基于OpenFlow的软件定义网络流规则冲突检测系统

在软件定义网络(SDN)中,各类网络应用的独立开发以及多用户的网络管理可能导致下发至交换设备的流规则发生冲突,而控制平面与转发平面的分离使得交换设备缺乏策略分析能力,无法独立检测内部的流规则冲突.针对这一问题,提出一种流规则冲突检测系统和检测算法.首先,通过监听、捕获控制平面与转发平面之间的OpenFlow报文,获取即...

Software defined network flow rule conflict detection system based on OpenFlow

In Software Defined Network （SDN）， independent development of various network applications and multi-user network management may cause conflicts in the flow rules issued to switching equipment. Due to the separation of the control plane and the forwarding plane， the switching equipments lack strategy analysis capability， and cannot independently detect internal flow rule conflicts. Aiming at this problem， a flow rule conflict detection system and a detection algorithm were proposed. Firstly， by monitoring and capturing OpenFlow messages between the control plane and the forwarding plane， the information about the flow rules to be issued was obtained. Then， the conflict detection algorithm was used to determine the conflict type of the flow rules. The corresponding rule set was selected by the algorithm according to the matching protocol of flow rules， thereby reducing the detection scale. In the detection， the features of Non-Conflict （NC） rules were detected at first， so that the detection efficiency of NC rules was higher than those of other types of conflict rules. Finally， the flow rule conflicts were resolved according to the conflict types. Experimental results show that the detection accuracy of the proposed algorithm can reach 100%； compared with the dynamic conflict detection model， the proposed algorithm shortens the detection time by about 47% under the same scale of rule set. And the detection time is shortened as the proportion of NC rules increases.