Method for constructing virtual-real decoupling simulation network

Abstract

The embodiment of the invention provides a method for constructing a virtual-real decoupling simulation network, and the method comprises the steps: S1, obtaining a simulation network planning scriptwhich is configured in a user-defined manner and comprises a simulation network topological structure and the function information of each node in the simulation network topological structure; S2, according to the simulation network planning script, dispersing and deploying each node of the simulation network on a plurality of physical hosts connected through a physical network; and S3, constructing data plane equipment connected with all nodes on each physical host on each physical host, wherein each data plane equipment is configured in a software definition mode to perform networking on each dispersed node based on an Overlay tunnel technology to construct a logic topology so as to form a simulation network which is decoupled with the physical network and enables data frames to be transmitted hop by hop. According to the method, the construction process is completely transparent to the physical network cluster, and any virtual-real decoupling simulation network topology structure can be constructed without relying on or changing networking and configuration of the physical network cluster.

Description

technical field [0001] The present invention relates to the field of cyberspace security science, specifically to the field of large-scale Internet network structure, function and behavior simulation technology, and more specifically to a method for constructing a virtual-real decoupling simulation network. Background technique [0002] A realistic cyberspace simulation platform is a key scientific device for scientific research, measurement and analysis of cyberspace security. With the rapid development of cyberspace technology, the development of cyberspace security research tasks such as experimenting and verifying various new network technologies, attack defense methods, and evaluating and analyzing network security strategies and network security risks is inseparable from the support of the cyberspace simulation platform. [0003] Existing cyberspace simulation platforms can basically be divided into three categories: the first category is model-based simulators, which ...

AI Technical Summary

Problems solved by technology

However, in actual use, there are also significant deficiencies: First, the network topology simulated by such tools and the network layer functions provided by such tools are limited by the networking and configuration of physical network clusters, and it is difficult to implement any network system topology and network layer functions. The second is to use such tools, the reconstruction of the simulation network usually needs to manually change the topology and configuration of the underlying physical cluster network, which is time-consuming and labor-intensive; finally, not all network shooting range tools can realistically simulate the network layer Control behavior, such as multi-hop transmission of online traffic according to routing configuration, even if such functions are provided, the underlying physical cluster network must provide corresponding support

However, none of the existing cyberspace simulation platforms can satisfy the above three conditions at the same time

The consequences are: on the one hand, the reliability and feasibility of the network experiment results carried out on it are greatly reduced, and there may even be results that are completely opposite to the real network as a reference, making it difficult to directly apply to the real network; on the other hand , which also makes each experiment need to spend a lot of manpower and time to build the experimental scene, especially for large-scale Internet experiments, it often takes days or even weeks, and the experimental efficiency is very low

Images