Central controller protection method, device and system

Abstract

The invention discloses a central controller protection method, equipment and system, belonging to the field of network security. The method includes: receiving the data packet sent by the terminal, matching the data packet with the flow table stored in the egress gateway; when the data packet does not match the stored flow table, accumulating the Counting value; when the time used for accumulating the counting value to the early warning threshold value is less than the predetermined time length threshold, an early warning message is sent to the central controller, and the early warning message is used to trigger the central controller to back up the information stored in the central controller to the redundant control The controller, together with the redundant controller, processes the data packet reported by the central controller. The present invention solves the problem in the related art that only illegal users can access the information in the organization's intranet from unauthorized access, and wirelessly avoids the central controller in the organization's intranet from being attacked; The effect of machine risk.

Description

technical field [0001] The invention relates to the field of network security, in particular to a central controller protection method, equipment and system. Background technique [0002] In order to better provide reliable Internet services for the fourth-generation mobile communication users, it is proposed to conduct mobile communication user access through centralized control in the future mobile Internet design. Software Defined Network (English: Software Defined Network, referred to as: SDN) adopts the idea of ​​centralized control, and its core technology OpenFlow realizes flexible control of network traffic by separating the control plane of network equipment from the data plane. The central controller in the SDN network architecture is the core of the entire network and is responsible for the functions of the entire network control plane. Once the central controller in the SDN is attacked, it will bring serious problems to the entire network. Therefore, the protect...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem in the prior art that can only prevent unauthorized users from accessing information in the organization’s intranet without authorization, and wirelessly prevent the central controller in the organization’s intranet from being attacked, the embodiment of the present invention provides a central controller protection method and equipment and system

Images