面向SDN的动态网络策略部署与实现

doi:10.11959/j.issn.1000-0801.2016273

Abstract

Abstract:

Software defined networking（SDN）provides a new solution for management requirements of the future network. Based on dynamic service function chain as the creation model of service function, advanced network programming language as a service deployment tools, and combined with virtual network mapping theory, a deployment scheme which could take services to policies, and take controllers to network nodes was designed. Based on the three-layer structure of the SDN, a dynamic policy management system was proposed. It can implement self-adaption deployment of network service, which based on the feedback information of the network state. Besides, it can detect network policy conflicts on the network note and choose different ways of combination to avoid policy conflicts. Finally, the complete deployment process of the dynamic policy management system was verified through some experiments.

Key words: SDN, advanced network programming language, service function chain, network policy, service deployment

Ligang DONG,Bohan HE,Tijie XU,Shuocheng FEI,Weiming WANG. Deployment and implementation of dynamic network policy in SDN[J]. Telecommunications Science, 2016, 32(10): 137-149.

Figures/Tables 18

References 17

[1]	郑毅，华一强，何晓峰 . SDN 的特征、发展现状及趋势[J]. 电信科学， 2013,29(9):102-107. ZHENG Y , HUA Y Q , HE X F . Characteristics, development and future of SDN[J]. Telecommunications Science, 2013,29(9):102-107.
[2]	OpenFlow Switch Consortium. OpenFlow version 1.5.0 switch specification[S]. 2015.
[3]	CHOWDHURY N M M K , BOUTABA R . A survey of network virtualization[J]. Computer Networks, 2010,54(5): 862-876.
[4]	GUO C J , SUN W , HUANG Y , et al. A framework for native multi-tenancy application development and management[C]// IEEE International Conference on E-Commerce Technology, andEnterprise Computing, E-Commerce, and E-Services, IEEE Computer Society, July 23-26,2007, Tokyo, Japan. New Jersey:IEEE Press, 2007: 551-558.
[5]	MONSANTO C , FOSTER N , HARRISON R , et al. A compiler and run-time system for network programming languages[J]. ACM SIGPLAN Notices, 2012,47(1): 217-230.
[6]	REICH J , MONSANTO C , FOSTER N , et al. Modular SDN programming with Pyretic[J]. USENIX; login, 2013,38(5): 128-134.
[7]	KIM H , REICH J , GUPTA A , et al. Kinetic: verifiable dynamic network control[C]// 12th USENIX Symposium on Networked Systems Design and Implementation（NSDI 15）, May 4-6,2015, Berkeley, CA, USA. New Jersey:IEEE Press, 2015: 59-72.
[8]	HALPERN J , PIGNATARO C . Service function chaining（SFC） architecture[EB/OL]. (2015-11-10)[2016-06-30]. .
[9]	薛森，符刚 . SDN/NFV 的 Service Chaining 关键技术研究[J]. 邮电设计技术， 2015(2):1-6. XUE M , FU G . Research on key technologies of service chaining based on SDN/NFV[J]. Designing Techniques of Posts and Telecommunications, 2015(2):1-6.
[10]	JOHN W , PENTIKOUSIS K . AGAPIOU G, et al. Research directions in network service chaining[C]// 2013 IEEE SDN for Future Networks and Services（SDN4FNS）, Nov 11-13,2013, Trento, Italy. New Jersey:IEEE Press, 2013: 1-7.
[11]	QUINN P , ELZUR U . Network Service Header[EB/OL]. (2016-05-26)[2016-06-30]. .
[12]	GUICHARD J , SMITH M , KUMAR S , et al. Network service header （NSH）context header allocation（Data Center）[EB/OL]. (2016-02-16)[2016-06-30]. .
[13]	DHODY D , BOUCADAIR M . PCEP Extensions for Service Function Chaining（SFC）[EB/OL]. (2016-03-07)[2016-06-30]. .
[14]	BOUCADAIR M . Service function chaining（SFC）control plane components＆requirements[EB/OL]. (2016-5-2)[2016-06-30]. .
[15]	SZYRKOWIEC T , MUNOZ R , VILALTA R , et al. Demonstration of SDN based optical network virtualization and multidomain service orchestration[C]// 2014 Third European Workshop on Software Defined Networks（EWSDN）, Sep 1-3,2014, Budapest,Hungary. New Jersey:IEEE Press, 2014: 137-138.
[16]	CANINI M , KUZNETSOV P , LEVIN D , et al. Software transactional networking: concurrent and consistent policy composition[C]// The Second ACM SIGCOMM Workshop on HotTopics in Software Defined Networking, Aug 12-16,2013, Hong Kong, China. New York:ACM Press, 2013: 1-6.
[17]	QUINN P , NADEAU T . Problem statement for service function chaining[EB/OL]. (2015-04-12)[2016-06-30]. .

Metrics

Recommended 0

No Suggested Reading articles found!

序号	条件	动作	组合类型	处理方式	实例
1	无交集	一致	无冲突	合并
2		不一致	无冲突	分类并行
3	有交集	一致	无冲突	合并	同实例1
4		不一致，至少一方的动作为分组丢失	强冲突	排他
5				串行
6		动作为不同目的的转发	弱冲突	排他	同实例4
7				串行	同实例5
8				复制并行

含义	流表项	策略条件或动作
目标地址	dl_dst	Dstaddr
源地址	dl_src	SrcAddr
目标端口	tp_dst	Dstport
源端口	tp_src	Srcport
服务类型	nw_tos	tos
数据分组类型	dl_type	ethtype
协议类型	nw_proto	protocol
所在VLAN编号	dl_vlan	vlan_id
VLAN优先级	dl_vlan_pcp	vlan_pcp
转发动作	output	fwd

Deployment and implementation of dynamic network policy in SDN

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 18

References 17

Related Articles 15

Metrics

Recommended 0

[1]	Yanxia TAN, Guangquan WANG, Zelin WANG, Yanlei ZHENG, He ZHANG, Chenfang ZHANG, Sai HAN, Shikui SHEN. Research on technical scheme of SDN intelligent management and control orchestration system [J]. Telecommunications Science, 2023, 39(3): 143-152.
[2]	Chuanhuang LI, Jingjing TANG, Yangting CHEN, Rui LEI, Chao CHEN, Weiming WANG. Dynamic scheduling method of service function chain executors based on the mimic defense architecture [J]. Telecommunications Science, 2022, 38(4): 101-112.
[3]	Xiaochun WU, Chen HONG, Yue ZHANG, Junnan ZHANG, Jingjing ZHOU. Variable granularity service function chain mapping algorithm based on microservice architecture [J]. Telecommunications Science, 2022, 38(12): 11-26.
[4]	Yue ZHANG, Junnan ZHANG, Xiaochun WU, Chen HONG, Jingjing ZHOU. Improved grey wolf optimization algorithm based service function chain mapping algorithm [J]. Telecommunications Science, 2022, 38(11): 57-72.
[5]	Tai LIU, Chao ZHU, Yi CHENG, Yiming WANG. Research on SDN based tactical communication network architecture [J]. Telecommunications Science, 2022, 38(10): 120-130.
[6]	Daoyun HU, Jin QI, Qianchun LU, Feng LI, Hongqiang FANG. Research and application of traffic engineering algorithm based on deep learning [J]. Telecommunications Science, 2021, 37(2): 107-114.
[7]	Shuo QUAN, Xuliang WANG, Zeya ZHU. Research and practice of software-defined security technology architecture in the 5G+ era [J]. Telecommunications Science, 2021, 37(12): 60-71.
[8]	Le ZHANG, Yanqin WU, Ke ZHANG, Dongfeng MAO, Song JIANG, Huawei HU. Research and implementation of intelligent endogenous technology for SDN cooperative controller [J]. Telecommunications Science, 2021, 37(12): 101-109.
[9]	Yanshang YIN, Tongpeng SUO, Ligang DONG, Xian JIANG. SDN security prediction method based on bayesian attack graph [J]. Telecommunications Science, 2021, 37(11): 75-85.
[10]	Huiguang CHEN, Huan LI. Orchestration system architecture design and implementation of smart line service [J]. Telecommunications Science, 2021, 37(10): 152-161.
[11]	Xiongyan TANG,Haijun WANG,Hongbo YANG. Key technologies and application of optical transport network for leased line services [J]. Telecommunications Science, 2020, 36(7): 18-25.
[12]	Chang CAO,Shuai ZHANG,Ying LIU,Xiongyan TANG. Convergence of telco cloud and bearer network based computing power network orchestration [J]. Telecommunications Science, 2020, 36(7): 55-62.
[13]	Jinglin LI,Xiaolan WAN. SDN resolve space-ground integrated network based on end side computing [J]. Telecommunications Science, 2020, 36(7): 80-91.
[14]	Ping XIE,Xiaosong LIU. Security of the deployment of SDN-based IoT using blockchain [J]. Telecommunications Science, 2020, 36(12): 139-146.
[15]	Yongmei GAO,Guanjie CHENG. Data-intensive service deployment based on edge computing [J]. Telecommunications Science, 2019, 35(7): 87-99.