377，\u4f7f\u5176\u80fd\u5c01\u88c5\u66f4\u9ad8\u5c42\u534f\u8bae\u6709\u6548\u8f7d\u8377\u3002<\/p>\n

    \u2022 \u53ef\u7528\u4e8e\u52a0\u5bc6\u7528\u6237\u6570\u636e\u62a5\u534f\u8bae(UDP)\u548c\u4f1a\u8bdd\u521d\u59cb\u534f\u8bae(SIP)\u8fde\u63a5\u3002(SIP\u662f\u4e0eIP\u8bed\u97f3\u76f8\u5173\u7684\u534f\u8bae\u3002）<\/p>\n

    \n

    11.10 \u591a\u5c42\u534f\u8bae\u7684\u542b\u4e49<\/p>\n

    TCP\/IP\u662f\u4e00\u79cd\u591a\u5c42\u534f\u8bae\u3002TCP\/IP\u4ece\u5176\u591a\u5c42\u8bbe\u8ba1\u4e2d\u83b7\u5f97\u4e86\u82e5\u5e72\u597d\u5904，\u8fd9\u4e0e\u5b83\u7684\u5c01\u88c5\u673a\u5236\u6709\u5173\u3002<\/p>\n

    \u4f8b\u5982，\u5f53\u901a\u8fc7\u5178\u578b\u7684\u7f51\u7edc\u8fde\u63a5\u5728Web\u670d\u52a1\u5668\u548cWeb\u6d4f\u89c8\u5668\u4e4b\u95f4\u901a\u4fe1\u65f6，HTTP\u4f1a\u88ab\u5c01\u88c5\u5728TCP\u4e2d，\u540e\u8005\u88ab\u5c01\u88c5\u5728IP\u4e2d，\u800cIP\u88ab\u5c01\u88c5\u5728\u4ee5\u592a\u7f51\u4e2d\u3002<\/p>\n

    \u8fd9\u53ef\u8868\u8ff0\u5982\u4e0b：<\/p>\n

    [Ethernet[IP [TCP [HTTP [Payload]]]]]<\/p>\n

    \n

    \u4f46\u8fd9\u4e0d\u662fTCP\/IP\u5c01\u88c5\u652f\u6301\u7684\u7a0b\u5ea6，\u8fd8\u53ef\u6dfb\u52a0\u989d\u5916\u7684\u5c01\u88c5\u5c42\u3002<\/p>\n

    \u4f8b\u5982，\u5982\u679c\u5411\u901a\u4fe1\u6dfb\u52a0TLS\u52a0\u5bc6，\u5c06\u5728HTTP\u548cTCP\u4e4b\u95f4\u63d2\u5165\u65b0\u7684\u5c01\u88c5（\u4ece\u6280\u672f\u4e0a\u8bb2，\u8fd9\u4f1a\u5bfc\u81f4HTTPS，\u5373HTTP\u7684TLS\u52a0\u5bc6\u5f62\u5f0f）：<\/p>\n

    [Ethernet [IP [TCP [HTTP [Payload]]]]]<\/p>\n

    \n

    \u8fd9\u53cd\u8fc7\u6765\u53ef\u901a\u8fc7\u7f51\u7edc\u5c42\u52a0\u5bc6（\u5982IPsec)\u8fdb\u4e00\u6b65\u5c01\u88c5：<\/p>\n

    [Ethernet [IPsec [IP [TCP [TLS [HTTP [Payload]]]]]]]<\/p>\n

    \n

    \u8fd9\u662fVPN\u7684\u4e00\u4e2a\u793a\u4f8b\u3002<\/p>\n

    VPN\u5c06\u4e00\u4e2a\u534f\u8bae\u5c01\u88c5\u6216\u96a7\u7a7f\u5230\u53e6\u4e00\u4e2a\u534f\u8bae\u4e2d\u3002<\/p>\n

    \u901a\u5e38，\u5c01\u88c5\u534f\u8bae\u5bf9\u539f\u59cb\u534f\u8bae\u8fdb\u884c\u52a0\u5bc6\u3002\u6709\u5173VPN\u7684\u66f4\u591a\u4fe1\u606f，\u8bf7\u53c2\u9605\u7b2c12\u7ae0\u3002<\/p>\n

    \n

    \u4f46\u5c01\u88c5\u5e76\u4e0d\u603b\u662f\u7528\u4e8e\u826f\u6027\u76ee\u7684\u3002<\/p>\n

    \u6709\u8bb8\u591a\u9690\u853d\u901a\u9053\u901a\u4fe1\u673a\u5236\u4f7f\u7528\u5c01\u88c5\u6765\u9690\u85cf\u6216\u9694\u79bb\u53e6\u4e00\u4e2a\u6388\u6743\u534f\u8bae\u5185\u7684\u672a\u6388\u6743\u534f\u8bae\u3002<\/p>\n

    \u4f8b\u5982，\u5982\u679c\u7f51\u7edc\u963b\u6b62\u4f7f\u7528FTP\u4f46\u5141\u8bb8\u4f7f\u7528HTTP, \u5219\u53ef\u4f7f\u7528HTTP\u96a7\u9053\u7b49\u5de5\u5177\u6765\u7ed5\u8fc7\u6b64\u9650\u5236\u3002<\/p>\n

    \u8fd9\u53ef\u80fd\u5bfc\u81f4\u5982\u4e0b\u7684\u5c01\u88c5\u7ed3\u6784：<\/p>\n

    [Ethernet [IP [TCP [HTTP [FTP [Payload]]]]]]<\/p>\n

    \n

    \u901a\u5e38，HTTP\u643a\u5e26\u81ea\u5df1\u7684\u4e0eWeb\u76f8\u5173\u7684\u6709\u6548\u8d1f\u8f7d，\u4f46\u82e5\u4f7f\u7528HTTP\u96a7\u9053\u5de5\u5177，\u6807\u51c6\u6709\u6548\u8d1f\u8f7d\u5c06\u88ab\u66ff\u4ee3\u534f\u8bae\u4ee3\u66ff\u3002<\/p>\n

    \u8fd9\u79cd\u9519\u8bef\u5c01\u88c5\u751a\u81f3\u53ef\u53d1\u751f\u5728\u534f\u8bae\u6808\u4e2d\u3002\u4f8b\u5982，ICMP\u901a\u5e38\u7528\u4e8e\u7f51\u7edc\u5065\u5eb7\u6d4b\u8bd5，\u800c\u4e0d\u7528\u4e8e\u4e00\u822c\u901a\u4fe1\u3002<\/p>\n

    \u7136\u800c，\u5229\u7528Loki\u7b49\u5b9e\u7528\u5de5\u5177，ICMP\u88ab\u8f6c\u6362\u6210\u652f\u6301TCP\u901a\u4fe1\u7684\u96a7\u9053\u534f\u8bae\u3002<\/p>\n

    Loki\u7684\u5c01\u88c5\u7ed3\u6784\u5982\u4e0b：<\/p>\n

    [Ethernet [IP [ICMP [TCP [HTTP [Payload]]]]]]<\/p>\n

    \n

    \u7531\u65e0\u9650\u5c01\u88c5\u652f\u6301\u5f15\u8d77\u7684\u53e6\u4e00\u4e2a\u503c\u5f97\u5173\u6ce8\u7684\u9886\u57df\u662f\u5728\u865a\u62df\u5c40\u57df\u7f51(VLAN)\u4e4b\u95f4\u8df3\u8dc3\u7684\u80fd\u529b\u3002<\/p>\n

    \u8bf7\u53c2\u9605\u7b2c12\u7ae0\u5173\u4e8eVLAN \u7684\u5185\u5bb9\u3002<\/p>\n

    \u591a\u5c42\u534f\u8bae\u5177\u6709\u4ee5\u4e0b\u4f18\u70b9：<\/p>\n

    \u2022\u53ef\u5728\u66f4\u9ad8\u5c42\u4f7f\u7528\u5404\u79cd\u534f\u8bae\u3002<\/p>\n

    \u2022\u52a0\u5bc6\u53ef\u5305\u542b\u5728\u5404\u4e2a\u5c42\u4e2d\u3002<\/p>\n

    \u2022\u652f\u6301\u590d\u6742\u7f51\u7edc\u7ed3\u6784\u4e2d\u7684\u7075\u6d3b\u6027\u548c\u5f39\u6027\u3002<\/p>\n

    \n

    \u591a\u5c42\u534f\u8bae\u6709\u4e00\u4e9b\u7f3a\u70b9：<\/p>\n

    \u2022\u5141\u8bb8\u9690\u853d\u901a\u9053\u3002<\/p>\n

    \u2022\u53ef\u4ee5\u7ed5\u8fc7\u8fc7\u6ee4\u5668\u3002<\/p>\n

    \u2022\u903b\u8f91\u4e0a\u5f3a\u52a0\u7684\u7f51\u6bb5\u8fb9\u754c\u53ef\u88ab\u8d85\u8d8a\u3002<\/p>\n

    \n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    DNP3<\/p>\n

    DNP3（\u5206\u5e03\u5f0f\u7f51\u7edc\u534f\u8bae3)\u4e3b\u8981\u7528\u4e8e\u7535\u529b\u548c\u6c34\u5229\u884c\u4e1a\u3002<\/p>\n

    \u5b83\u7528\u4e8e\u652f\u6301\u6570\u636e\u91c7\u96c6\u7cfb\u7edf\u548c\u7cfb\u7edf\u63a7\u5236\u8bbe\u5907\u4e4b\u95f4\u7684\u901a\u4fe1\u3002<\/p>\n

    \u8fd9\u5305\u62ec\u53d8\u7535\u7ad9\u8ba1\u7b97\u673a\u3001\u8fdc\u7a0b\u7ec8\u7aef(RTU, \u7531\u5d4c\u5165\u5f0f\u5fae\u5904\u7406\u5668\u63a7\u5236\u7684\u8bbe\u5907）\u3001\u667a\u80fd\u7535\u5b50\u8bbe\u5907(IED)\u548cSCADA\u4e3b\u7ad9（\u5373\u63a7\u5236\u4e2d\u5fc3）\u3002<\/p>\n

    DNP3\u662f\u4e00\u4e2a\u5f00\u653e\u7684\u516c\u5171\u6807\u51c6，\u5177\u6709\u591a\u5c42\u534f\u8bae，\u529f\u80fd\u4e0eTCP\/IP\u7c7b\u4f3c，\u5177\u6709\u94fe\u8def\u3001\u4f20\u8f93\u548c\u5e94\u7528\u5c42\u3002<\/p>\n

    \u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014<\/p>\n

    \n

    11.10.1 \u878d\u5408\u534f\u8bae<\/p>\n

    \u878d\u5408\u534f\u8bae\u662f\u4e13\u4e1a（\u6216\u4e13\u6709）\u534f\u8bae\u4e0e\u6807\u51c6\u534f\u8bae\u7684\u7ed3\u5408<\/span>，\u5982\u90a3\u4e9b\u6e90\u81eaTCP\/IP\u5957\u4ef6\u7684\u534f\u8bae\u3002<\/p>\n

    \u878d\u5408\u534f\u8bae\u7684\u4e3b\u8981\u597d\u5904\u662f：<\/p>\n

    \u80fd\u4f7f\u7528\u73b0\u6709\u7684TCP\/IP\u652f\u6301\u7f51\u7edc\u57fa\u7840\u8bbe\u65bd\u6765\u6258\u7ba1\u7279\u6b8a\u670d\u52a1\u6216\u4e13\u6709\u670d\u52a1，\u4e0d\u9700\u8981\u72ec\u7acb\u90e8\u7f72\u5907\u7528\u7f51\u7edc\u786c\u4ef6\u3002<\/p>\n

    \n

    \u4e0b\u9762\u63cf\u8ff0\u4e86\u878d\u5408\u534f\u8bae\u7684\u4e00\u4e9b\u5e38\u89c1\u793a\u4f8b\u3002<\/p>\n

    \u5b58\u50a8\u533a\u57df\u7f51\u7edc(Storage Area Network, SAN) <\/span><\/p>\n

    SAN\u662f\u4e00\u4e2a\u8f85\u52a9\u7f51\u7edc（\u4e0e\u57fa\u7840\u901a\u4fe1\u7f51\u7edc\u4e0d\u540c），\u7528\u4e8e\u5c06\u5404\u79cd\u5b58\u50a8\u8bbe\u5907\u6574\u5408\u3001\u7ba1\u7406\u5230\u4e00\u4e2a\u7f51\u7edc\u53ef\u8bbf\u95ee\u7684\u5b58\u50a8\u5bb9\u5668\u4e2d\u3002<\/p>\n

    SAN\u901a\u5e38\u7528\u4e8e\u589e\u5f3a\u7f51\u7edc\u5b58\u50a8\u8bbe\u5907，\u5982\u786c\u76d8\u9a71\u52a8\u5668\u3001\u786c\u76d8\u9635\u5217\u3001\u5149\u76d8\u673a\u548c\u78c1\u5e26\u5e93，\u4f7f\u5b83\u4eec\u5728\u670d\u52a1\u5668\u4e0a\u663e\u793a\u4e3a\u672c\u5730\u5b58\u50a8\u3002<\/p>\n

    SAN\u7684\u8fd0\u4f5c\u65b9\u5f0f\u662f\u5c06\u6570\u636e\u5b58\u50a8\u4fe1\u53f7\u5c01\u88c5\u6216\u805a\u5408\u5230TCP\/IP\u901a\u4fe1\u4e2d，\u4ee5\u5b9e\u73b0\u5206\u79bb\u5b58\u50a8\u548c\u63a5\u8fd1\u6027\u3002<\/p>\n

    SAN\u53ef\u80fd\u5bfc\u81f4\u5355\u70b9\u6545\u969c，\u56e0\u6b64\u9700\u8981\u8fdb\u884c\u5197\u4f59\u96c6\u6210\u4ee5\u4fdd\u8bc1\u53ef\u7528\u6027\u3002<\/p>\n

    \u5728\u4e00\u4e9b\u5b9e\u4f8b\u4e2d，SAN\u4ee5\u4e0d\u4fdd\u7559\u540c\u4e00\u6587\u4ef6\u7684\u526f\u672c，\u901a\u8fc7\u5b9e\u65bd\u91cd\u590d\u6570\u636e\u6d88\u9664\u6765\u8282\u7701\u7a7a\u95f4\u3002<\/p>\n

    \u4f46\u662f\u5982\u679c\u4fdd\u7559\u7684\u539f\u4ef6\u635f\u574f，\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u6570\u636e\u4e22\u5931\u3002<\/p>\n

    \n

    \u4ee5\u592a\u7f51\u5149\u7ea4\u901a\u9053(Fibre Channel over Ethernet, FCoE)<\/span><\/p>\n

    \u5149\u7ea4\u901a\u9053\u662f\u4e00\u79cd\u7f51\u7edc\u6570\u636e\u5b58\u50a8\u89e3\u51b3\u65b9\u6848(SAN\u6216NAS)，\u5141\u8bb8\u9ad8\u8fbe128 Gbps\u7684\u6587\u4ef6\u4f20\u8f93\u901f\u7387\u3002<\/p>\n

    \u5b83\u5728\u7b2c2\u5c42\u8fd0\u884c，\u88ab\u8bbe\u8ba1\u7528\u4e8e\u5149\u7ea4\u7535\u7f06；\u540e\u6765\u589e\u52a0\u4e86\u5bf9\u94dc\u7f06\u7684\u652f\u6301，\u4ee5\u63d0\u4f9b\u66f4\u4fbf\u5b9c\u7684\u9009\u62e9\u3002<\/p>\n

    \u5149\u7ea4\u901a\u9053\u901a\u5e38\u9700\u8981\u81ea\u5df1\u7684\u4e13\u7528\u57fa\u7840\u8bbe\u65bd（\u5355\u72ec\u7535\u7f06）\u3002\u4f46\u53ef\u4ee5\u5229\u7528FCoE\u901a\u8fc7\u73b0\u6709\u7f51\u7edc\u57fa\u7840\u67b6\u6784\u652f\u6301\u5b83\u3002<\/p>\n

    FCoE\u7528\u4e8e\u5c01\u88c5\u4ee5\u592a\u7f51\u7f51\u7edc\u4e0a\u7684\u5149\u7ea4\u901a\u9053\u901a\u4fe1\u3002\u5b83\u901a\u5e38\u9700\u898110 Gbps\u7684\u4ee5\u592a\u7f51\u6765\u652f\u6301\u5149\u7ea4\u901a\u9053\u534f\u8bae\u3002<\/p>\n

    \u5229\u7528\u8fd9\u9879\u6280\u672f，\u5149\u7ea4\u901a\u9053\u53ef\u4f5c\u4e3a\u7f51\u7edc\u5c42\u6216OSI\u7b2c3\u5c42\u534f\u8bae\u8fd0\u884c，\u5c06IP\u66ff\u6362\u4e3a\u6807\u51c6\u4ee5\u592a\u7f51\u7f51\u7edc\u7684\u6709\u6548\u8f7d\u8377\u3002<\/p>\n

    FCIP\u8fdb\u4e00\u6b65\u6269\u5c55\u4e86\u5149\u7ea4\u901a\u9053\u4fe1\u4ee4\u7684\u4f7f\u7528，\u4e0d\u518d\u9700\u8981\u6307\u5b9a\u7f51\u7edc\u901f\u5ea6\u3002\u8fd9\u7c7b\u4f3c\u4e8eVoIP\u4f20\u8f93\u5728SAN\u4e0a\u3002<\/p>\n

    \n

    \u591a\u534f\u8bae\u6807\u7b7e\u4ea4\u6362(Multiprotocol Label Switching, MPLS)<\/span><\/p>\n

    MPLS\u662f\u4e00\u79cd\u9ad8\u541e\u5410\u91cf\u7684\u9ad8\u6027\u80fd\u7f51\u7edc\u6280\u672f\u3002<\/p>\n

    \u5b83\u57fa\u4e8e\u77ed\u8def\u5f84\u6807\u7b7e（\u800c\u4e0d\u662f\u66f4\u957f\u7684\u7f51\u7edc\u5730\u5740）\u6765\u5f15\u5bfc\u7f51\u7edc\u4e0a\u7684\u6570\u636e\u3002<\/p>\n

    \u76f8\u6bd4\u4e8e\u6bd4\u4f20\u7edf\u7684\u57fa\u4e8eIP\u7684\u8def\u7531\u8fc7\u7a0b，\u8fd9\u79cd\u6280\u672f\u8282\u7701\u4e86\u5927\u91cf\u65f6\u95f4，\u4f46\u53ef\u80fd\u975e\u5e38\u590d\u6742\u3002<\/p>\n

    \u6b64\u5916，MPLS\u65e8\u5728\u901a\u8fc7\u5c01\u88c5\u5904\u7406\u5404\u79cd\u534f\u8bae\u3002\u56e0\u6b64，\u7f51\u7edc\u4e0d\u4ec5\u9650\u4e8eTCP\/IP\u548c\u517c\u5bb9\u7684\u534f\u8bae\u3002<\/p>\n

    \u8fd9\u4f7f\u4eba\u4eec\u80fd\u591f\u4f7f\u7528\u8bb8\u591a\u5176\u4ed6\u7f51\u7edc\u6280\u672f，\u5305\u62ecTl\/El\u3001ATM\u3001\u5e27\u4e2d\u7ee7\u3001SONET\u548cDSL\u3002<\/p>\n

    \n

    \u4e92\u8054\u7f51\u5c0f\u578b\u8ba1\u7b97\u673a\u7cfb\u7edf\u63a5\u53e3(Internet Small Computer System Interface, iSCSI)<\/span><\/p>\n

    iSCSI\u662f\u4e00\u79cd\u57fa\u4e8elP\u7684\u7f51\u7edc\u5b58\u50a8\u6807\u51c6，\u8fd0\u884c\u5728\u7b2c3\u5c42\u3002<\/p>\n

    \u5229\u7528\u6b64\u6280\u672f，\u53ef\u901a\u8fc7LAN\u3001WAN\u6216\u516c\u5171\u4e92\u8054\u7f51\u8fde\u63a5\u542f\u7528\u4e0e\u4f4d\u7f6e\u65e0\u5173\u7684\u6587\u4ef6\u5b58\u50a8\u3001\u4f20\u8f93\u548c\u68c0\u7d22\u3002<\/p>\n

    iSCSI\u901a\u5e38\u88ab\u89c6\u4e3a\u5149\u7ea4\u901a\u9053\u7684\u4f4e\u6210\u672c\u66ff\u4ee3\u65b9\u6848\u3002<\/p>\n

    \n

    \u5176\u4ed6\u53ef\u80fd\u88ab\u89c6\u4e3a\u878d\u5408\u6280\u672f\u793a\u4f8b\u7684\u6982\u5ff5\u5305\u62ec：<\/p>\n

    VPN\u3001SDN\u3001\u4e91\u3001\u865a\u62df\u5316\u3001SOA\u3001\u5fae\u670d\u52a1(microservices)\u3001\u57fa\u7840\u8bbe\u65bd\u5373\u4ee3\u7801(IaC)\u548c\u65e0\u670d\u52a1\u5668\u67b6\u6784(serverless architecture)\u3002<\/p>\n

    \n

    11.10.2 \u7f51\u7edc\u7535\u8bdd(Voice over IP, VoIP)<\/p>\n

    \u7f51\u7edc\u7535\u8bdd\u662f\u4e00\u79cd\u96a7\u9053\u673a\u5236，\u5b83\u5c06\u97f3\u9891\u3001\u89c6\u9891\u548c\u5176\u4ed6\u6570\u636e\u5c01\u88c5\u5230IP\u6570\u636e\u5305\u4e2d，\u4ee5\u652f\u6301\u8bed\u97f3\u547c\u53eb\u548c\u591a\u5a92\u4f53\u534f\u4f5c\u3002<\/p>\n

    VoIP\u5df2\u7ecf\u6210\u4e3a\u5168\u4e16\u754c\u516c\u53f8\u548c\u4e2a\u4eba\u7684\u4e00\u79cd\u6d41\u884c\u4e14\u5ec9\u4ef7\u7684\u7535\u8bdd\u89e3\u51b3\u65b9\u6848\u3002<\/p>\n

    VoIP\u6709\u53ef\u80fd\u53d6\u4ee3PSTN, \u56e0\u4e3a\u5b83\u901a\u5e38\u66f4\u4fbf\u5b9c，\u5e76\u63d0\u4f9b\u66f4\u591a\u9009\u62e9\u548c\u529f\u80fd\u3002<\/p>\n

    VoIP\u53ef\u7528\u4f5c\u8ba1\u7b97\u673a\u7f51\u7edc\u548c\u79fb\u52a8\u8bbe\u5907\u4e0a\u7684\u76f4\u63a5\u7535\u8bdd\u66ff\u4ee3\u54c1\u3002<\/p>\n

    VoIP\u88ab\u8ba4\u4e3a\u662f\u4e00\u79cd\u9644\u5408\u534f\u8bae，\u56e0\u4e3a\u5b83\u5c06\u97f3\u9891（\u548c\u89c6\u9891）\u5c01\u88c5\u6280\u672f（\u4f5c\u4e3a\u5e94\u7528\u5c42\u534f\u8bae\u8fd0\u884c）\u4e0e\u5df2\u5efa\u7acb\u7684TCP\/IP\u591a\u5c42\u534f\u8bae\u6808\u76f8\u7ed3\u5408\u3002<\/p>\n

    \n

    VoIP\u53ef\u7528\u4e8e\u5546\u4e1a\u548c\u5f00\u6e90\u9879\u76ee\u3002<\/p>\n

    \u4e00\u4e9bVoIP\u89e3\u51b3\u65b9\u6848\u9700\u8981\u4e13\u95e8\u7684\u786c\u4ef6\u6765\u53d6\u4ee3\u4f20\u7edf\u7684\u7535\u8bdd\u624b\u673a\/\u57fa\u7ad9，\u6216\u8005\u5141\u8bb8\u5b83\u4eec\u8fde\u63a5\u5230VoIP\u7cfb\u7edf\u5e76\u5728VoIP\u7cfb\u7edf\u4e0a\u8fd0\u884c\u3002<\/p>\n

    \u67d0\u4e9bVoIP\u89e3\u51b3\u65b9\u6848\u4ec5\u9650\u4e8e\u8f6f\u4ef6，\u4f8b\u5982Skype, \u5e76\u5141\u8bb8\u7528\u6237\u4f7f\u7528\u73b0\u6709\u7684\u626c\u58f0\u5668\u3001\u9ea6\u514b\u98ce\u6216\u8033\u673a\u53d6\u4ee3\u4f20\u7edf\u7684\u7535\u8bdd\u542c\u7b52\u3002<\/p>\n

    \u5176\u4ed6\u7684\u57fa\u4e8e\u786c\u4ef6，\u4f8b\u5982magicJack\u5141\u8bb8\u4f7f\u7528\u63d2\u5165USB\u9002\u914d\u5668\u7684\u73b0\u6709PSTN\u7535\u8bdd\u8bbe\u5907\u6765\u5229\u7528\u4e92\u8054\u7f51\u4e0a\u7684VoIP \u3002<\/p>\n

    \u5546\u7528VoIP\u8bbe\u5907\u7684\u5916\u89c2\u548c\u529f\u80fd\u4e0e\u4f20\u7edfPSTN\u8bbe\u5907\u975e\u5e38\u76f8\u4f3c，\u4f46\u53ea\u662f\u7528VoIP\u8fde\u63a5\u53d6\u4ee3\u4ee5\u524d\u7684\u666e\u901a\u8001\u5f0f\u7535\u8bdd\u670d\u52a1(POTS)\u7ebf\u8def\u3002<\/p>\n

    \u901a\u5e38，VoIP\u5230VoIP\u547c\u53eb\u662f\u514d\u8d39\u7684（\u5047\u8bbe\u53cc\u65b9\u4f7f\u7528\u76f8\u540c\u6216\u517c\u5bb9\u7684VoIP\u6280\u672f），\u800cVoIP\u5230\u4f20\u7edf\u7535\u8bdd\u6216\u624b\u673a\u7684\u547c\u53eb\u4e00\u822c\u6309\u5206\u949f\u6536\u8d39\u3002<\/p>\n

    \n

    \u9ed1\u5ba2\u53ef\u4ee5\u5bf9VoIP\u89e3\u51b3\u65b9\u6848\u53d1\u8d77\u591a\u79cd\u6f5c\u5728\u653b\u51fb\u3002<\/p>\n

    \u2022\u8bb8\u591aVoIP\u5de5\u5177\u90fd\u53ef\u4ee5\u8f7b\u6613\u7528\u6765\u4f2a\u9020\u6765\u7535\u663e\u793a，\u56e0\u6b64\u9ed1\u5ba2\u53ef\u4ee5\u6267\u884cvishing(VoIP\u7f51\u7edc\u9493\u9c7c）\u653b\u51fb\u6216\u8bed\u97f3\u5783\u573e\u90ae\u4ef6(SPIT)\u653b\u51fb\u3002<\/p>\n

    \u2022\u547c\u53eb\u7ba1\u7406\u5668\u7cfb\u7edf\u548cVoIP\u7535\u8bdd\u672c\u8eab\u53ef\u80fd\u5bb9\u6613\u53d7\u5230\u4e3b\u673a\u64cd\u4f5c\u7cfb\u7edf\u653b\u51fb\u548cDoS\u653b\u51fb\u3002<\/p>\n

    \u5982\u679c\u8bbe\u5907\u6216\u8f6f\u4ef6\u7684\u4e3b\u673a\u64cd\u4f5c\u7cfb\u7edf\u6216\u56fa\u4ef6\u5b58\u5728\u6f0f\u6d1e，\u5219\u98ce\u9669\u4f1a\u589e\u52a0\u3002<\/p>\n

    \u2022\u653b\u51fb\u8005\u53ef\u80fd\u901a\u8fc7\u4f2a\u9020\u547c\u53eb\u7ba1\u7406\u5668\u6216\u7aef\u70b9\u8fde\u63a5\u534f\u5546\u6216\u54cd\u5e94\u6d88\u606f\u6765\u6267\u884cMITM\/\u8def\u5f84\u653b\u51fb\u3002<\/p>\n

    \u2022\u6839\u636e\u90e8\u7f72\u60c5\u51b5，\u5982\u679c\u5728\u4e0e\u684c\u9762\u548c\u670d\u52a1\u5668\u7cfb\u7edf\u76f8\u540c\u7684\u4ea4\u6362\u673a\u4e0a\u90e8\u7f72VoIP\u7535\u8bdd，\u4e5f\u5b58\u5728\u76f8\u5173\u98ce\u9669\u3002<\/p>\n

    \u8fd9\u53ef\u80fd\u5141\u8bb8802.1X\u8eab\u4efd\u8ba4\u8bc1\u4f2a\u9020\u4ee5\u53caVLAN\u548cVoIP\u8df3\u8f6c（\u5373\u8de8\u8d8a\u5df1\u9a8c\u8bc1\u901a\u9053\u8df3\u8f6c）\u3002<\/p>\n

    \u2022\u7531\u4e8eVoIP\u6d41\u91cf\u662f\u672a\u52a0\u5bc6\u7f51\u7edc\u6d41\u91cf，\u53ef\u901a\u8fc7\u89e3\u7801VoIP\u6d41\u91cf\u6765\u76d1\u542cVoIP\u901a\u4fe1\u3002<\/p>\n

    \n

    \u5b89\u5168\u5b9e\u65f6\u4f20\u8f93\u534f\u8bae\u6216\u5b89\u5168RTP(SRTP，<\/span>security Real-time Transport Protocol)<\/span>，<\/span>\u662f\u5bf9VoIP\u901a\u4fe1\u4e2d\u4f7f\u7528\u7684\u5b9e\u65f6\u4f20\u8f93\u534f\u8bae(RTP)\u7684\u5b89\u5168\u6539\u8fdb\u3002<\/p>\n

    SRTP\u65e8\u5728\u901a\u8fc7\u5f3a\u52a0\u5bc6\u548c\u53ef\u9760\u7684\u8eab\u4efd\u8ba4\u8bc1，\u5c06\u62d2\u7edd\u670d\u52a1\u3001\u8def\u5f84\u653b\u51fb\u548c\u5176\u4ed6VoIP\u653b\u51fb\u7684\u98ce\u9669\u964d\u81f3\u6700\u4f4e\u3002<\/p>\n

    RTP\u6216SRTP\u5728\u4f1a\u8bdd\u521d\u59cb\u534f\u8bae(SIP)\u5efa\u7acb\u7aef\u70b9\u4e4b\u95f4\u7684\u901a\u4fe1\u94fe\u8def\u540e\u63a5\u7ba1\u3002<\/p>\n

    \n

    11.10.3 \u8f6f\u4ef6\u5b9a\u4e49\u7f51\u7edc(software-defined networking, SDN)<\/p>\n

    \u8f6f\u4ef6\u5b9a\u4e49\u7f51\u7edc\u662f\u4e00\u79cd\u72ec\u7279\u7684\u7f51\u7edc\u64cd\u4f5c\u3001\u8bbe\u8ba1\u548c\u7ba1\u7406\u65b9\u6cd5\u3002<\/p>\n

    \u8be5\u6982\u5ff5\u57fa\u4e8e\u4ee5\u4e0b\u7406\u8bba：<\/p>\n

    \u4f20\u7edf\u7f51\u7edc\u4e0e\u8bbe\u5907（\u5373\u8def\u7531\u5668\u548c\u4ea4\u6362\u673a）\u4e0a\u914d\u7f6e\u7684\u590d\u6742\u6027\u7ecf\u5e38\u8feb\u4f7f\u7ec4\u7ec7\u575a\u5f85\u4f7f\u7528\u5355\u4e00\u8bbe\u5907\u4f9b\u5e94\u5546，\u56e0\u800c\u9650\u5236\u4e86\u7f51\u7edc\u7684\u7075\u6d3b\u6027，\u4f7f\u5176\u96be\u4ee5\u9002\u5e94\u4e0d\u65ad\u53d8\u5316\u7684\u7269\u7406\u548c\u5546\u4e1a\u6761\u4ef6，\u4e14\u96be\u4ee5\u4f18\u5316\u8d2d\u4e70\u65b0\u8bbe\u5907\u7684\u6210\u672c\u3002<\/p>\n

    \u65e8\u5728\u5c06\u57fa\u7840\u8bbe\u65bd\u5c42（\u4ea6\u79f0\u6570\u636e\u5e73\u9762\u548c\u8f6c\u53d1\u5e73\u9762\u2014\u2014\u786c\u4ef6\u548c\u57fa\u4e8e\u786c\u4ef6\u7684\u8bbe\u7f6e）\u4e0e\u63a7\u5236\u5c42（\u5373\u6570\u636e\u4f20\u8f93\u7ba1\u7406\u7684\u7f51\u7edc\u670d\u52a1）\u5206\u79bb\u3002<\/p>\n

    \u63a7\u5236\u5e73\u9762\u4f7f\u7528\u534f\u8bae\u6765\u51b3\u5b9a\u5411\u4f55\u5904\u53d1\u9001\u6d41\u91cf，\u800c\u6570\u636e\u5e73\u9762\u5305\u542b\u51b3\u5b9a\u662f\u5426\u8f6c\u53d1\u6d41\u91cf\u7684\u89c4\u5219\u3002<\/p>\n

    \u8fd9\u79cd\u5f62\u5f0f\u7684\u6d41\u91cf\u7ba1\u7406\u8fd8\u6d89\u53ca\u8bbf\u95ee\u63a7\u5236，\u5373\u89c4\u5b9a\u4ec0\u4e48\u7cfb\u7edf\u53ef\u4ee5\u5c06\u54ea\u4e9b\u534f\u8bae\u4f20\u9012\u7ed9\u8c01\u3002<\/p>\n

    \u8fd9\u79cd\u7c7b\u578b\u7684\u8bbf\u95ee\u63a7\u5236\u901a\u5e38\u57fa\u4e8e\u5c5e\u6027\u7684\u8bbf\u95ee\u63a7\u5236(ABAC)\u3002<\/p>\n

    \n

    SDN\u89e3\u51b3\u65b9\u6848\u53d6\u4ee3\u4e86\u8def\u7531\u5668\u548c\u4ea4\u6362\u673a\u7b49\u4f20\u7edf\u7f51\u7edc\u8bbe\u5907，\u4f7f\u7ec4\u7ec7\u53ef\u4ee5\u9009\u62e9\u4f7f\u7528\u66f4\u7b80\u5355\u7684\u7f51\u7edc\u8bbe\u5907（\u63a5\u53d7SDN\u63a7\u5236\u5668\u7684\u6307\u4ee4）\u5904\u7406\u6d41\u91cf\u8def\u7531\u3002<\/p>\n

    \u8fd9\u6d88\u9664\u4e86\u4f20\u7edf\u7f51\u7edc\u534f\u8bae\u7684\u590d\u6742\u6027\u3002<\/p>\n

    \u6b64\u5916，\u8fd9\u8fd8\u6d88\u9664\u4e86IP\u5bfb\u5740\u3001\u5b50\u7f51\u3001\u8def\u7531\u7b49\u4f20\u7edf\u7f51\u7edc\u6982\u5ff5，\u4e0d\u5fc5\u5c06\u5176\u7f16\u5199\u5230\u6258\u7ba1\u5e94\u7528\u7a0b\u5e8f\u4e2d\u6216\u7531\u6258\u7ba1\u5e94\u7528\u7a0b\u5e8f\u89e3\u5bc6\u3002<\/p>\n

    \n

    SDN\u63d0\u4f9b\u4e86\u4e00\u79cd\u65b0\u7684\u7f51\u7edc\u8bbe\u8ba1，\u8be5\u8bbe\u8ba1\u53ef\u76f4\u63a5\u4ece\u96c6\u4e2d\u4f4d\u7f6e\u7f16\u7a0b，\u5b83\u7075\u6d3b，\u72ec\u7acb\u4e8e\u4f9b\u5e94\u5546，\u5e76\u4e14\u57fa\u4e8e\u5f00\u653e\u6807\u51c6\u3002<\/p>\n

    \u4f7f\u7528SDN\u540e，\u7ec4\u7ec7\u5c06\u4e0d\u5fc5\u4ece\u5355\u4e2a\u4f9b\u5e94\u5546\u5904\u8d2d\u4e70\u8bbe\u5907\u3002<\/p>\n

    SDN\u5141\u8bb8\u7ec4\u7ec7\u6839\u636e\u9700\u8981\u6df7\u5408\u548c\u5339\u914d\u786c\u4ef6，\u4f8b\u5982\u9009\u62e9\u6700\u5177\u6210\u672c\u6548\u76ca\u6216\u6700\u9ad8\u541e\u5410\u91cf\u7684\u8bbe\u5907，\u800c\u4e0d\u4f1a\u88ab\u67d0\u4e2a\u4f9b\u5e94\u5546\u9501\u5b9a\u3002<\/p>\n

    \u7136\u540e，\u53ef\u901a\u8fc7\u96c6\u4e2d\u7ba1\u7406\u63a5\u53e3\u63a7\u5236\u786c\u4ef6\u7684\u914d\u7f6e\u548c\u7ba1\u7406\u3002<\/p>\n

    \u6b64\u5916，\u53ef\u6839\u636e\u9700\u8981\u52a8\u6001\u66f4\u6539\u548c\u8c03\u6574\u5e94\u7528\u4e8e\u786c\u4ef6\u7684\u8bbe\u7f6e\u3002<\/p>\n

    \n

    \u53e6\u5916，SDN\u5176\u5b9e\u4e5f\u53ef\u4ee5\u88ab\u770b\u4f5c\u7f51\u7edc\u865a\u62df\u5316\u3002<\/p>\n

    \u5b83\u5141\u8bb8\u6570\u636e\u4f20\u8f93\u8def\u5f84\u3001\u901a\u4fe1\u51b3\u7b56\u6811\u548c\u6d41\u63a7\u5236\u5728SDN\u63a7\u5236\u5c42\u4e2d\u865a\u62df\u5316，\u800c\u4e0d\u662f\u4ee5\u6bcf\u4e2a\u8bbe\u5907\u4e3a\u57fa\u7840\u5728\u786c\u4ef6\u4e0a\u5904\u7406\u3002<\/p>\n

    \n

    \u865a\u62df\u5316\u7f51\u7edc\u6982\u5ff5\u5e26\u6765\u7684\u53e6\u4e00\u4e2a\u6709\u8da3\u7684\u53d1\u5c55\u662f\u865a\u62dfSAN(VSAN)<\/span>\u3002<\/p>\n

    SAN\u662f\u4e00\u79cd\u7f51\u7edc\u6280\u672f，\u5b83\u5c06\u591a\u4e2a\u5355\u72ec\u7684\u5b58\u50a8\u8bbe\u5907\u7ec4\u5408\u5230\u4e00\u4e2a\u7f51\u7edc\u53ef\u8bbf\u95ee\u7684\u5b58\u50a8\u5bb9\u5668\u4e2d\u3002<\/p>\n

    \u5b83\u4eec\u901a\u5e38\u7528\u4e8e\u9700\u8981\u9ad8\u901f\u8bbf\u95ee\u5355\u4e2a\u5171\u4eab\u6570\u636e\u96c6\u7684\u591a\u4e2a\u6216\u96c6\u7fa4\u670d\u52a1\u5668\u3002<\/p>\n

    \u7531\u4e8eSAN\u590d\u6742\u7684\u786c\u4ef6\u8981\u6c42，\u8fd9\u4e9b\u8bbe\u5907\u8fc7\u53bb\u4e00\u76f4\u5f88\u6602\u8d35\u3002<\/p>\n

    VSAN\u901a\u8fc7\u865a\u62df\u5316\u7ed5\u8fc7\u4e86\u8fd9\u4e9b\u590d\u6742\u6027\u3002<\/p>\n

    \u865a\u62dfSAN\u6216\u8f6f\u4ef6\u5b9a\u4e49\u7684\u5171\u4eab\u5b58\u50a8\u7cfb\u7edf\u662fSAN\u5728\u865a\u62df\u5316\u7f51\u7edc\u6216SDN\u4e0a\u7684\u865a\u62df\u91cd\u73b0\u3002<\/p>\n

    \n

    \u8f6f\u4ef6\u5b9a\u4e49\u5b58\u50a8(SDS)<\/span>，\u662fSDN\u7684\u53e6\u4e00\u4e2a\u884d\u751f\u4ea7\u54c1\u3002<\/p>\n

    SDS\u662fSAN\u6216NAS\u7684SDN\u7248\u672c\u3002<\/p>\n

    SDS\u662f\u4e00\u79cd\u7b56\u7565\u9a71\u52a8\u7684\u5b58\u50a8\u7ba1\u7406\u548c\u8d44\u6e90\u8c03\u914d\u89e3\u51b3\u65b9\u6848，\u5b83\u72ec\u7acb\u4e8e\u5b9e\u9645\u7684\u5e95\u5c42\u5b58\u50a8\u786c\u4ef6\u3002<\/p>\n

    \u5b83\u662f\u6709\u6548\u7684\u865a\u62df\u5b58\u50a8\u3002<\/p>\n

    \n

    \u8f6f\u4ef6\u5b9a\u4e49\u5e7f\u57df\u7f51(SDWAN \u6216SD-WAN)<\/span>，\u662fSDN\u7684\u4e00\u79cd\u6f14\u53d8，\u7528\u4e8e\u8fdc\u7a0b\u6570\u636e\u4e2d\u5fc3\u3001\u8fdc\u7aef\u4f4d\u7f6e\u548cWAN\u94fe\u8def\u4e0a\u7684\u4e92\u670d\u52a1\u4e4b\u95f4\u7684\u8fde\u63a5\u7ba1\u7406\u548c\u670d\u52a1\u63a7\u5236\u3002<\/p>\n

    \n","protected":false},"excerpt":{"rendered":"

    \u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb664\u6b21\uff0c\u70b9\u8d5e19\u6b21\uff0c\u6536\u85cf21\u6b21\u3002\u8fd8\u8981\u6ce8\u610f\uff0c\u5728IPV4\u4e0b\uff0c\u5b50\u7f51\u7684\u7b2c\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u7f51\u6bb5\u5730\u5740\uff08\u5373127.0.0.0) \uff0c\u6700\u540e\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u5b9a\u5411\u5e7f\u64ad\u5730\u5740\uff08\u5373127.255.255.255) \uff0c\u56e0\u6b64\u4e0d\u80fd\u88ab\u76f4\u63a5\u7528\u4f5c\u4e3b\u673a\u5730\u5740\uff08\u6216\u73af\u56de\u5730\u5740\uff09\u3002\u672a\u6765\u968f\u7740IPv6\u5730\u5740\u88ab\u56fa\u5b9a\u5230NIC, \u6e90\u7cfb\u7edf\u7684\u8eab\u4efd\u53ef\u80fd\u4f1a\u53d8\u5f97\u96be\u4ee5\u9690\u85cf\uff0c\u65e0\u8bba\u5176\u662f\u653b\u51fb\u8005\uff0c\u8fd8\u662f\u9700\u8981\u9690\u79c1\u7684\u6216\u9700\u8981\u4e0d\u88ab\u8ffd\u8e2a\u7684\u5728\u7ebf\u4ea4\u6613\u7684\u4e2a\u4eba\uff08\u5982\u5439\u54e8\u8005\u6216\u56e0\u5bb6\u66b4\u5bfb\u6c42\u5e2e\u52a9\u7684\u4eba\uff09\u3002\u4f8b\u5982\uff0c\u5f53\u901a\u8fc7\u5178\u578b\u7684\u7f51\u7edc\u8fde\u63a5\u5728Web\u670d\u52a1\u5668\u548cWeb\u6d4f\u89c8\u5668\u4e4b\u95f4\u901a\u4fe1\u65f6\uff0cHTTP\u4f1a\u88ab\u5c01\u88c5\u5728TCP\u4e2d\uff0c\u540e\u8005\u88ab\u5c01\u88c5\u5728IP\u4e2d\uff0c\u800cIP\u88ab\u5c01\u88c5\u5728\u4ee5\u592a\u7f51\u4e2d\u3002<\/p>\n","protected":false},"author":2,"featured_media":34269,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[2901,58,43,78],"topic":[],"class_list":["post-34279","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-osg9","tag-linux","tag-43","tag-78"],"yoast_head":"\n\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/34279.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb664\u6b21\uff0c\u70b9\u8d5e19\u6b21\uff0c\u6536\u85cf21\u6b21\u3002\u8fd8\u8981\u6ce8\u610f\uff0c\u5728IPV4\u4e0b\uff0c\u5b50\u7f51\u7684\u7b2c\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u7f51\u6bb5\u5730\u5740\uff08\u5373127.0.0.0) \uff0c\u6700\u540e\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u5b9a\u5411\u5e7f\u64ad\u5730\u5740\uff08\u5373127.255.255.255) \uff0c\u56e0\u6b64\u4e0d\u80fd\u88ab\u76f4\u63a5\u7528\u4f5c\u4e3b\u673a\u5730\u5740\uff08\u6216\u73af\u56de\u5730\u5740\uff09\u3002\u672a\u6765\u968f\u7740IPv6\u5730\u5740\u88ab\u56fa\u5b9a\u5230NIC, \u6e90\u7cfb\u7edf\u7684\u8eab\u4efd\u53ef\u80fd\u4f1a\u53d8\u5f97\u96be\u4ee5\u9690\u85cf\uff0c\u65e0\u8bba\u5176\u662f\u653b\u51fb\u8005\uff0c\u8fd8\u662f\u9700\u8981\u9690\u79c1\u7684\u6216\u9700\u8981\u4e0d\u88ab\u8ffd\u8e2a\u7684\u5728\u7ebf\u4ea4\u6613\u7684\u4e2a\u4eba\uff08\u5982\u5439\u54e8\u8005\u6216\u56e0\u5bb6\u66b4\u5bfb\u6c42\u5e2e\u52a9\u7684\u4eba\uff09\u3002\u4f8b\u5982\uff0c\u5f53\u901a\u8fc7\u5178\u578b\u7684\u7f51\u7edc\u8fde\u63a5\u5728Web\u670d\u52a1\u5668\u548cWeb\u6d4f\u89c8\u5668\u4e4b\u95f4\u901a\u4fe1\u65f6\uff0cHTTP\u4f1a\u88ab\u5c01\u88c5\u5728TCP\u4e2d\uff0c\u540e\u8005\u88ab\u5c01\u88c5\u5728IP\u4e2d\uff0c\u800cIP\u88ab\u5c01\u88c5\u5728\u4ee5\u592a\u7f51\u4e2d\u3002\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/34279.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-29T01:14:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250429011444-6810280468341.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/34279.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/34279.html\",\"name\":\"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-04-29T01:14:47+00:00\",\"dateModified\":\"2025-04-29T01:14:47+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/34279.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/34279.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/34279.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/34279.html","og_locale":"zh_CN","og_type":"article","og_title":"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb664\u6b21\uff0c\u70b9\u8d5e19\u6b21\uff0c\u6536\u85cf21\u6b21\u3002\u8fd8\u8981\u6ce8\u610f\uff0c\u5728IPV4\u4e0b\uff0c\u5b50\u7f51\u7684\u7b2c\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u7f51\u6bb5\u5730\u5740\uff08\u5373127.0.0.0) \uff0c\u6700\u540e\u4e00\u4e2a\u5730\u5740\u4fdd\u7559\u4e3a\u5b9a\u5411\u5e7f\u64ad\u5730\u5740\uff08\u5373127.255.255.255) \uff0c\u56e0\u6b64\u4e0d\u80fd\u88ab\u76f4\u63a5\u7528\u4f5c\u4e3b\u673a\u5730\u5740\uff08\u6216\u73af\u56de\u5730\u5740\uff09\u3002\u672a\u6765\u968f\u7740IPv6\u5730\u5740\u88ab\u56fa\u5b9a\u5230NIC, \u6e90\u7cfb\u7edf\u7684\u8eab\u4efd\u53ef\u80fd\u4f1a\u53d8\u5f97\u96be\u4ee5\u9690\u85cf\uff0c\u65e0\u8bba\u5176\u662f\u653b\u51fb\u8005\uff0c\u8fd8\u662f\u9700\u8981\u9690\u79c1\u7684\u6216\u9700\u8981\u4e0d\u88ab\u8ffd\u8e2a\u7684\u5728\u7ebf\u4ea4\u6613\u7684\u4e2a\u4eba\uff08\u5982\u5439\u54e8\u8005\u6216\u56e0\u5bb6\u66b4\u5bfb\u6c42\u5e2e\u52a9\u7684\u4eba\uff09\u3002\u4f8b\u5982\uff0c\u5f53\u901a\u8fc7\u5178\u578b\u7684\u7f51\u7edc\u8fde\u63a5\u5728Web\u670d\u52a1\u5668\u548cWeb\u6d4f\u89c8\u5668\u4e4b\u95f4\u901a\u4fe1\u65f6\uff0cHTTP\u4f1a\u88ab\u5c01\u88c5\u5728TCP\u4e2d\uff0c\u540e\u8005\u88ab\u5c01\u88c5\u5728IP\u4e2d\uff0c\u800cIP\u88ab\u5c01\u88c5\u5728\u4ee5\u592a\u7f51\u4e2d\u3002","og_url":"https:\/\/www.wsisp.com\/helps\/34279.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-04-29T01:14:47+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250429011444-6810280468341.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"12 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/34279.html","url":"https:\/\/www.wsisp.com\/helps\/34279.html","name":"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-04-29T01:14:47+00:00","dateModified":"2025-04-29T01:14:47+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/34279.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/34279.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/34279.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u7b2c11\u7ae0 \u5b89\u5168\u7f51\u7edc\u67b6\u6784\u548c\u7ec4\u4ef6\uff08\u4e00\uff09"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/34279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=34279"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/34279\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/34269"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=34279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=34279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=34279"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=34279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}