随着网络服务的发展与人们对隐私要求的日益提高。在提供用户通信匿名的基础上，产生了保护服务器匿名性的需求。第二代洋葱路由The Second Generation Onion Router（Tor）的隐匿服务功能就完美地实现了这样的需求。然而自其提出至今已逾10年，其隐匿服务技术并未得到良好的发展。近年来，随着网络服务规模的不断扩大，在To r网络上架设大型网络服务，或将网络服务迁移至To r网络中的需求逐渐增多。然而，在隐匿服务设计之初，由于其实现只考虑了单核单线程的情况，并未能充分利用现在流行的多核架构，也不支持负载均衡等技术。因而，其可扩展性成为了服务提供者需要解决的首要问题。本文通过使用相同的主机名与私钥运行多个隐匿服务实例来解决其可扩展性问题，并使用Shadow在离线环境下进行仿真，最终通过实验分析了这种方式对Tor隐匿服务带来的性能提升及可能存在的问题。%With the development of the network services and people's increasing privacy requirements,a coming grows need of protecting servers’ anonymity has reveal a certain concern.The Second Generation Onion Router(Tor) can provide the hidden service as a perfect realization from this demand.The hidden service technology has been pub-lished more than 10 years,but rarely you can get some research about it.In recent years,with the continuous expansion of the network service‘s scale,setting up network services on the Tor network,or migrating some network services to the Tor network,will encounter a lot of difficulties.However,Tor’s hidden services in its current state does not fully utilise multi-core architecture or provide any load balancing options in regards to multi-server systems.Thus,its scal-ability has become a primary issue that needs to be solved.By using the exact host name and the same private key to run multiple instances of hidden services,can partially solve their scalability problems.We choose shadow to do the simu-lation and the results show that this method can truly improved the performance of Tor hidden services’ scaling.
展开▼
