Agent-Based Network Scanning for SDN Address Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Software-Defined Networking (SDN) environments, retrieving address information for virtual machines deployed across different networks is challenging due to security constraints, as conventional network scanning tools like NMAP are designed for local networks and cannot access hardware address information of remote networks, and management platforms like VMware vCenter Server are limited to specific virtualization technologies.
Innovation Solution
An agent-based network scanning approach is implemented, where a network scanning controller deploys agents in each network to obtain address mapping information, which is then aggregated to provide comprehensive address information across multiple networks, using tools like NMAP utilities and secure authentication mechanisms to ensure data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If conventional network scanning tools like NMAP are used, then local network address information can be retrieved, but remote network address information cannot be accessed due to security constraints
Solution Approach 1:
The patent introduces network agents as intermediary components deployed within each remote network to collect address information locally. These agents act as mediators between the scanning controller and remote networks, gathering MAC address, IP address, and workload identification information without requiring direct access from the controller to remote networks, thus overcoming security constraints while maintaining information retrieval capability
Solution Approach 2:
The patent segments the network scanning function by deploying independent agents in each remote network. Instead of a single centralized scanner attempting to access all networks, the system divides the scanning task into multiple distributed agent instances, each responsible for collecting information within its local network segment, then aggregating results back to the controller
2Loss of information
If management platforms like VMware vCenter Server are used, then specific virtualization technology address information can be obtained, but compatibility with diverse virtualization technologies is limited
Solution Approach 1:
The patent implements universal network agents that can operate across multiple virtualization technologies (VMware, KVM, Xen, etc.) and physical networks. The agents use standardized network protocols and identification methods that are common across different virtualization platforms, enabling a single agent design to collect address information from diverse environments without requiring technology-specific implementation details
Solution Approach 2:
The network agents autonomously perform address information collection within their respective networks using local network protocols and workload identification mechanisms. Each agent independently queries workloads for their address mapping information without requiring external management platform intervention, making the system adaptable to any virtualization technology that supports standard network communication
3Loss of information
If agents are deployed in each network to obtain address mapping information, then comprehensive address information across multiple networks can be retrieved, but system complexity increases
Solution Approach 1:
The patent merges the functionality of multiple distributed agents through a centralized aggregation mechanism. Individual agent-collected address mapping information is combined and aggregated by the scanning controller to produce comprehensive network-wide address information. This merging approach allows the system to achieve comprehensive coverage while managing complexity through centralized coordination and data aggregation
Data Source
AI summary
Example methods are provided for a network scanning controller to perform agent-based network scanning in a software-defined networking (SDN) environment. In one example, the method may comprise identifying multiple networks for which network scanning is required, performing a first network scan using a first agent to obtain first address mapping information associated with multiple first workloads, and performing a second network scan using a second agent to obtain second address mapping information associated with multiple second workloads. The first agent and the multiple first workloads may be located in a first network, and the second agent and the multiple second workloads in a second network. The method may also comprise generating aggregated address information based on the first address mapping information and the second address mapping information.