Mimic SDN controller construction method

Abstract

The invention discloses a mimic SDN controller construction method. The method comprises a control plane, a dispatching plane and a data plane. The control plane is used for realizing tasks of network control and management and providing multiple heterogeneous redundant controller executing parts. The data plane is used for finishing a data forwarding function in a network and comprises hardware facilities such as a switch and a router. The control plane communicates with the data plane through the dispatching plane. The dispatching plane comprises a forwarder, a sensor, a decider and a dispatcher. The mimic SDN controller construction method comprises following specific steps of step 1, collecting network state information and forwarding the information to the controller executives; step 2, carrying out sensing detection on network operation states in real time; and step 3, dispatching the controllers of the control plane dynamically, and carrying out voting output on the sent information by utilizing a majority judgment mechanism. The device has a management mechanism capable of sensing and dynamically dispatching the controllers; abnormal network operation resulting from a failure of a single controller is avoided; exterior attacks are difficult to capture the executing parts responsible for network management; and moreover, the security of the SDN is further improved through adoption of the majority judgment decision-making mechanism.

Description

Technical field [0001] The invention belongs to the technical field of network security, and specifically relates to a method and device for constructing a mimic SDN controller. Background technique [0002] In recent years, SDN has risen rapidly and has received extensive attention from academia and industry, and has been successfully applied in the field of commercial networks. The controller, as the core component of the control plane, plays a key role in the deployment and operation of SDN. Therefore, attacks on the controller, such as DDoS attacks and similar attacks based on loopholes and backdoor tampering with flow tables, have brought great challenges to the safe and efficient operation of the underlying network. Once an attacker successfully implements such an attack, it will cause the entire network to operate abnormally, inefficiently, or even paralyze. [0003] However, the existing SDN operating mechanism or controller security mechanism still has great shortcomings...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the problem that SDN cannot effectively guarantee the operation of SDN in the face of controller failure in the prior art, the present invention proposes a mimetic SDN controller construction method

Images