Cloud network resource management control system based on strategy language under software defined network

Abstract

The invention discloses a cloud network resource management control system based on a strategy language under a software defined network. The system comprises a strategy language interpreter, a strategy database, a strategy execution engine and an access filter. The system can isolate mistaken configuration and illegal access of cloud network resources. Aiming at an access control language of finegranularity of the cloud network resources, the system can express an access control intention of a cloud service provider network administrator to the cloud network resources, and the language can describe different access control rules aiming at different cloud users, user groups, network resources and attributes thereof. In order to achieve the cloud network resource access control system under the software defined network, the invention also provides needed specific implementation details, comprising design schemes of an insertion method of the system in a software defined network controller, the language interpreter and the strategy execution engine.

Description

technical field [0001] The invention belongs to the technical field of network communication, and in particular relates to a cloud network resource management control system based on a policy language under a software-defined network. Background technique [0002] Software-defined network (SDN) is a new type of network architecture. Compared with the traditional seven-layer network architecture, the core design of SDN is to separate the control plane from the forwarding plane, and divide the network into application layer, control layer and At the forwarding layer, all configuration and management of the network are handled centrally by the controller, while the devices at the forwarding layer are only responsible for efficient traffic forwarding. The centralized control of the network in SDN greatly simplifies the work of network administrators, and the flexible programmability provides a broad space for upper-layer application development. [0003] Cloud computing has bee...

AI Technical Summary

Problems solved by technology

[0007] It can be seen that there are still problems in the existing technology: the access request of the controller to the upper application program lacks fine-grained behavior and authority control; Network; waste of controller resources, that is, the controller will process many requests that should not be processed

[0008] Specifically, there are two problems: (1) There may be network configuration errors in network configuration; when creating a network, the requested resources may conflict with existing ones (the administrator may have forgotten or made a wrong input), and there is no control It will cause network configuration failures or conflicts, and it can only be discovered when a problem occurs when it is deployed to the device. It is very expensive and consumes controller resources.

[0009] To sum up, in the SDN-based cloud environment, there is no cloud network resource management and control mechanism that runs through network configuration and network access. Traditional access control technologies can only control inter-network access from the perspective of path accessibility (such as access control in firewalls). list function), and cannot perform access control on the requested resource

Although the access control technology related to the SDN field can identify unauthorized access requests, it cannot satisfy the universality of access request control due to the need to modify each plug-in inside the controller, and illegal access requests will still occupy additional resources. controller resources, resulting in a waste of valuable computing resources

Images