在互联网时代,客户数量、应用场景和需求的不断变化,网络服务和应用程序需要具备对网络进行配置和管理的能力。软件定义网络(Software Defined Network SDN)提供了新的思路和工具,提供接口来满足上述需求。文章指出,使用Mininet和Open D...在互联网时代,客户数量、应用场景和需求的不断变化,网络服务和应用程序需要具备对网络进行配置和管理的能力。软件定义网络(Software Defined Network SDN)提供了新的思路和工具,提供接口来满足上述需求。文章指出,使用Mininet和Open Day Light,可以实现对网络环境的模拟,实现SDN。展开更多
针对分布式拒绝服务(DDoS)攻击难以在危害产生之前被检测和防御的问题,提出了一种基于软件定义网络(SDN)的面向恶意扫描的控制层实时防护机制。首先,分析了SDN相比传统网络在网络层防护技术上的优势;其次,针对网络攻击手段——恶意扫描...针对分布式拒绝服务(DDoS)攻击难以在危害产生之前被检测和防御的问题,提出了一种基于软件定义网络(SDN)的面向恶意扫描的控制层实时防护机制。首先,分析了SDN相比传统网络在网络层防护技术上的优势;其次,针对网络攻击手段——恶意扫描,提出了面向恶意扫描的控制层实时防护机制,该机制在SDN集中控制式架构的基础上,充分利用Open Day Light(ODL)控制器所提供的表述性状态传递(REST)应用程序编程接口(API)开发外部应用,实现了对底层交换机端口的检测、判定、防护三个环节;最后,对给出的方案在ODL平台上进行了编程实现,并实验测试了恶意扫描的检测防御方案。实验结果表明:当有端口正在对网络进行恶意扫描时,面向恶意扫描的控制层实时防护机制可以及时禁用该端口,实时起到对恶意扫描攻击的防护作用,进而在分布式拒绝服务攻击当中具有破坏性的行为还未开始时就对其进行了预防。展开更多
软件定义网络(Software Defined Network,SDN)及其主流协议OpenFlow通过解耦控制平面与数据平面,提供应用平面编程接口,给数据中心提供了更为方便的网络设备管理手段。本文基于OpenDayLight(ODL)控制器北向接口,在一个对外提供web服务...软件定义网络(Software Defined Network,SDN)及其主流协议OpenFlow通过解耦控制平面与数据平面,提供应用平面编程接口,给数据中心提供了更为方便的网络设备管理手段。本文基于OpenDayLight(ODL)控制器北向接口,在一个对外提供web服务的网络中,实现了控制用户访问某一TCP/IP协议端口的功能,并能使管理员进行实时配置。展开更多
随着网络应用的持续增加,如何提高现有网络资源的利用率成为一个重要的问题.SDN(Software Defined Network)将控制和转发进行分离,SDN集中控制的特性使得SDN控制器能够获取整个网络的信息.本文通过对OpenDaylight中网络信息的感知,给出...随着网络应用的持续增加,如何提高现有网络资源的利用率成为一个重要的问题.SDN(Software Defined Network)将控制和转发进行分离,SDN集中控制的特性使得SDN控制器能够获取整个网络的信息.本文通过对OpenDaylight中网络信息的感知,给出了带宽、时延和丢包率的计算方法,提出了一种基于OpenDaylight网络感知和用户需求进行路径选择的算法.然后通过计算链路目标函数的方式对算法又进行了改进,使得算法可以选出满足用户需求的最优或较优路径.通过编写OpenDaylight模块和对OpenDaylight中Dijkstra算法进行功能扩充两种方式实现了改进后的路径选择算法,最后通过实验验证了改进算法的可行性,并分析了改进算法对OpenDaylight控制器性能的影响.展开更多
As a new networking paradigm,Software-Defined Networking(SDN)enables us to cope with the limitations of traditional networks.SDN uses a controller that has a global view of the network and switch devices which act as ...As a new networking paradigm,Software-Defined Networking(SDN)enables us to cope with the limitations of traditional networks.SDN uses a controller that has a global view of the network and switch devices which act as packet forwarding hardware,known as“OpenFlow switches”.Since load balancing service is essential to distribute workload across servers in data centers,we propose an effective load balancing scheme in SDN,using a genetic programming approach,called Genetic Programming based Load Balancing(GPLB).We formulate the problem to find a path:1)with the best bottleneck switch which has the lowest capacity within bottleneck switches of each path,2)with the shortest path,and 3)requiring the less possible operations.For the purpose of choosing the real-time least loaded path,GPLB immediately calculates the integrated load of paths based on the information that receives from the SDN controller.Hence,in this design,the controller sends the load information of each path to the load balancing algorithm periodically and then the load balancing algorithm returns a least loaded path to the controller.In this paper,we use the Mininet emulator and the OpenDaylight controller to evaluate the effectiveness of the GPLB.The simulative study of the GPLB shows that there is a big improvement in performance metrics and the latency and the jitter are minimized.The GPLB also has the maximum throughput in comparison with related works and has performed better in the heavy traffic situation.The results show that our model stands smartly while not increasing further overhead.展开更多
文摘在互联网时代,客户数量、应用场景和需求的不断变化,网络服务和应用程序需要具备对网络进行配置和管理的能力。软件定义网络(Software Defined Network SDN)提供了新的思路和工具,提供接口来满足上述需求。文章指出,使用Mininet和Open Day Light,可以实现对网络环境的模拟,实现SDN。
文摘针对分布式拒绝服务(DDoS)攻击难以在危害产生之前被检测和防御的问题,提出了一种基于软件定义网络(SDN)的面向恶意扫描的控制层实时防护机制。首先,分析了SDN相比传统网络在网络层防护技术上的优势;其次,针对网络攻击手段——恶意扫描,提出了面向恶意扫描的控制层实时防护机制,该机制在SDN集中控制式架构的基础上,充分利用Open Day Light(ODL)控制器所提供的表述性状态传递(REST)应用程序编程接口(API)开发外部应用,实现了对底层交换机端口的检测、判定、防护三个环节;最后,对给出的方案在ODL平台上进行了编程实现,并实验测试了恶意扫描的检测防御方案。实验结果表明:当有端口正在对网络进行恶意扫描时,面向恶意扫描的控制层实时防护机制可以及时禁用该端口,实时起到对恶意扫描攻击的防护作用,进而在分布式拒绝服务攻击当中具有破坏性的行为还未开始时就对其进行了预防。
文摘软件定义网络(Software Defined Network,SDN)及其主流协议OpenFlow通过解耦控制平面与数据平面,提供应用平面编程接口,给数据中心提供了更为方便的网络设备管理手段。本文基于OpenDayLight(ODL)控制器北向接口,在一个对外提供web服务的网络中,实现了控制用户访问某一TCP/IP协议端口的功能,并能使管理员进行实时配置。
文摘随着网络应用的持续增加,如何提高现有网络资源的利用率成为一个重要的问题.SDN(Software Defined Network)将控制和转发进行分离,SDN集中控制的特性使得SDN控制器能够获取整个网络的信息.本文通过对OpenDaylight中网络信息的感知,给出了带宽、时延和丢包率的计算方法,提出了一种基于OpenDaylight网络感知和用户需求进行路径选择的算法.然后通过计算链路目标函数的方式对算法又进行了改进,使得算法可以选出满足用户需求的最优或较优路径.通过编写OpenDaylight模块和对OpenDaylight中Dijkstra算法进行功能扩充两种方式实现了改进后的路径选择算法,最后通过实验验证了改进算法的可行性,并分析了改进算法对OpenDaylight控制器性能的影响.
文摘As a new networking paradigm,Software-Defined Networking(SDN)enables us to cope with the limitations of traditional networks.SDN uses a controller that has a global view of the network and switch devices which act as packet forwarding hardware,known as“OpenFlow switches”.Since load balancing service is essential to distribute workload across servers in data centers,we propose an effective load balancing scheme in SDN,using a genetic programming approach,called Genetic Programming based Load Balancing(GPLB).We formulate the problem to find a path:1)with the best bottleneck switch which has the lowest capacity within bottleneck switches of each path,2)with the shortest path,and 3)requiring the less possible operations.For the purpose of choosing the real-time least loaded path,GPLB immediately calculates the integrated load of paths based on the information that receives from the SDN controller.Hence,in this design,the controller sends the load information of each path to the load balancing algorithm periodically and then the load balancing algorithm returns a least loaded path to the controller.In this paper,we use the Mininet emulator and the OpenDaylight controller to evaluate the effectiveness of the GPLB.The simulative study of the GPLB shows that there is a big improvement in performance metrics and the latency and the jitter are minimized.The GPLB also has the maximum throughput in comparison with related works and has performed better in the heavy traffic situation.The results show that our model stands smartly while not increasing further overhead.
