A method and device for generating a global flow table based on SDN

Abstract

The embodiment of the invention discloses an SDN-based global flow table generation method and device, which are used to improve the integrity of the network and manage and control the data flow in the network. The method includes: the network device controller obtains the forwarding flow table stored on each switching device according to the set time interval, determines the set of information of the switching device with the same data flow identifier, and in each set according to the forwarding data flow Sequence, to determine the sequence of information of switching devices in the forwarding link. The embodiment of the invention also discloses a corresponding device. In the embodiment of the present invention, the switching devices belonging to the same forwarding link can be identified according to the forwarding flow table stored in the switching device, and the order of the switching devices in the forwarding link can be determined according to the order of forwarding data flows. Therefore, the information of each data flow in the current periodic network topology can be effectively obtained, so as to realize the management and control of the entire network data flow, contain malicious flows, and improve network security.

Description

Technical field [0001] The present invention relates to the field of communication technology, in particular to a method and device for generating a global flow table based on SDN. Background technique [0002] With the rapid development of Internet technology, many operational problems have appeared in large data centers, such as the lack of open interfaces for network equipment, poor interoperability between network equipment, and difficulty in expanding network scale. The development of Software-Defined Networking (SDN) has proposed possible solutions to the above problems. SDN reconstructs the existing network in the form of software, subverts the communication and management mode of the existing network, separates the control function from the network node, controls the flow in a programmable way, and builds a dynamic, open and controllable network environment . [0003] As a brand-new network architecture system, although SDN has many advantages, due to its structure, deplo...

AI Technical Summary

Problems solved by technology

[0003] As a brand-new network architecture system, although SDN has many advantages, due to the limitations of its structure, deployment and architecture, SDN-based does not have a global vision capability, and cannot perform centralized management and control and cross-device data flow. Complete restoration and analysis, only partial data can be detected

For example, when an SDN-based detection terminal detects a malicious data flow, it can only analyze the node data around the detection terminal, and cannot accurately monitor and suppress the data flow.

Images