Network architecture safety monitoring system based on OpenFlow

Abstract

The invention provides a network architecture safety monitoring system based on OpenFlow. The system gives full play to the centralized control advantage of an OpenFlow network controller and the real-time line rate traffic monitoring ability of an sFlow-RT, makes full use of the advantages of the controller in passive and active modes in different network states, and protects the safety of the controller and a switch in the network when the network is attacked. An operation mode of the controller is changed by using upper application, and a speed-limit treatment is carried out on an abnormal switch port, furthermore the stability and safety of network devices and network services are ensured. Test results show that the system lowers loads of the controller by changing the operation mode of the controller, and reduces the influence of abnormal traffic on a host in the network and the network itself by limiting speed at the switch port. The system can be quickly deployed in an existing OpenFlow campus network environment, and also can be deployed in other OpenFLow network environments through adjustment, thereby providing visual, controllable, and effective safety guarantee for the controller and the switch device in the network and the network service itself.

Description

technical field [0001] The system of the invention is applicable to the SDN network environment based on OpenFlow, can monitor network abnormalities caused by network attacks in time, and effectively alleviate abnormalities. Background technique [0002] The concept of OpenFlow was produced in 2006 by researchers at Stanford University in the United States. It advocates the decoupling of the data layer and the control layer of traditional network equipment, and uses a centralized controller (controller) to control various network equipment through standardized interfaces. management and configuration. Subsequently, researchers such as McKeown began to promote the concept of Software-Defined Networking, SDN, and attracted widespread attention from academia and industry. [0003] The OpenFlow architecture consists of an OpenFlow controller and an OpenFlow switch. [0004] The OpenFlow controller is the centralized controller of the OpenFlow network, which maintains topology ...

AI Technical Summary

Problems solved by technology

However, some security problems existing in traditional networks still exist in OpenFlow networks, and the centralized management and control methods of OpenFlow networks pose new challenges to network security.

Images