摘要
基于SDN的流量监控系统是一种现代1G/10G/40G网络监视连接结构,采用高性能、开放式以太网交换机以超低资本支出/运营支出成本来对组织的网络流量进行无处不在的安全监控和流量监视。它是全新设计的新一代网络数据包代理(NPB),旨在服目前基于NPB的监控解决方案所面临的难题。基于SDN的流量监控系统以SDN为中心的体系结构,具备以下特点:实现了横向扩展连接结构,从而可以在整个企业范围内进行监控;采用单一平台进行管理,使操作变得轻松简单;提供多租户机制,使多个IT团队(Net Ops、Dev Ops、Sec Ops)能够采用具体租户专用的被动式/在线式工具和策略来同时执行网络监控。上述特性均在自有数据监控平台UMS上得到验证。
SDN-based traffic monitoring study is a modern 1G/10G/40G network visibility fabric that leverages highperformance,open Ethernet switches to provide pervasive security monitoring and visibility of an organization’s network traffic atultra-low CapEx/OpEx costs.It is a next-generation Network Packet Broker (NPB) that addresses the challenges of current NPBbasedmonitoring solutions. Using an SDN-centric architecture, it enables scale-out fabric for enterprise-wide monitoring with asingle pane of glass for operational simplicity. Multi-tenancy lets multiple IT teams (NetOps, DevOps, SecOps) simultaneouslyperform network monitoring using tenant-specific passive/inline tools and policies.The characteristics refered have been verifiedon the UMS platform which is our own data monitoring system.
作者
杨帅
王松生
檀朝红
魏亮
Yang Shuai;Wang Songsheng;Tan Chaohong;Wei Liang(Jiangsu Future Networks Innovation Institute, Nanjin 211100, China)
出处
《信息通信技术》
2016年第2期28-35,57,共9页
Information and communications Technologies