SDN技术和产业分析及运营商应对策略建议

软件定义网络（SDN）提出了一种全新的网络设计理念,强调控制与转发的分离以及网络的可编程,实现网络架构的开放。SDN正和云计算一道重塑互联网网络模型和产业结构。介绍了SDN的基本概念、本质及特征,分析了SDN核心技术体系及其产业发展现状,从运营商视角探讨了SDN对未来网络的影响,并给出了相应的应用建议。     

SDN控管监平台在IP播出系统中的应用

探讨软件定义网络（Software Defined Network,SDN）控管监平台在IP播出系统中的作用及其与播出系统形成的互补关系，分析SDN控管监平台与播出系统融合的设计要点和实现方法，为电视台未来IP播出系统建设提供思路。     

基于SDN的网络虚拟化仿真研究

软件定义网络的集中控制和可编程能力解决了传统网络虚拟化技术的弊端。为了进一步研究网络虚拟化技术,采用Mininet、OpenVirteX和Floodlight等软件,提出一种基于SDN的网络虚拟化仿真平台实现方案。总结了SDN网络和网络虚拟化特性,介绍了基于SDN的网络虚拟化仿真平台的系统架构,验证了其功能和隔离特性。提出的仿真平台为基于SDN技术的网络虚拟化创新提供了良好的平台支撑。     

软件定义网络关键技术及相关问题

软件定义网络(Software Defined Network,SDN)是基于Openflow的网络架构,其通过将网络设备控制面板与数据面分离的方式提高网络流量灵活度,并为网络及应用的创新提供技术平台与服务。灵活度、开放度以及可编程性提高的同时也影响着网络安全,限制了SDN的应用。为此,必须深入研究SDN架构、关键技术、特性等,分析SDN及OpenFlow的实际应用,并对SDN发展趋势做出预测与展望。     

层次化跨区域SDN验证示范系统的设计与建设

软件定义网络（SDN）架构给网络带来了卓越的灵活性和可管理性。为了给新型SDN技术与应用提供大规模可行性验证试验床与试点部署平台,提出了依托于CERNET的层次化跨区域SDN 异地验证示范网络试验系统的总体架构,建设了9个城市、13个节点的SDN验证示范核心网与包含3个数据中心的接入网,并对基于SDN的vCPE智能专线业务、IPv4/IPv6过渡技术、流量监控调度应用和数据中心应用进行验证与示范。     

软件定义的无人机网络架构研究综述

软件定义网络（Software Defined Network,SDN）依靠着其集中控制、可编程性和数控分离等优点,能够有效解决无人机网络（Flying Ad Hoc Network,FANET）面临的任务拓扑高度变化、网络链路连接不稳定、网络安全防护脆弱以及应用程序的异构性等问题,极大地提升FANET的灵活性和可靠性。针对SDN架构与FANET的结合问题,描述了SDN的体系架构,并以SDN控制器部署方式为关注点分类别概括了近几年软件定义无人机网络（Software-defined Flying Ad Hoc Network,SD-FANET）的研究进展,重点阐述了结合移动边缘计算（Mobile Edge Computing,MEC）的SD-FANET研究现状,最后指出了SD-FANET的应用场景和一些具体的未来研究方向。     

校园级SDN创新试验平台的研究与实践

网络创新试验平台已成为未来网络技术研究的重要基础设施,文章全面阐述了软件定义网络(SDN)创新试验平台的研究与建设工作。在介绍网络拓扑规划的基础上,重点分析了数据和控制平面设计以及平台管理系统。利用定制设计研发的网络虚拟化控制平台,对全网资源进行统一管理,保证虚网间的高效隔离,良好地支持了网络安全、云计算、物联网业务等方面的实验示范。     

基于SDN技术的网关管理平台云化建设方案

文章描述网关终端从完整版智能网关演进至SDN（软件定义网络）网关的过程，说明SDN家庭网关管理平台在网关轻量化后成为业务管理和实现的关键。阐述SDN家庭网关管理平台的功能架构和技术架构，给出构建平台的云化部署方案，涵盖部署原则、节点架构、资源模型、云化组网、带宽保障等。最后基于系统组件的安全运行机制以及多节点之间的容灾机制给出平台的高可用方案。     

SDN试验床网络虚拟化切片机制综述

未来网络体系架构和关键技术的研究需要灵活开放的测试验证环境,基于传统分布式的网络架构难以达到动态虚拟化、有效管控和新协议灵活部署的需求。随着软件定义网络（SDN）技术的出现和发展,上述问题找到了有效的解决途径,因此,基于SDN构建网络试验床成为了近年来该领域的主流研究方向之一。其中,基于SDN的网络虚拟化切片技术更是试验床中的核心支撑技术,可以根据不同试验的需求切分物理网络资源,从而提供并行、独立的网络环境。将重点研究基于SDN的试验床中使用的网络虚拟化切片机制,从“流量识别和切片网络标识”、“虚拟节点抽象”和“虚拟链路抽象”这3个关键技术出发,对当前基于SDN试验床中的典型网络虚拟化切片机制进行介绍与分析,并总结了该领域未来可行的研究方向。     

基于SDN的卫星LTE融合网络及其性能仿真

软件定义网络技术SDN将网络控制功能与转发功能分离,使网络架构变得简明清晰。在简述传统卫星网络和地面LTE网络优势的基础上,概述卫星LTE星地融合网络,将SDN技术的核心思想引入卫星网络,提出基于SDN的卫星LTE融合网络架构,使用NS-3网络仿真软件实现对所提融合网络模型的仿真平台搭建,通过对不同场景下仿真数据的分析,评估所构建网络的性能,给出SDN卫星LTE融合网络的优势。     

云计算层次服务关联机制及SaaS模式下数据安全取向的研究

本文首先介绍了云计算特征与分类、云服务模式,其次,由云计算的开放类型：公有云、私有云、混合云等展开叙述,分析了云计算体系结构与云服务模式融合、云计算层次结构与服务类型关联机制、SaaS#系结构与安全隐患,最后阐述了SaaS模式下数据的安全取向,具体分析了系统管理与物理安全、数据传输与网络安全、数据存储与冗余备份、强化软件效用提升云服务安全等。     

SDN体系架构中元模型构建机制

微服务是现代应用架构的新方法,其特点在于将复杂的应用功能分解到离散、独立的服务中,以实现应用方案的解耦,并且各个服务可以单独开发、部署及扩展。应用的变化必然驱动着底层网络的变化,可重构基础网络体系架构旨在通过网络重构机制来弥补网络业务需求与网络基础传输能力之间的差距。融合可重构和软件定义网络技术,提出了一种SDN体系架构中元模型的构建机制,旨在将SDN体系架构中各层的服务以元模型的方式呈现,并且在借鉴AKF三维伸缩模型之后,提出了一种基于正交分解的元模型的构建方法。最后通过理论分析和开发实例,验证了基于正交分解的元模型构建方法的可行性。     

基于SDN/NFV的未来网络实验平台

依据SDN/NFV集中管控、动态、灵活、高效、可编排等特点,提出了基于SDN/NFV技术的未来网络实验平台的构建方案.该平台主要采用OpenStack和OpenDaylight的开源架构,同时研发设计SDN跨域虚拟网络通信、虚拟网元管理以及网络服务编排三大关键技术,实现了底层异构资源的实时动态管理与开放共享.同时,根据实验用户对网络资源的需求,灵活按需编排各种网络资源与SFC服务,为用户提供端到端的网络实验验证服务.     

SDN‐based wireless body area network routing algorithm for healthcare architecture

The use of wireless body area networks (WBANs) in healthcare applications has made it convenient to monitor both health personnel and patient status continuously in real time through wearable wireless sensor nodes. However, the heterogeneous and complex network structure of WBANs has some disadvantages in terms of control and management. The software‐defined network (SDN) approach is a promising technology that defines a new design and management approach for network communications. In order to create more flexible and dynamic network structures in WBANs, this study uses the SDN approach. For this, a WBAN architecture based on the SDN approach with a new energy‐aware routing algorithm for healthcare architecture is proposed. To develop a more flexible architecture, a controller that manages all HUBs is designed. The proposed architecture is modeled using the Riverbed Modeler software for performance analysis. The simulation results show that the SDN‐based structure meets the service quality requirements and shows superior performance in terms of energy consumption, throughput, successful transmission rate, and delay parameters according to the traditional routing approach.     

灰盒光传输设备的SDN管控技术研究及应用

传统光传输网络正逐渐走向开放与解耦,“烟囱式”的单厂商单域管理模式也在软件定义网络（software defined network,SDN）理念渗透下向多厂商、多域统一管理模式发展,考虑到传输网络的设备差异性和协议复杂性,对传送SDN管控提出了一定的要求。首先,提出了介于黑盒设备与白盒设备之间的灰盒概念;然后,以灰盒化的接入型光传送网络（optical transport network,OTN）设备为例,探讨了接入型OTN的SDN统一管控关键技术,包括开放管控架构、业务模板化、拓扑自动生成、设备自动上线、设备远程升级等;最后,结合实践阐述了接入型OTN统一管控系统的实现和现网应用情况。     

Programmable virtual network as a service: towards a future Internet testbed based on IaaS cloud

During recently years, several OpenFlow-enabled testbeds have been deployed in world-wide research community. Typically, these OpenFlow-enabled testbeds need to stitch to other testbeds to link to virtual servers and immit experimentation traffic. From the view point of researchers, these OpenFlow-enabled testbeds only provide OpenFlow networking resource, and they have to resort to other experiment infrastructure to provide computing and storage resource. Due to the OpenFlow networking and other resource belongs to different infrastructure provider and is managed by their own control software, it is difficult to coordinate these partners to provide a full programmable experiment environment. Meanwhile, the control software of these testbeds are tight coupling with their substrate resources, which means that these substrate resources, together with virtualization technologies, are permanently dedicated to the control software and difficult to be used by other services. In this paper, a new future Internet testbed architecture based on the open Infrastructure-as-a-service cloud and software defined network (SDN) paradigm is proposed. It extends the current virtual network service by adding programmable virtual switch and controller resources that can be controlled by the researcher. Its loose coupling model allows the testbed operator decouple the experiment service from the infrastructure provider, which is a more flexible way to build the testbed. The initial prototype implementation in this paper shows that this new testbed architecture built on IaaS cloud and SDN is feasible and flexible to provide programmable virtual network service.     

Survey on SDN-based network testbeds

The network testbed based on software defined networking (referred as SDN testbed) has attracted extensive attention in the academic and industrial circles in recent years,and there have been many valuable cases of system/platform construction.Therefore,an overview of the SDN testbed was intended to conduct in the global scope.Firstly,the advantages of the SDN testbed and the basic design principles of the large-scale SDN testbed was explored comparing with the traditional network testbed.Secondly,in-depth analysis of existing SDN testbed projects was provided from the aspects of the project objectives and progress,the key technologies,network deployment,and featured applications.Finally,the challenges faced in this field were described in terms of network slicing,light and wireless convergence,security,and reliability.Future research directions are also suggested.     

DDoS attack detection and defense based on hybrid deep learning model in SDN

Software defined network (SDN) is a new kind of network technology,and the security problems are the hot topics in SDN field,such as SDN control channel security,forged service deployment and external distributed denial of service (DDoS) attacks.Aiming at DDoS attack problem of security in SDN,a DDoS attack detection method called DCNN-DSAE based on deep learning hybrid model in SDN was proposed.In this method,when a deep learning model was constructed,the input feature included 21 different types of fields extracted from the data plane and 5 extra self-designed features of distinguishing flow types.The experimental results show that the method has high accuracy,it’s better than the traditional support vector machine (SVM) and deep neural network (DNN) and other machine learning methods.At the same time,the proposed method can also shorten the processing time of classification detection.The detection model is deployed in SDN controller,and the new security policy is sent to the OpenFlow switch to achieve the defense against specific DDoS attack.     

基于SDN/NFV的核心网演进关键技术研究

在NFV和SDN的基础上研究核心网架构的演进及应用领域;通过将NFV和SDN技术引入核心网,在核心网虚拟化,分组域网关控制转发分离及基于Service Chaining的即插即用的增值业务及复杂流处理平台进行研究,建议了基于SDN/NFV的核心网长期演进架构。