A network configuration system based on sdn

Abstract

The present invention relates to the technical field of network configuration systems for communication devices, in particular to an SDN-based network configuration system, which is applied to a Linux system; includes: an SDN controller for generating and delivering a forwarding flow table; the SDN device includes: an acquisition unit, It is used to obtain the application traffic generated by each application program in the system; multiple independent service forwarding channels are preset in the routing unit, and each service forwarding channel corresponds to an application program; the forwarding unit sends Each application traffic is matched to at least one corresponding service forwarding channel. The beneficial effects are: the three-layer network is isolated through multiple service forwarding channels, avoiding complicated routing settings; multiple service forwarding channels are isolated from each other at the application layer, ensuring the stability and security of network operation; multiple service forwarding channels are The kernel layers are connected to each other, improving the flexibility of service forwarding.

Description

technical field [0001] The present invention relates to the technical field of a network configuration system for communication equipment, in particular to an SDN-based network configuration system. Background technique [0002] Network Namespaces (network namespace) of Linux system is a network resource isolation scheme. Network is no longer global, but belongs to a specific Namespace (namespace). Resources under each Namespace are opaque and invisible to resources under other Namespaces. [0003] In the existing technology, SDN equipment uses iptables to configure the network, which has the natural disadvantage of complex configuration and difficult to change. Moreover, for a multi-uplink network configuration system, iptables requires complex routing settings, and the uplinks of different Layer 3 networks in the SDN device need to distinguish different networks through routing. While distinguishing routes, NAT (Network Address Translation, Network Address Translation) ...

AI Technical Summary

Problems solved by technology

While distinguishing routes, NAT (Network Address Translation) conversion of multiple IP uplinks must be completed. The policy writing is complicated, and the complexity of the policy doubles with the increase in the number of uplinks, which does not meet the requirements of simplified network configuration. Purpose

The business control program has the problem of deep coupling of business in routing rules and business binding, which affects the flexibility of business

Images