A method for constructing virtual-real decoupling simulation network

Abstract

An embodiment of the present invention provides a method for constructing a virtual-real decoupling simulation network, including: S1, obtaining a user-defined configuration simulation network planning script, which includes the simulation network topology and the function information of each node therein; S2, According to the simulation network planning script, each node of the simulation network is distributed and deployed on multiple physical hosts connected through the physical network; S3, build a data plane device connecting all nodes on each physical host, and configure it in a software-defined manner Based on the Overlay tunnel technology, each data plane device constructs a logical topology by networking scattered nodes to form a simulated network that is decoupled from the physical network and allows data frames to be transmitted hop by hop. The construction process of the present invention is completely transparent to the physical network cluster, and without depending on and without changing the networking and configuration of the physical network cluster, an arbitrary simulation network topology structure decoupling between virtual and real can be constructed.

Description

technical field [0001] The present invention relates to the field of cyberspace security science, specifically to the field of large-scale Internet network structure, function and behavior simulation technology, and more specifically to a method for constructing a virtual-real decoupling simulation network. Background technique [0002] A realistic cyberspace simulation platform is a key scientific device for scientific research, measurement and analysis of cyberspace security. With the rapid development of cyberspace technology, the development of cyberspace security research tasks such as experimenting and verifying various new network technologies, attack defense methods, and evaluating and analyzing network security strategies and network security risks is inseparable from the support of the cyberspace simulation platform. [0003] Existing cyberspace simulation platforms can basically be divided into three categories: the first category is model-based simulators, which ...

AI Technical Summary

Problems solved by technology

However, in actual use, there are also significant deficiencies: First, the network topology simulated by such tools and the network layer functions provided by such tools are limited by the networking and configuration of physical network clusters, and it is difficult to implement any network system topology and network layer functions. The second is to use such tools, the reconstruction of the simulation network usually needs to manually change the topology and configuration of the underlying physical cluster network, which is time-consuming and labor-intensive; finally, not all network shooting range tools can realistically simulate the network layer Control behavior, such as multi-hop transmission of online traffic according to routing configuration, even if such functions are provided, the underlying physical cluster network must provide corresponding support

However, none of the existing cyberspace simulation platforms can satisfy the above three conditions at the same time

The consequences are: on the one hand, the reliability and feasibility of the network experiment results carried out on it are greatly reduced, and there may even be results that are completely opposite to the real network as a reference, making it difficult to directly apply to the real network; on the other hand , which also makes each experiment need to spend a lot of manpower and time to build the experimental scene, especially for large-scale Internet experiments, it often takes days or even weeks, and the experimental efficiency is very low

Images