(ZT) 中国下一代互联网“举世无敌”

楚天

　　英国媒体称，网络领域的新王者中国正在研发一种更快更安全的系统，西方对此望尘莫及。

　　英国《新科学家》周刊网站3月10日以《中国下一代互联网举世无敌》为题报道说，英国《皇家学会学报》近期发布报告，详细介绍了中国在打造下一代互联网方面所取得的进步，这一全国性工程的规模之大非西方所能企及。报告称，现有的互联网正变得陈旧不堪：IP地址数量行将耗尽，网络从根本上依然不够安全。而中国在对这一切进行改变的方面已将西方甩在身后。

　　报道称，新英格兰综合系统研究所曾在2008年为美国海军编写了一份报告，该报告近日才得以公开。据其所述，问题的根源在于“互联网架构存在两大漏洞”。首先，互联网无力遏制大规模恶意行为。恶意程序能在网上迅速复制、传播，但相关机构却只能应对单个的网络入侵事件。

　　不过，中国早已想出了更好的防御方法。其下一代互联网基础架构最重要的一个安全特征是“源地址验证体系结构”(SAVA)。目前，许多网络安全问题都源于无法确定试图连接网络的电脑其IP地址的真实性。SAVA通过在网络设置“安检口”解决了这个问题，这样就建起了一个可信任电脑数据库，每台电脑都与它们的IP地址相匹配。当匹配失败时，数据访问就会被阻断。身为互联网先驱之一的史蒂夫·沃尔夫称“这一模式应得到大力推广”。

　　报道指出，即便是抛开安全隐忧不谈，互联网也面临着地址不足的危险。目前采用的地址分配标准是IPv4协议，其标志方式决定了最多只可能有43 亿个地址。网络工程师多年来一直在研发新的标准，即IPv6协议，它可提供的地址数量将增加到惊人的2的128次方个。但不幸的是，有关IPv6协议的研究一直进展缓慢，而时间却所剩无几。今年全球多个地区将出现IPv4地址枯竭的问题。

　　曾主持中美高级网络技术研讨会的马里兰大学信息系统专家唐纳德·赖利指出，中国早就开始为这一天未雨绸缪。他说：“中国拥有一个执行IPv6协议标准的全国性互联网基础架构，而美国没有。”“展望互联网的未来，谁率先探索并制订出规划，谁就具备了绝对的竞争优势，尤其是考虑到中国掌握的资源。”

　　报道称，中国已经开始运行下一代网络服务：“高性能宽带信息网”(3TNet)可通过IPv6协议提供高清电视节目。建立在该基础上，系统能够监控网络流量，提供远程医疗服务乃至远程实时高清小提琴教学课程。所有这些服务都有望以更快的速度送至更多的用户。


http://www.newscientist.com/arti ... -a-worldbeater.html

The net's new tiger, China, is creating a faster, more secure system that is way ahead of the West

THE net is getting creaky and old: it is rapidly running out of space and remains fundamentally insecure. And it turns out China is streets ahead of the West in doing anything about it.

A report published in the Philosophical Transactions of the Royal Society last week details China's advances in creating a next-generation internet that is on a national level and on a larger scale than anything in the West.

At the root of the problem are "two major gaps in the architecture of the internet", according to a report from the New England Complex Systems Institute, compiled in 2008 for the US Navy and released to the public this week. First up is the internet's inability to block malicious traffic as a whole. While malware can rapidly replicate and distribute itself across the net, organisations can only respond to individual instances of online aggression.

China is already coming up with better defences. One of the most important aspects of its next-generation backbone is a security feature known as Source Address Validation Architecture (SAVA). Many of the existing security problems stem from an inability to authenticate IP addresses of computers that try to connect to your network. SAVA fixes this by adding checkpoints across the network. These build up a database of trusted computers matched up with their IP addresses. Packets of data will be blocked if the computer and IP address don't match. Steve Wolff, one of the internet's early pioneers, calls it a "model that should be much more widely adopted".

Even setting security worries aside, the internet is running out of room. The current standard for assigning space to computers – known as Internet Protocol Version Four (IPv4) – uses a numbering system which has just under 4.3 billion possible spaces. Internet engineers have been working on the new standard for years. It is called IPv6 and will boost the number of available internet slots by a mind-boggling 80,000 trillion trillion times. But progress on IPv6 has been painfully slow, and time is running out. IPv4 slots are due to run out in multiple regions around the world this year.

But China has been planning for that day for a long time, under pressure from its massive population, all of whom want to be connected to the net. So says Donald Riley, an information systems specialist at the University of Maryland, who also chairs the Chinese American Network Symposium.

"China has a national internet backbone in place that operates under IPv6 as the native network protocol," says Riley. "We have nothing like that in the US."

China is already running next-generation services: internet service provider 3TNet provides television over IPv6, streaming programmes in high definition. It is the basis for a system that monitors and controls traffic flow over the internet and provides remote medical services – even long-distance, real-time violin lessons in high definition. All have the potential to reach more people at higher speeds than any equivalent service on the old internet.

"If you are thinking about the future of the internet, anyone that explores that territory and maps it out first has a definite competitive advantage," Riley says, "especially with the resources available to China."

Correction: When this article was first published, it referred to the wrong Royal Society journal in the second paragraph.

This article appeared in print under the headline "The internet's new tigers"

qiuwen777

有这么强大,表示怀疑...

穿着裤衩裸奔

粗略看了一下，核心就是下一代GFW如果个人不输入DNA做口令就无法登入的意思。

orz，matrix

黯影

哇，这篇文章太掉英国的IT业水准了，好歹算是IT业大国啊