381 results about "Software define network" patented technology

The invention provides a private domain live broadcast bandwidth resource allocation and routing method and system based on reinforcement learning, and relates to the technical field of computer networks, and the method comprises the steps: collecting real-time data such as the number of users, geographical distribution, terminal types, content types, network delay, packet loss rate, bandwidth utilization rate and the like in a live broadcast room, and inputting the real-time data into a pre-trained reinforcement learning model; the model is based on a state space, features are extracted by using a deep neural network, bandwidth resource constraints are combined, and a bandwidth allocation and routing strategy is generated by adopting a strategy gradient algorithm; and according to the strategy, the software defined network controller adjusts bandwidth allocation parameters and routing table configuration in real time to realize differentiated bandwidth allocation and path optimization, establishes nearby access edge nodes based on user geographical distribution, and dynamically adjusts the path during congestion.

The invention discloses a network security active defense method and system for detecting abnormal network behaviors. The method comprises the following steps: S1, constructing a virtualized isolation network environment through a software defined network technology; s2, deploying intelligent dynamic camouflage nodes in the virtualized isolation environment; s3, acquiring a disguised node attack behavior, and identifying a network abnormal behavior through a deep learning technology; s4, extracting network abnormal behavior features, and identifying potential threats through a deep learning technology; s5, a defense mechanism is automatically triggered, a honeynet is started, and abnormal behaviors and potential threats are isolated; and S6, tracing an attack path, and carrying out source positioning. The network security active defense system comprises a network construction module, a deployment module, an identification module, a honeynet, an isolation module and a tracing module. The disguised nodes are deployed through the deployment module to detect abnormal network behaviors, active defense of network security is realized through the honeynet, the isolation module and the tracing module, and the network security is improved.

The invention provides a logic modeling-based high-orbit satellite network dynamic optimization method and an SDN controller, and the method comprises the steps: constructing a logic model corresponding to a high-orbit satellite network according to the attribute information of physical equipment and satellite links in the high-orbit satellite network, collecting the real-time state data in the network, and carrying out the calculation of the real-time state data. Updating logic attribute information in the logic model based on the real-time state data; when it is determined that the resource adjustment requirement exists, generating a resource adjustment control instruction according to the updated logic attribute information, the topological structure of the logic model and a preset service priority; converting the resource adjustment control instruction into an operable command and issuing the operable command to physical equipment; monitoring execution results of the physical devices, and returning to the step of collecting the real-time state data of the physical devices and the satellite links and updating the logic attribute information in the logic model based on the real-time state data. According to the method, dynamic adjustment and closed-loop optimization of resources in the high-orbit satellite network can be realized, and the flexibility, reliability and service quality of the network are improved.

A method and system for configuring a fifth generation (5G) network may include utilizing software-defined networking (SDN) for separating a data plane from a control plane of a 5G network. The separated control plane may be run across a low earth orbit (LEO) system between an edge network and a core network of the 5G network such that the LEO system exclusively directs the control plane. A pathway for the data plane may be determined and generated by the LEO system exclusively using the control plane. In some examples, SDN control may be established exclusively on a LEO system based on a service request. A pathway for the data plane from a first location to a second location may be determined and generated based on the service request and the control of the control plane on the LEO system.

The embodiment of the invention provides a security authentication method, device and system for a test platform, and a storage medium, and relates to the technical field of network security. The method comprises the following steps: performing fingerprint acquisition on virtual and real equipment to generate a unique identifier, dynamically slicing based on a software defined network to form an isolated test environment, and injecting a zero-trust access strategy associated with the fingerprint; and based on the zero-trust access policy and the device fingerprint, allocating a minimum permission through an attribute-based access control model, continuously evaluating device behaviors to calculate a dynamic trust score, and adaptively updating the permission according to the trust score. By constructing a full-process security certification system and through multi-dimensional mechanism cooperation, dynamic risk perception and timely strategy adjustment, fine-grained control of virtual and real equipment access in an industrial control scene is realized, the dynamic adaptability and risk resistance of a test platform in a complex network environment are improved, and the test efficiency is improved. Equipment access safety, authority distribution minimization and behavior monitoring continuity are ensured, and the safety risk of the industrial control system is reduced.

The invention relates to the technical field of power distribution station supervision, in particular to an intelligent auxiliary and artificial intelligence visual gateway control method and system for a station building, which monitors network state parameters in real time, calculates a network quality score and dynamically selects an optimal transmission path based on a reinforcement learning algorithm. Comprising a high bandwidth mode, a low delay mode and a disaster recovery backup mode, stage processing and dynamic compression are performed on transmission data according to data types and network quality scores, link switching and a local caching mechanism are automatically triggered when a network is abnormal, and finally, multi-gateway load balancing and visual monitoring are realized through a software defined network architecture. The problem of transmission delay or interruption caused by the fact that a static data transmission framework cannot adapt to network state changes in the prior art is effectively solved, and the reliability and the real-time performance of data transmission are remarkably improved through dynamic path optimization, intelligent hierarchical transmission and a fault self-healing mechanism.

The invention provides an SDN (Software Defined Network) inter-domain traffic engineering method based on reinforcement learning, which comprises the following steps of: deploying a data traffic demand monitoring platform and a control system, and constructing a global network topological graph; calculating a short link identifier for the link in the network and distributing the short link identifier to each network device; flow judgment is carried out, upward notification is carried out according to requirements, and pre-operation of intelligent routing is cooperatively completed; deploying a reinforcement learning model in the total intelligent body, outputting an optimal cross-domain path strategy to the cooperative controller, disassembling the optimal cross-domain path strategy into flow table rules which can be executed by each domain, and issuing the flow table rules to local controllers of related domains; and each local controller pushes the flow table configuration to the domain switching equipment to complete the forwarding decision of the flow. According to the method, a complete closed-loop process of flow measurement, intelligent decision making, cross-domain control and path issuing is realized, feasible reference is provided for actual deployment of an intelligent network, and the method has good engineering popularization value and is suitable for intelligent scheduling scenes such as an operator backbone network, an industrial internet and metro edge cloud.

The invention discloses a hospital internal network security isolation method based on an all-optical network architecture. The method comprises the following steps: S1, dividing a hospital internal network into a plurality of virtual optical slices by using an all-optical network slicing technology; s2, performing time domain isolation by using an optical time domain multiplexing technology, and transmitting data on different optical wavelengths by using a wavelength selective switching technology; s3, monitoring and managing bandwidth allocation through a software defined network control platform; s4, traffic prediction and resource optimization are carried out based on a decision tree integration algorithm; s5, detecting potential anomalies and security threats by using the graph neural network; s6, abnormal behaviors are detected through an isolation forest algorithm, and abnormal traffic is marked and isolated; s7, recording a network traffic log through a block chain technology; and S8, when a network fault occurs, using an intelligent self-healing mechanism to automatically switch redundant optical path resources and recover the optical path. According to the invention, all-optical network slicing and artificial intelligence technologies are fully utilized, and security isolation and resource optimization of a hospital internal network are realized.

The embodiment of the invention discloses a network resource allocation method and device based on load balancing, equipment and a medium. The method comprises the following steps: segmenting a physical wireless local area network into at least two virtual network slices by adopting a network function virtualization algorithm and a software defined network algorithm, and carrying out customized configuration on the at least two virtual network slices; determining a load state and an average load of the at least two virtual network slices, and determining a network resource allocation quantity of the at least two virtual network slices according to the load state and the average load; configuring corresponding service quality parameters for the at least two virtual network slices, and allocating processing tasks of different levels according to the service quality parameters; and dynamically adjusting the network resource allocation quantities of the at least two virtual network slices according to the network resource allocation quantities and the processing tasks of the corresponding levels. By adopting the scheme, the network resources are reasonably allocated, the communication requirements of different applications can be met, and the utilization rate of the network resources is improved.

The invention discloses a multi-factor network security authentication method and system based on an SDN (Software Defined Network). The method comprises the following steps: constructing a multi-dimensional authentication space comprising an identity feature dimension, a behavior feature dimension and an environment feature dimension in an SDN controller; decomposing the eigenvalues into deterministic sequence components and random sequence components by adopting a dynamic sequence decomposition method, and calculating the correlation degree of the eigenvalues among dimensions; according to the method, the stability index is calculated based on the feature stability evaluation function, the fusion authentication decision function is constructed to carry out authentication decision, safe and reliable network authentication is achieved through the technical means of multi-dimensional feature fusion analysis, dynamic sequence decomposition, self-adaptive decision and the like, and the method has high practical value.

The embodiment of the invention provides a distributed medical equipment management platform and method based on a zero-trust network. In the distributed medical equipment management platform based on the zero-trust network, an edge trusted access module adopts a hardware root of trust mechanism, so that equipment accessed for the first time is connected to a temporary supply network isolated from a medical core network, and a zero-trust security normal form is followed; the distributed trust anchor point cluster constructs a distributed identity verification network based on federated learning, and the access pre-authorization authority is verified through a device distributed identity identification (DID); the dynamic permission arrangement engine injects an attribute-based access control strategy, generates a permission token in combination with network micro-segmentation, and realizes two-way encryption communication between the equipment and a target service; the intelligent isolation gateway cuts off temporary connection through a software defined network technology and sends a network access state proof through a block chain mechanism, and edge module initialization is executed by a trusted node outside the medical cloud.

The embodiment of the invention provides a communication mode self-adaptive switching method, device and equipment based on an SDN (Software Defined Network), which are applied to the technical field of communication, and the method comprises the following steps: receiving a real-time monitoring result reported by a channel state monitoring unit, analyzing the monitoring result, and obtaining a current communication demand and channel state information; according to the current communication requirement and the channel state information, whether communication mode switching or transmission resource redistribution needs to be carried out is judged; if communication mode switching or transmission resource redistribution needs to be carried out, a corresponding instruction is generated and sent to the programmable network equipment; therefore, after the programmable network device receives the instruction, corresponding operation is executed, and communication mode switching or transmission resource redistribution is completed. In this way, the limitation of a single communication mode and fixed transmission resource allocation can be effectively overcome, and a more reliable, efficient and flexible communication solution is provided for the modern communication field.

The invention discloses a communication network bandwidth resource visualized dynamic allocation method and system based on an SDN, and relates to the technical field of communication networks, and the method comprises the steps: obtaining the channel interference intensity, the spectrum occupancy rate and the service flow priority data of each node in a wireless network based on a southbound interface of an SDN controller, and obtaining the channel interference intensity, the spectrum occupancy rate and the service flow priority data of each node through a channel resource dynamic allocation table; generating a multi-dimensional resource view; according to the multi-dimensional resource view, multi-level coverage domains of the wireless network are divided, the service load level of each coverage domain is identified, and a pre-allocation scheme of cross-domain bandwidth resources is generated; and executing a pre-allocation scheme of cross-domain bandwidth resources by using a northbound interface of the SDN controller, and adjusting bandwidth allocation parameters of each coverage domain. According to the invention, visual monitoring, accurate division and flexible scheduling of the network resource state are realized, and the utilization efficiency of network bandwidth resources is remarkably improved.

The invention relates to the technical field of computing power optical access networks, in particular to a cloud-side elastic PON resource management method, system and device based on an SDN (Software Defined Network). A flexible optical distribution network ODN of the network is formed by using an array waveguide grating, partition management and global control are performed on a cloud-edge elastic PON based on an SDN technology, partition fixed-point unloading is performed on user tasks by using a time delay-load cooperative unloading method and a routing strategy, and server computing resources and link spectrum resources are allocated. The problems that distributed computing nodes in an optical access network cannot sense each other, cooperative work cannot be achieved, computing resources are wasted due to the fact that computing tasks cannot be scheduled to an optimal node for computing, and the service quality cannot be guaranteed are solved. Under the computing power optical access network architecture, the end-to-end time delay demand of task unloading and the optimal network resource allocation are considered at the same time, the overall resource utilization rate of the network is further improved, and the average end-to-end time delay and the blocking rate are reduced.

The invention provides a DPU-based k8s cluster deployment method, apparatus and device, and a storage medium, and the method comprises the steps: a k8s receives a container instance deployed by a user, and determines two virtual function ports; acquiring an identifier of a corresponding device, and calling a network container interface; adding the virtual function port into the logic binding virtual function port according to the identifier, and adding the logic binding virtual function port into the kernel namespace of the container; allocating an IP address and an MAC address to the container network interface through a controller plug-in of the software defined network; adding two corresponding virtual function representative ports as sub-interfaces to the logic binding virtual function representative port, and setting the working mode of the logic binding virtual function representative port as a master-slave mode; establishing a logic binding uplink interface, adding an uplink interface, and setting the working mode of the uplink interface to be a master-slave mode; the representative interface and the uplink interface are added to the OVS network bridge; and the flow table and the configuration information related to the container are issued to the OVS instance, so that the reliability of network communication of the container instance in the cloud native cluster can be improved.

The invention provides a collaborative data migration scheduling method based on topology awareness and deep reinforcement learning, and the method comprises the steps: initializing system configuration, constructing a weighted graph comprising a source server, a working machine, a target storage and network equipment, carrying out the embedded processing of a graph structure through a graph neural network, and generating a node and a path representation vector; in combination with source data, a working machine and a target storage state, constructing a system state vector, inputting the system state vector into a deep reinforcement learning agent for decision making, and outputting a composite action including data block selection, working machine selection, path indexing and migration rate suggestion; the network control module converts path information into flow rules, the flow rules are issued and executed through the software defined network controller, the task management module continuously monitors the migration state and processes failed data blocks, and the integrity and non-repeatability of migration tasks are ensured. According to the method, the defects of an existing data migration system in the aspects of task allocation, path selection, resource control and dynamic adaptability can be overcome.

The invention provides a low-delay SDN (Software Defined Network) flow table updating method, and belongs to the technical field of network communication. The method comprises the following steps: firstly, proposing a shortest mobile rule chain for updating a single forwarding rule; and then, aiming at a plurality of concurrency rules which simultaneously reach the switch, designing a dynamic mode to update the concurrency rules, and heuristically updating the plurality of rules in a TCAM limited area, so that the flow table updating efficiency is improved. The method and the device are used for reducing updating delay caused by the rule dependency relationship.

The invention discloses an optimization system and method for SDN traffic engineering, and the method specifically comprises the following steps: S1, obtaining a traffic matrix in a network, and representing the network topology as a graph structure; s2, inputting the traffic matrix and the graph structure into a constructed feature extraction model, and outputting a feature vector; s3, inputting the feature vector into a deep reinforcement learning model for iterative optimization, and outputting an initial flow distribution proportion strategy; and S4, performing constraint optimization on the initial flow distribution proportion strategy, and outputting a final flow distribution strategy.

The invention discloses a smart campus Internet of Things multi-service collaborative scheduling control system based on an all-optical network, and relates to the technical field of Internet of Things, and the system comprises an Internet of Things digital platform which is in communication connection with the following modules: an all-optical network infrastructure module which is used for constructing an optical fiber backbone network in a campus, and each subsystem in the campus is accessed. The reliability and stability of the campus Internet of Things are enhanced by constructing all-optical network infrastructure, the subsystems are directly connected through optical fibers by adopting the passive optical network technology, and the use of active equipment is reduced, so that the equipment failure rate and the maintenance cost are reduced, optical wavelength resources are dynamically allocated by utilizing a software defined network controller, and the reliability and the stability of the campus Internet of Things are improved. The transmission path is adjusted according to the service priority, efficient operation of key services is ensured, network stability is improved, high speed and safety of data transmission are guaranteed, and solid network support is provided for various intelligent applications in the campus.

The invention relates to the technical field of communication, and discloses a route synchronization method, device, system and equipment among multiple SDN clusters and a medium, and the method comprises the steps: obtaining neighbor configuration information issued by a central controller based on a target BGP service; establishing a neighbor relationship between the target BGP service and other BGP services according to the neighbor configuration information; obtaining first node address information of a target SDN cluster collected by the target SDN controller based on the target BGP service, and generating first routing information; and sending the first routing information to other BGP services which establish the neighbor relationship. According to the invention, the BGP service and the SDN controller are utilized to realize the coordination of the control planes, the BGP service and the SDN controller form a double-layer control plane, and the double-layer control plane is utilized to issue the routing forwarding strategy, so that flooding on the data plane is effectively avoided, and the routing synchronization efficiency is improved.

The invention provides a flow control method based on a software-defined network, which belongs to the technical field of data processing, and comprises the following steps of: 1, acquiring port data and link data of a switch in the software-defined network, and determining a network topology structure; 2, acquiring real-time flow data in the software defined network, and analyzing a network topology structure and the real-time flow data to determine adjustment path data; 3, determining a traffic adjustment strategy and a traffic forwarding rule based on the network topology structure and the adjustment path data; and step 4, executing the flow forwarding rule to realize the flow control of the software defined network. The method can deal with sudden flow fluctuation and link faults in the network and quickly respond, automatically optimize flow distribution and route selection, improve the bandwidth utilization rate and resource utilization rate of the network, reduce congestion and delay, adapt to a complex flow mode and a high-load and time-varying network environment, and improve the flexibility, reliability and efficiency of the network.

A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

A distributed network that may include multiple links; and multiple physical nodes that in communication with each other via the multiple links, to form multiple redundant paths, wherein at least some of the redundant paths form a daisy chain; wherein the multiple physical nodes comprise output ports configured to interface with external hosts. The multiple physical nodes are configured to supports software defined networking (SDN).

The invention discloses an edge data transmission optimization method based on energy consumption minimization and load balancing, which belongs to the technical field of edge computing, is realized through a system consisting of a central control server, an edge node, a transmission link and an SDN (Software Defined Network) controller, and comprises the following steps: S1, network topology modeling and data collection; s2, link selection optimization is carried out; s3, topological optimization and dynamic adjustment are carried out; s4, executing and controlling data transmission; s5, performing adaptive dynamic adjustment; and S6, the steps S1 to S5 are executed in a circulating mode. According to the method, a multi-target reinforcement learning algorithm is adopted, and joint optimization of energy consumption minimization and load balancing is achieved in edge data transmission; transmission links are dynamically adjusted and redundant nodes and links are closed, so that the overall energy consumption of the system is reduced; through link classification and load balancing optimization, the data transmission efficiency and the network stability are improved; and a heuristic factor and a Chebyshev scaling function are introduced, so that the convergence speed of the algorithm is accelerated.

The present disclosure relates generally to an SDN providing DNS resolution for a non-SDN service. In particular, the SDN hosts a first endpoint communicatively coupled with the non-SDN service. The SDN also hosts a DNS proxy in support of a second private network of a customer. A second endpoint of the customer can be accessible via the second private network The non-SDN service can send a DNS resolution request (that includes, for example, an FQDN of the second endpoint) to the first endpoint. The first endpoint forwards this request to the DNS proxy. In turn, the DNS proxy determines the IP address of the second endpoint and returns a reserved IP address corresponding to the DNS proxy and mapped to the second endpoint's IP address. The first endpoint sends this DNS resolution to the non-SDN service that then learns that the FQDN is resolved to the reserved IP address.

The invention relates to the technical field of computer network optimization and controller load balancing, and discloses an SDN (Software Defined Network) controller load balancing method based on a graph neural network and an evolutionary algorithm. Constructing a graph model and splicing to obtain a feature matrix; normalizing an adjacent matrix, performing feature aggregation and updating on a feature matrix by using a multilayer graph convolutional network, outputting a high-dimensional embedded vector, setting a final state representation and reward function of a controller, and obtaining a scheduling strategy adapted to a dynamic network environment through meta-reinforcement learning and actor reviewer network training; performing global search on parameters of meta reinforcement learning in a simulation environment to find an optimal solution; the method comprises the following steps: acquiring the newest state of each controller in real time, updating and embedding through a pre-trained GCN, outputting a scheduling strategy by using a trained meta-reinforcement learning model according to a global state, and performing online parameter fine tuning and updating on a network by using Q-learning at the same time.

The invention relates to an SDN-based subnet address allocation method and system. The method comprises the steps of obtaining an initial network configuration requirement; collecting network information in real time; based on network information and initial network configuration requirements, dynamically dividing address fields by adopting a self-adaptive subnet division algorithm, and generating corresponding subnet configuration and a dynamic address pool; when a DHCP request is received, an available IP address is selected from the dynamic address pool according to a pre-formulated IP address allocation strategy, a corresponding DHCP response message is generated, and the DHCP response message is sent to request equipment to complete address allocation; real-time data after address allocation are monitored in real time, the real-time data comprise IP address use conditions, equipment load data and topological changes, and subnet configuration and a dynamic address pool are dynamically adjusted according to the real-time data. The application has the effect of improving the utilization efficiency of the address resources.

The invention relates to the technical field of network security, and discloses an SDN (Software Defined Network)-based large-scale host vulnerability identification and attack response simulation method, which comprises the following steps of: 1, creating a network topology through a Mininet script; the method comprises the following steps of: 1, acquiring a host vulnerability identifier, 2, configuring vulnerability attributes for the host by using a JSON format in an SDN network environment, and 3, based on the host vulnerability identifier, selecting a corresponding attack strategy and executing a simulation attack, monitoring network flow and a host state in real time through an SDN controller, identifying an abnormal behavior and triggering a response mechanism. According to the method, the vulnerability attribute in the JSON format is configured for each host node, and an attacker is supported to detect and position the target host based on specific vulnerability characteristics by utilizing the centralized analysis capability of the SDN controller, so that the simulation capability of a network security simulation environment to a real attack scene is remarkably improved; the limitation that a traditional method is difficult to reflect vulnerability details is solved.

The invention discloses a virtuality and reality combined method and system for dynamically reconstructing diversified network topology, and belongs to the technical field of novel power systems, and the method comprises the following steps: virtualizing physical equipment in a power system business scene network by using NFV to obtain virtual equipment; constructing a network architecture for realizing a service scene network of the power system by adopting a virtualization mode; physical equipment and virtual equipment in the service scene network of the power system are controlled in a centralized manner based on the SDN; and the SDN controller dynamically reconstructs the service scene network of the power system according to a set strategy. According to the invention, dynamic allocation of network resources and real-time reconstruction of topology are realized through a virtuality and reality combination technology, a software defined network technology and a network function virtualization technology, and virtualized resources and resources of physical equipment can be effectively integrated so as to quickly respond to changes of application requirements.

The invention provides a wireless Mesh network reliability guarantee method based on adaptive network coding. The method comprises the steps of routing initialization, dynamic weight adjustment, link selection, network coding and data transmission. The method comprises the following steps: firstly, in a routing initialization step, each node discovers a neighbor node and establishes a Mesh network structure; in the dynamic weight adjustment step, a weight matrix is adjusted according to different service types (such as video streams and audio streams) so as to optimize the transmission reliability and the resource utilization rate; in the link selection step, an optimal link path is selected by constructing a state matrix and adopting an E-D algorithm, so that the transmission reliability and efficiency are improved; in the network coding and data transmission steps, the optimal coding degree and redundancy are calculated through a Gaussian process (GP) model so as to adapt to the dynamic change of the network environment and improve the transmission robustness. According to the invention, the software defined network (SDN) controller is utilized to manage the routing in a unified manner, and the link selection strategy can be flexibly adjusted according to service requirements. By collecting the state information of each node in the network, the system adaptively adjusts the coding parameters and weight configuration of the nodes, and selects the optimal route according to the performance of the nodes. According to the method, the packet loss rate and delay in the data packet transmission process are effectively reduced, and the transmission efficiency and reliability of the multi-hop wireless Mesh network are improved.