A secure communication method based on openflow inspection server

Abstract

The invention discloses a secure communication method based on an Openflow inspection server, which relates to the technical field of Openflow, and its implementation content includes: before the Openflow controller communicates with the Openflow switch, first establish a security channel, and then connect a corresponding channel to each security channel Openflow check server; when the Openflow controller communicates with the Openflow switch, first, the Openflow check server receives the data packet from the Openflow controller, and performs table-miss table matching on the data packet, and returns to the Openflow controller if the match is successful If the match fails, the message of "reserve data packet" is returned to the Openflow controller; then, the Openflow controller discards the data packet or sends the data packet to Openflow according to the return information of the Openflow inspection server switch; finally, the Openflow switch processes the received packets. The invention can improve the high availability of the Openflow switch, reduce the downtime risk of the Openflow switch when processing matching flow items, and improve user experience.

Description

technical field [0001] The invention relates to the technical field of Openflow, in particular to a secure communication method based on an Openflow inspection server. Background technique [0002] With the continuous growth of network technology and the development of virtual technology, existing large-scale data centers generally adopt virtualization technology. Since Openflow has played a huge role in promoting the innovation and development of the network, it has received extensive attention and support. Openflow allows From the remote control of the packet forwarding table of the network switch, by adding, modifying and removing packet control rules and actions, the path of packet forwarding can be changed. [0003] The traditional deployment scheme is that the Openflow controller directly communicates with the Openflow switch. Regardless of whether the match in the flow table is successful or not, it must communicate with the switch. In this way, it is very likely that...

AI Technical Summary

Problems solved by technology

[0003] The traditional deployment scheme is that the Openflow controller directly communicates with the Openflow switch. Regardless of whether the match in the flow table succeeds or fails, it must communicate with the switch. In this way, it is very likely that malicious data packets will cause the switch to be unavailable, or even cause the flow table to fail. lost

Images