Research And Implementation Of Linux Container And OpenVPN In IoT Gateway

With the rapid development of Internet technology and popularization,IoT application deployment in the gateway device in order to simplify the application deployment process and improve the edge equipment data collecting,filtering,analysis and transmission efficiency.IoT applications in gateway devices address the needs of special scenarios of IoT,giving full play to the advantages of gateways.However,with the deployment of more IoT application,gateway system is more and more complex,this thesis introduced Linux Container virtualization technology which can provide a stable,safe and independent environment for IoT applications,to standardize the deployment of the IoT applications,improve the stability and security of the gateway system.This thesis introduces the current mainstream system virtualization technology and container virtualization solutions,mainly studied the Cgroups and Namespace on Linux kernel,which mechanism LXC container relys on.And according to the characteristics of the IoT gateway,In view of this scenario,IoT applications have low real-time requirements and high security requirements,combined with the existing gateway system architecture,We proposes a solutions for IoT geteway application environment based on LXC and OpenVPN after analyzed the background and requirement of IoT gateway application.This thesis implements the multi-layer container mirror,non-privileged container with OpenVPN network architecture,the main work includes:(1)studies and analyzes the current mainstream of system virtualization technology and several typical container virtualization solutions.(2)introduces the characteristics and problems of the embedded device system virtualization,and analyzes the underlying realization of the Linux kernel Cgroups and the Namespace mechanism.(3)IoT gateway container plan was designed and implemented,completes the transplantation of the LXC tools,container management modular,implements the container multilayer mirror and management,non-privileged container was created with the User Namespace implementation,virtual private network was built with the OpenVPN technologies integration in container,provids secure transport tunnels for IoT application data.Finally,the analysis of the results shows that,the scheme of IoT gateway application platform containers which proposed in this thesis can provide a stability,security,isolation environment for IoT application in the special situation,and the problems existing in the deployment of IoT application in gateway system are solved.This scheme has a very wide range of practical value in the IoT application scenario,it has important significance to promote the development of Internet technology,strengthen the comprehensive ability of gateway system.