An SDN-based security authentication method and related equipment

Abstract

An embodiment of the invention provides an SDN (Software Defined Network) based security certificating method and a related device. A control layer of an SDN includes a controller cluster. The controller cluster includes a traffic distributing module, a certification module and a service module. The method includes that the traffic distributing module receives a first access request which indicates a first connection is requested to connect to the control layer; the traffic distributing module determines that the first connection is an unknown connection; the traffic distributing module connects the first connection to the certification module; the traffic distributing module receives a certification result of the first connection sent by the certification module; the traffic distributing module determines whether to switch the first connection to the service module or not according to the certification result. Therefore, security certification is performed on accessed connection by the controller cluster and security certification within the control layer is realized, so that potential security hazards caused by external certification methods are eliminated.

Description

technical field [0001] The present invention relates to the field of communication technologies, in particular to a software-defined network (English: Software Defined Network, abbreviated: SDN)-based security authentication method and related equipment. Background technique [0002] The SDN network is an emerging network architecture, which realizes centralized management and control of the network through technologies such as the separation of the control plane and the forwarding plane. A typical layered diagram of an SDN network is as follows: figure 1 As shown, it is mainly divided into application layer, control layer and forwarding layer. Among them, the control layer includes controllers or controller clusters, manages the forwarding layer through the southbound interface, and communicates with the application layer through the northbound interface, which is the core of the entire SDN network. Therefore, ensuring the security of the control layer plays a very import...

AI Technical Summary

Problems solved by technology

[0004] However, in the above authentication method, it needs to rely on the authentication function of the firewall, and the control layer and the firewall are set separately, so the above authentication method is actually an external authentication method, and there are certain security risks

Images