基于SDN的科学DMZ研究与实现

Research and Implementation of Scientific DMZ Based on SDN

科学大数据的传输通常对网络传输性能有着不同于普通互联网的更高的要求,而在实际的生产网尤其是局域网中,通常会部署防火墙、入侵检测系统等多种网络安全设备,这些设备给业务流的传输提供了安全保障,但同时也影响了网络的传输性能。文章利用新型的软件定义网络技术,提出了一种基于SDN的科学DMZ网络架构,在保障业务流安全的同时,对可信任的科学数据流进行处理,以保障科学数据的传输性能。

The transmission of scientific big data usually has high requirements for network transmission performance different from ordinary Internet applications. In actual production networks, especially in LANs, many network security devices such as firewalls and IDS are usually deployed, these devices provide security for the transmission of traffic, but also affect network transmission performance. This paper uses the new software-defined networking technology, proposed a scientific DMZ network architecture based on software-defined networking. While protecting the security of common business flows, it handles the trusted scientific data stream flexibly to ensure the transmission performance of scientific data.