Central controller protection method, device and system

Abstract

The invention discloses a central controller protection method, device and system and belongs to the field of network security. The central controller protection method comprises the steps that data packets sent by a terminal are received and are matched with a flow table stored in an exit gateway; when the data packets are not matched with the stored flow table, count values for indicating the number of unmatched data packets are accumulated; when the time length required by the accumulated count values to reach an early warning threshold value is smaller than a predetermined time length threshold value, early warning information is sent to the central controller and is used for triggering the central controller to back up the information stored in the central controller into a redundant controller and processing the data packets reported by the central controller jointly with the redundant controller. The problem that illegal users can be prevented from exceeding their authorities to access information in an organization intranet but the central controller in the organization intranet cannot be prevented from being attacked in the related arts is solved, and the effect of avoiding the risk that the central controller is attacked and accordingly the central controller goes down is achieved.

Description

technical field [0001] The invention relates to the field of network security, in particular to a central controller protection method, equipment and system. Background technique [0002] In order to better provide reliable Internet services for the fourth-generation mobile communication users, it is proposed to conduct mobile communication user access through centralized control in the future mobile Internet design. Software Defined Network (English: Software Defined Network, referred to as: SDN) adopts the idea of ​​centralized control, and its core technology OpenFlow realizes flexible control of network traffic by separating the control plane of network equipment from the data plane. The central controller in the SDN network architecture is the core of the entire network and is responsible for the functions of the entire network control plane. Once the central controller in the SDN is attacked, it will bring serious problems to the entire network. Therefore, the protect...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem in the prior art that can only prevent unauthorized users from accessing information in the organization’s intranet without authorization, and wirelessly prevent the central controller in the organization’s intranet from being attacked, the embodiment of the present invention provides a central controller protection method and equipment and system

Images