Multi-modal network control-data plane consistency verification method and device

Abstract

The invention provides a multi-modal network control-data plane consistency verification method and device. The method comprises the following steps: loading a consistency verification component in a multi-modal network control plane, and loading a probe generation component and a log sampling component in a multi-modal network data plane, wherein the probe generation component injects detection flow into a network, so that the detection flow is forwarded through a data plane; using the log sampling component for sampling, analyzing and sorting the detection flow which is forwarded and output by the data plane, and sending a sorting result to the consistency checking component; and enabling the consistency verification component to compare a network configuration information analysis result in the control plane with a sorting result generated by the log sampling component to complete verification work, wherein the network configuration information analysis result and the sorting result generated by the log sampling component adopt the same file format. According to the invention, consistency verification of the control plane and the data plane can be completed, and security support is provided for a multi-mode network to bear various services.

Description

technical field [0001] The present invention relates to the field of novel network architecture, in particular to a multi-mode network control-data plane consistency verification method and device. Background technique [0002] The multi-modal smart network supports full-dimensional definition and multi-modal presentation of addressing routing, switching mode, interconnection mode, network element form, transmission protocol, etc., and its data layer adopts a flexible and definable method to provide The data plane support of the business. Due to its programmability and flexibility of message processing, the definable data plane solves the long-standing challenges in the network architecture such as protocol support solidification and single network function, and provides a new method for designing new data plane functions. The solution has been widely deployed in the new network architecture. However, while the definable data plane brings convenience to the efficient deplo...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the hidden dangers of consistency security that may occur during the operation of the control plane and the data plane, the present invention provides a multi-mode network control-data plane consistency verification method and device, which introduces a consistency check into the multi-mode network control plane. The performance verification component is used to analyze and compare the flow rules configured by the controller and the detection results of the data plane; inject active probes into the multi-modal data plane to detect and record the flow policy currently executed by the data plane, and then compare with the configuration information of the control plane Comparison, complete consistency verification, and provide security support for multi-modal networks to carry multiple services

Images