Multi-logic variant router control system and control method based on OpenFlow

Abstract

The invention discloses a multi-logic variant router control system and a control method based on OpenFlow. The system comprises multiple router control surfaces which are independent mutually in the logic and deployed on the same network node and a communication arbitration unit, wherein each router control surface operates the same routing protocol independently, a corresponding routing table is generated and converted to a corresponding control surface data flow table, and the control surface data flow table is then outputted; and the communication arbitration unit is used for controlling an uplink and downlink data communication process between each router control surface and a router data surface and the router data surface, and the router data surface is used for completing the data communication process with the current network node. Separation between the control surface and the data surface of the router is realized; through setting the arbitration unit, the flow tables are analyzed, arbitrated and combined, and flow table output to the data surface is then carried out; and when a certain router control surface is abnormal, an executable flow table received by the data surface can still be ensured to be correct, and normal network communication is not influenced.

Description

technical field [0001] The invention relates to the technical field of network communication security, in particular to an openflow-based multi-logic variant routing control system and control method. Background technique [0002] Traditional routers use a tightly coupled method to closely integrate the control plane and the data plane within a hardware platform. However, when this method is applied in a network environment, once it is successfully attacked by routing, it will cause the loss of network service data in the slightest, and the fatal flaw of causing a large-scale network paralysis in severe cases. Generally, in practical applications, in order to prevent this from happening, improvements can be made in the following two ways: on the one hand, we can start with strengthening the security measures of the router itself, and on the other hand, we can use redundancy to reduce this aspect. risks of. [0003] Among them, when using redundancy to avoid the above probl...

AI Technical Summary

Problems solved by technology

[0003] Among them, when using redundancy to avoid the above problems, especially in equipment-level redundancy measures, it is more common to deploy multiple devices on a single node, but this method is not effective due to its limited redundancy. Ideal, but it will also bring problems such as rising deployment costs and management costs

Images