一种面向SDN的拟态化架构设计

Mimic Architecture Design for SDN

作为SDN的“控制大脑”,控制器承载着SDN网络的诸多控制功能,通过对SDN网络安全威胁的分析,将应用程序、控制器、操作系统以及处理器纳入拟态界,构建了面向SDN的拟态化架构。该架构的设计引入了新问题,通过分析问题的根源,设计了拟态代理以及异构执行体之间的同步方法,创建了以多数一致表决为裁决算法的拟态架构抗攻击性模型。最后,在搭建的仿真和测试环境的基础上,分析了该拟态架构的安全性以及性能。仿真和测试结果表明该拟态架构具备高安全性,并在吞吐量和延迟等方面得到了改善。

As the“control brain”of SDN,the controller carries a lot of control functions of SDN.By analyzing security threats of SDN,the application program,controller,operating system and processor are brought into the mimic boundary,and the mimic architecture for SDN is constructed.The design of this architecture introduces some new problems.By analyzing the root of the problem,the architecture of mimic agent and the synchronization method between heterogeneous executors are designed.Moreover,the anti-aggression model of the mimic architecture is created with the majority unanimous vote as the mimic arbitration algorithm.Finally,based on the simulation and test environment,the security and performance of the mimicry architecture are analyzed.The results show that the mimicry architecture has high security and is improved in throughput and latency.