A method for constructing a mimetic SDN controller

Abstract

The invention discloses a mimic SDN controller construction method. The method comprises a control plane, a dispatching plane and a data plane. The control plane is used for realizing tasks of network control and management and providing multiple heterogeneous redundant controller executing parts. The data plane is used for finishing a data forwarding function in a network and comprises hardware facilities such as a switch and a router. The control plane communicates with the data plane through the dispatching plane. The dispatching plane comprises a forwarder, a sensor, a decider and a dispatcher. The mimic SDN controller construction method comprises following specific steps of step 1, collecting network state information and forwarding the information to the controller executives; step 2, carrying out sensing detection on network operation states in real time; and step 3, dispatching the controllers of the control plane dynamically, and carrying out voting output on the sent information by utilizing a majority judgment mechanism. The device has a management mechanism capable of sensing and dynamically dispatching the controllers; abnormal network operation resulting from a failure of a single controller is avoided; exterior attacks are difficult to capture the executing parts responsible for network management; and moreover, the security of the SDN is further improved through adoption of the majority judgment decision-making mechanism.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a method and device for constructing a mimetic SDN controller. Background technique [0002] In recent years, SDN has risen rapidly, and has received extensive attention from academia and industry, and has been successfully applied in the field of commercial networks. The controller, as the core component of the control plane, plays a key role in the deployment and operation of SDN. Therefore, attacks against controllers, such as DDoS attacks and similar attack forms such as tampering with flow tables based on vulnerabilities and backdoors, have brought great challenges to the efficient operation of the underlying network security. Once an attacker successfully implements such an attack, it will cause abnormal operation, inefficiency, or even paralysis of the entire network. [0003] However, the existing SDN operation mechanism or controller security mecha...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the problem that SDN cannot effectively guarantee the operation of SDN in the face of controller failure in the prior art, the present invention proposes a mimetic SDN controller construction method

Images