發(fā)布時(shí)間：2018-02-01 12:41

  本文關(guān)鍵詞： 數(shù)據(jù)流 OpenFlow 管控系統(tǒng) 網(wǎng)絡(luò)安全　出處：《北京郵電大學(xué)》2014年碩士論文　論文類型：學(xué)位論文

【摘要】：隨著網(wǎng)絡(luò)信息技術(shù)的不斷發(fā)展,網(wǎng)絡(luò)規(guī)模也因此不斷增長,現(xiàn)有互聯(lián)網(wǎng)承載的用戶業(yè)務(wù)數(shù)量日趨龐大、種類也日趨復(fù)雜。由于傳統(tǒng)的網(wǎng)絡(luò)體系中存在著網(wǎng)絡(luò)異構(gòu)化、架構(gòu)方面的設(shè)計(jì)缺陷等,己經(jīng)不足以滿足用戶對(duì)網(wǎng)絡(luò)可控性以及安全性方面的要求。而對(duì)傳統(tǒng)網(wǎng)絡(luò)進(jìn)行修補(bǔ)的方式,造成了的網(wǎng)絡(luò)中結(jié)構(gòu)的冗余和網(wǎng)絡(luò)異構(gòu)化,無法根本性解決當(dāng)前問題,只有通過一種新型的網(wǎng)絡(luò)體系架構(gòu),來滿足當(dāng)前互聯(lián)的發(fā)展需求,才能從根本上解決上述問題。 在2008年,美國斯坦福大學(xué)的Clean Slate項(xiàng)目組提出一種OpenFlow新型網(wǎng)絡(luò)模型,它的核心思想是將網(wǎng)絡(luò)的傳輸層面和控制層面進(jìn)行分離。OpenFlow的出現(xiàn),使人們可以自由的在網(wǎng)絡(luò)中部署各種新型協(xié)議和研究成果,為廣大的網(wǎng)絡(luò)研究人員提供了一個(gè)可擴(kuò)展、完全可控、可編程的網(wǎng)絡(luò)實(shí)驗(yàn)平臺(tái),使研究人員可以用戶OpenFlow控制器提供的多種可擴(kuò)展接口,可以實(shí)現(xiàn)對(duì)網(wǎng)絡(luò)的統(tǒng)一、靈活、高效管理和維護(hù),極大推動(dòng)和促進(jìn)了網(wǎng)絡(luò)的創(chuàng)新和發(fā)展。本文通過分析現(xiàn)有網(wǎng)絡(luò)中的不足,在深入研究OpenFlow網(wǎng)絡(luò)相關(guān)技術(shù)的基礎(chǔ)上,提出改進(jìn)的方案,研究并設(shè)計(jì)了一種基于OpenFlow網(wǎng)絡(luò)的數(shù)據(jù)流管控系統(tǒng)。 本文首先對(duì)當(dāng)今互聯(lián)網(wǎng)的現(xiàn)狀以及發(fā)展趨勢(shì)做了介紹,總結(jié)了現(xiàn)有互聯(lián)網(wǎng)技術(shù)中存在的問題,提出系統(tǒng)的功能需求,然后通過對(duì)OpenFlow網(wǎng)絡(luò)的原理以及相關(guān)技術(shù)進(jìn)行詳細(xì)的介紹,說明了利用OpenFlow技術(shù)解決現(xiàn)有網(wǎng)絡(luò)問題的實(shí)現(xiàn)方式。其次根據(jù)OpenFlow網(wǎng)絡(luò)的技術(shù)特點(diǎn),本文設(shè)計(jì)了一種集中式的網(wǎng)絡(luò)管控框架,對(duì)系統(tǒng)提出功能需求進(jìn)行模塊化設(shè)計(jì),并對(duì)每個(gè)模塊需要實(shí)現(xiàn)的功能進(jìn)行了詳細(xì)的闡述。在此基礎(chǔ)之上,對(duì)系統(tǒng)中的功能進(jìn)行實(shí)現(xiàn),并論述了包括個(gè)模塊的實(shí)現(xiàn)方案,以及使用到的相關(guān)技術(shù)和具體的實(shí)現(xiàn)細(xì)節(jié)。然后通過對(duì)系統(tǒng)的功能模塊進(jìn)行測(cè)試,驗(yàn)證系統(tǒng)實(shí)現(xiàn)功能的正確性。最后,對(duì)全文的主要工作進(jìn)行了總結(jié),闡述了系統(tǒng)中現(xiàn)有的不足,以及進(jìn)一步的改進(jìn)方向。
[Abstract]:With the continuous development of network information technology, the scale of the network is also growing, and the number of user services carried by the Internet is becoming larger and larger. Because of the network isomerization in the traditional network system, the design defects in the architecture, and so on. Has not enough to meet the users' requirements for network controllability and security. But the traditional network repair, resulting in the network structure redundancy and network isomerization. Only through a new network architecture to meet the development needs of the current interconnection, can the above problems be solved fundamentally. In 2008, the Clean Slate project team at Stanford University in the United States proposed a new OpenFlow network model. Its core idea is to separate the transmission layer and control level of network. OpenFlow makes people can freely deploy various new protocols and research results in the network. For the vast number of network researchers to provide a scalable, completely controllable, programmable network experimental platform, so that researchers can user OpenFlow controller to provide a variety of extensible interfaces. Can achieve the unity of the network, flexible, efficient management and maintenance, greatly promote and promote the innovation and development of the network. This paper analyzes the shortcomings of the existing network. Based on the research of OpenFlow network technology, an improved scheme is proposed, and a data flow management and control system based on OpenFlow network is studied and designed. This paper first introduces the current situation and development trend of the Internet, summarizes the existing problems in Internet technology, and puts forward the functional requirements of the system. Then the principle of OpenFlow network and related technologies are introduced in detail. This paper explains how to use OpenFlow technology to solve the existing network problems. Secondly, according to the technical characteristics of OpenFlow network, this paper designs a centralized network management and control framework. The function requirement of the system is designed by modularization, and the function of each module is described in detail. On this basis, the function of the system is implemented. And discusses the implementation scheme including a module, as well as the use of relevant technology and specific implementation details. Then through the system functional modules to test, verify the correctness of the system function. Finally. The main work of this paper is summarized, and the shortcomings of the system and the direction of further improvement are described.
【學(xué)位授予單位】：北京郵電大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前1條

1 邢戈,張玉清,馮登國;網(wǎng)絡(luò)安全管理平臺(tái)研究[J];計(jì)算機(jī)工程;2004年10期

，

本文編號(hào)：1481882