Virtual-real network rapid construction method based on multistage SDN (Software Defined Network)

Abstract

The invention provides a virtual-real network rapid construction method based on a multistage SDN. The method comprises the steps that a top layer SDN controller, a cloud platform SDN controller and a physical layer SDN controller work cooperatively; wherein the top SDN controller and the cloud platform SDN controller work cooperatively to realize virtual equipment networking; the top layer SDN controller and the physical layer SDN controller work cooperatively to realize entity equipment networking; after networking of the virtual devices and networking of the entity devices are completed, hybrid networking of the virtual devices and the entity devices is achieved by jointly connecting the three-layer switch. According to the invention, rapid virtual-real networking is realized based on multi-stage SDN control, the problems of huge workload, long time consumption, complex wiring adjustment of the entity equipment, high error rate and the like when network configuration is carried out on massive virtual equipment and entity equipment in a large-scale network scene construction process are solved, network resources can be uniformly arranged and scheduled stage by stage through the multi-stage SDN controller, and the network configuration efficiency is improved. And thus, the network scene construction speed is effectively improved.

Description

Technical Field

[0001] This invention relates to the field of virtual network technology, and more specifically, to a method for rapidly constructing virtual and physical networks based on multi-level SDN. Background Technology

[0002] With the accelerating digitalization and networking of the world today, the resulting increasingly severe cybersecurity challenges have intensified the competition among nations for dominance in cyberspace security, relying on cyber ranges. Unlike traditional network technology verification platforms, cyber ranges also provide capabilities for security talent training, new technology research and verification, network attack and defense drills, and new product evaluation. Currently, a large number of cyber range-related products have emerged in the domestic and international markets, possessing enormous social and economic value in both military and civilian sectors.

[0003] In the development of network range platforms both domestically and internationally, the need for rapid construction of large-scale scenarios is becoming increasingly urgent in order to more realistically simulate real-world network environments for network attack and defense training, more effectively improve training results, and provide a 1:1 replica of the real network. Large-scale scenario construction is itself a demanding task, typically requiring the use of tens of thousands of virtual and physical devices in a hybrid network, necessitating significant investment of human resources and time for configuration, and currently lacking unified intelligent orchestration capabilities. Summary of the Invention

[0004] To address the challenges of building large-scale virtual-physical network scenarios, which involve large node scales, complex network connections, and the need for rapid scenario topology construction, this invention provides a method for rapid construction of virtual-physical networks based on multi-level SDN. This method solves the pain points of building network range environments where numerous virtual and physical devices necessitate traditional methods for logging into each device to configure parameters, resulting in a huge workload, long processing time, and easy errors in wiring physical devices.

[0005] This invention provides a method for rapidly constructing virtual and physical networks based on multi-level SDN, comprising: The top-level SDN controller, cloud platform SDN controller, and physical layer SDN controller work together; among them: The top-level SDN controller and the cloud platform SDN controller work together to enable virtual device networking; The top-level SDN controller and the physical layer SDN controller work together to enable networking of physical devices; After the virtual device network and the physical device network are completed, they are connected to a Layer 3 switch to achieve a hybrid network of virtual devices and physical devices.

[0006] In a preferred embodiment, the top-level SDN controller and the cloud platform SDN controller work together to realize virtual device networking, including: The top-level SDN controller receives cloud platform network topology data for the network scenario to be built and decomposes it according to the network construction type; Based on the decomposed cloud platform network topology data, corresponding network orchestration instructions are generated and sent to the cloud management platform. Based on the network node objects contained in the network orchestration instructions, the cloud management platform breaks down the network orchestration instructions and distributes them to the corresponding virtualization nodes; The network service module in the virtualized node converts network orchestration instructions into network orchestration information and sends it to the cloud platform SDN controller; The cloud platform SDN controller modifies the flow table information and network configuration of the network orchestration information, and realizes virtual device networking by calling virtual devices based on virtual machines or containers.

[0007] In a preferred embodiment, the top-level SDN controller and the physical layer SDN controller work together to realize the networking of physical devices, including: The top-level SDN controller receives the network topology data of the physical devices in the network scenario to be built, and decomposes it according to the network construction type; Based on the decomposed network topology data of physical devices, the corresponding physical device orchestration instructions are generated and sent to the physical layer SDN controller. The physical layer SDN controller translates physical device orchestration instructions into physical layer switch configuration information, and uniformly orchestrates the interruption and connectivity relationships of physical layer switch ports; The physical layer SDN controller translates physical device orchestration instructions into SDN switch configuration information, including flow table policies and port attributes; Physical layer switches and SDN switches configure flow table policies and port attributes for physical devices according to the issued configuration information, thereby enabling the networking of physical devices.

[0008] In a preferred embodiment, after the virtual device network and the physical device network are completed, the virtualized nodes in the virtual device network and the physical switches in the physical device network are connected to a Layer 3 switch to achieve a hybrid network of virtual devices and physical devices.

[0009] In summary, due to the adoption of the above technical solution, the beneficial effects of the present invention are: In network test ranges, rapid simulation and construction of large-scale scenarios are crucial for revealing the network's dynamic characteristics, routing oscillations, and congestion control behaviors, directly impacting network attack and defense training effectiveness and performance evaluation. This invention designs a rapid virtual-physical networking method based on multi-level SDN control. This addresses the challenges of configuring massive numbers of virtual and physical devices during large-scale network scenario construction, which is time-consuming and labor-intensive. It also solves the problems of complex and error-prone wiring adjustments for physical devices. The multi-level SDN controller enables unified orchestration and hierarchical scheduling of network resources, effectively improving the speed of network scenario construction. Attached Figure Description

[0010] Figure 1 This is a schematic diagram illustrating a method for rapidly constructing virtual and physical networks based on multi-level SDN, as provided in an embodiment of the present invention.

[0011] Figure 2 This is a flowchart of virtual device networking in an embodiment of the present invention.

[0012] Figure 3 This is a flowchart of the physical device networking in an embodiment of the present invention. Detailed Implementation

[0013] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0014] Therefore, the following detailed description of the embodiments of the invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the invention without inventive effort are within the scope of protection of the invention.

[0015] like Figure 1 As shown, this invention provides a method for rapidly constructing virtual and physical networks based on multi-level SDN. Firstly, the architecture distinguishes between a top-level SDN controller, a cloud platform SDN controller, and a physical layer SDN controller. This method designs a multi-level SDN controller collaborative management mechanism, whereby the top-level SDN controller, cloud platform SDN controller, and physical layer SDN controller work collaboratively; wherein: The top-level SDN controller and the cloud platform SDN controller work together to enable virtual device networking; The top-level SDN controller and the physical layer SDN controller work together to enable networking of physical devices; After the virtual device network and the physical device network are completed, they are connected to a Layer 3 switch to achieve a hybrid network of virtual devices and physical devices.

[0016] like Figure 1 As shown, the collaborative work of the top-level SDN controller, cloud platform SDN controller, and physical layer SDN controller specifically includes: The top-level SDN controller receives the entire network scenario construction data, parses it into cloud platform network topology data and physical device network topology data, and then converts the corresponding parts into network orchestration instructions and physical device orchestration instructions. The network orchestration instructions and physical device orchestration instructions are then sent to the corresponding cloud platform SDN controller and physical layer SDN controller.

[0017] The cloud platform SDN controller receives network orchestration instructions forwarded from the top-level SDN controller by the cloud management platform, converts the network orchestration instructions into network orchestration information, and distributes the network orchestration information to virtualization nodes to build flexible scheduling of virtual machines and containers to realize virtual device networking.

[0018] The physical layer SDN controller receives the physical device orchestration instructions from the top-level SDN controller, and then converts the physical device orchestration instructions into physical switch configuration information and SDN switch configuration information. The physical switches and SDN switches then implement the physical device networking based on the configuration information.

[0019] After the virtual device network and the physical device network are completed, the virtualized nodes in the virtual device network and the physical switches in the physical device network are connected to the Layer 3 switch to achieve a hybrid network of virtual devices and physical devices.

[0020] like Figure 2 As shown, the top-level SDN controller and the cloud platform SDN controller work together to realize virtual device networking, including: The top-level SDN controller receives cloud platform network topology data for the network scenario to be built and decomposes it according to the network construction type.

[0021] Based on the decomposed cloud platform network topology data, corresponding network orchestration instructions are generated and then distributed to the cloud management platform using RESTful methods.

[0022] Based on the network node objects contained in the network orchestration instructions, the cloud management platform breaks down the network orchestration instructions and distributes them to the corresponding virtualization nodes.

[0023] The network service module in the virtualized node converts network orchestration instructions into network orchestration information and sends it to the cloud platform SDN controller.

[0024] The cloud platform SDN controller modifies the flow table information and network configuration content of the network orchestration information through the OVSDB protocol, and realizes virtual device networking by calling virtual devices based on virtual machines or containers.

[0025] like Figure 3 As shown, the top-level SDN controller and the physical layer SDN controller work together to realize the networking of physical devices, including: The top-level SDN controller receives the network topology data of the physical devices in the network scenario to be built, and decomposes it according to the network construction type.

[0026] Based on the decomposed network topology data of physical devices, corresponding physical device orchestration instructions are generated and then sent to the physical layer SDN controller in a RESTful manner.

[0027] The physical layer SDN controller translates physical device orchestration instructions into physical layer switch configuration information, and uniformly orchestrates the interruption and connectivity relationships of physical layer switch ports.

[0028] The physical layer SDN controller translates physical device orchestration instructions into SDN switch configuration information, including flow table policies and port attributes.

[0029] Physical layer switches and SDN switches use the OVSDB protocol to configure flow table policies and port attributes for physical devices according to the configuration information provided, thereby enabling the networking of physical devices.

[0030] As can be seen from the above, this invention achieves unified management and control of virtual and physical devices through a layered SDN design. The required device parameters in the entire network scenario topology can be edited and adjusted remotely through a single terminal, simplifying the complexity of network topology construction and improving the efficiency of network topology construction.

[0031] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A method for constructing a virtual-real network based on a multi-level SDN, characterized in that, Comprise: The top SDN controller, cloud platform SDN controller and physical layer SDN controller work together; wherein: The top SDN controller and cloud platform SDN controller work together to realize virtual device networking; The top SDN controller and physical layer SDN controller work together to realize entity device networking; After the virtual device networking and entity device networking are completed, the virtual device and entity device hybrid networking is realized by connecting the three-layer switch together. 2.The multi-level SDN based virtual-real network fast construction method of claim 1, wherein, The top SDN controller and cloud platform SDN controller work together to realize virtual device networking, comprising: The top SDN controller receives the cloud platform network topology data required to build the network scene, and decomposes according to the network construction type; According to the decomposed cloud platform network topology data, the corresponding network orchestration instruction is parsed and generated, and the network orchestration instruction is issued to the cloud management platform; According to the network node object contained in the network orchestration instruction, the cloud management platform splits the network orchestration instruction and issues it to the corresponding virtualization node; The network service module in the virtualization node converts the network orchestration instruction into network orchestration information and issues it to the cloud platform SDN controller; The cloud platform SDN controller modifies the flow table information and network configuration content of the network orchestration information, and realizes virtual device networking by calling the virtual device based on virtual machine or container. 3.The multi-level SDN based virtual-real network fast construction method of claim 2, wherein, The network orchestration instruction is issued to the cloud management platform in restful mode. 4.The method of claim 2, wherein, The cloud platform SDN controller modifies the flow table information and network configuration content of the network orchestration information through ovsdb protocol.

5. The multi-level SDN-based virtual real network quick construction method according to claim 1, characterized in that, The top SDN controller and physical layer SDN controller work together to realize entity device networking, comprising: The top SDN controller receives the entity device network topology data required to build the network scene, and decomposes according to the network construction type; According to the decomposed entity device network topology data, the corresponding entity device orchestration instruction is parsed and generated, and the entity device orchestration instruction is issued to the physical layer SDN controller; The physical layer SDN controller converts the entity device orchestration instruction into physical layer switch configuration information, and uniformly arranges the interrupt and connection relationship of the physical layer switch port; The physical layer SDN controller converts the entity device orchestration instruction into SDN switch configuration information, including flow table strategy and port attribute; The physical layer switch and SDN switch complete the configuration of flow table strategy and port attribute of entity device according to the issued configuration information, and realize entity device networking. 6.The multi-level SDN based virtual-real network fast construction method of claim 5, wherein, The entity device orchestration instruction is issued to the physical layer SDN controller in restful mode. 7.The multi-level SDN based virtual-real network fast construction method of claim 5, wherein, The physical layer switch and SDN switch complete the configuration of flow table strategy and port attribute of entity device according to the issued configuration information through ovsdb protocol, and realize entity device networking. 8.The multi-level SDN based virtual-real network fast construction method of claim 1, wherein, After the virtual device networking and entity device networking are completed, the virtual device and entity device hybrid networking is realized by connecting the three-layer switch together through the virtualization node in the virtual device networking and the physical switch in the entity device networking.

Images