[go: up one dir, main page]

WO2018121406A1 - 基于sdn的报文镜像方法及网络流量监控管理系统 - Google Patents

基于sdn的报文镜像方法及网络流量监控管理系统 Download PDF

Info

Publication number
WO2018121406A1
WO2018121406A1 PCT/CN2017/117776 CN2017117776W WO2018121406A1 WO 2018121406 A1 WO2018121406 A1 WO 2018121406A1 CN 2017117776 W CN2017117776 W CN 2017117776W WO 2018121406 A1 WO2018121406 A1 WO 2018121406A1
Authority
WO
WIPO (PCT)
Prior art keywords
flow table
data switch
sdn controller
packet
mirroring
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2017/117776
Other languages
English (en)
French (fr)
Inventor
袁航
周雍恺
祖立军
陈华俊
严峻岭
刘国宝
何朔
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Unionpay Co Ltd
Original Assignee
China Unionpay Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Unionpay Co Ltd filed Critical China Unionpay Co Ltd
Priority to US16/474,970 priority Critical patent/US11088965B2/en
Publication of WO2018121406A1 publication Critical patent/WO2018121406A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876—Network utilisation, e.g. volume of load or congestion level
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/20—Support for services
    • H04L49/208—Port mirroring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/12—Network monitoring probes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/34—Signalling channels for network management communication
    • H04L41/342—Signalling channels for network management communication between virtual entities, e.g. orchestrators, SDN or NFV entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/20—Arrangements for monitoring or testing data switching networks the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/38—Flow based routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/42—Centralised routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1095—Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes

Definitions

  • the present invention relates to the field of network traffic monitoring technologies, and in particular, to an SDN-based message mirroring method.
  • SDN Software Defined Network
  • the core of the network is to separate the network device control plane from the data plane to implement the network.
  • Flexible control of traffic makes the network more intelligent as a conduit.
  • Port mirroring is performed by configuring a switch or router to forward data traffic of one or more source ports to a specified port to monitor the network.
  • the designated port is called a mirrored port or a destination port.
  • Port mirroring does not affect the packet exchange between the source port and the destination port. It only copies all the packets that are sent to and from the source port to the destination port, and monitors and analyzes the traffic of the network through the mirrored port.
  • the mirroring function in the enterprise the network data inside the enterprise can be monitored and managed well. When the network fails, the fault can be quickly located.
  • the current traffic mirroring is performed for a certain port, and all traffic passing through the port is mirrored to the monitoring system.
  • many of these traffic packets are not required by the monitoring system. Therefore, the traffic must be further matched and filtered to obtain the truly required packet data.
  • one switch port will carry the traffic of many virtual machines, but the monitoring system may only need the traffic involved in one virtual machine or even only one application. If all the traffic passing through the port is mirrored, it will not only increase the burden on the network, but also affect the stability of the network, and the pressure on the monitoring server is also very large.
  • the present invention provides a technical solution as follows:
  • An SDN-based packet mirroring method wherein the SDN controller is coupled to the upper layer application and the at least one data switch respectively, and the method includes the following steps: a), the upper layer application passes the first northbound interface of the SDN controller to the SDN controller Sending a mirroring instruction; b), the SDN controller generates a second flow table based on the mirroring instruction and the first flow table sent by the first data switch; wherein, the first data switch initiates the transmission of the packet, and the first flow table encapsulates the packet, The second flow table includes at least an action command corresponding to the mirroring instruction; and c) the second data switch extracts the message from the second flow table and mirrors the message to the designated node based on the action command.
  • the first and second flow tables adopt an OpenFlow protocol.
  • the first and second flow tables respectively include at least one matching domain item and an action set item, wherein the matching domain item is used to match the message, and the action set item includes at least one action command for controlling the action of the data switch.
  • the first northbound interface is programmed by the user.
  • the present invention further provides a network traffic monitoring management system, which is coupled to at least a first and a second data switch, the system comprising: an upper application control unit, which sends a mirroring instruction to the SDN controller through the first northbound interface of the SDN controller
  • the SDN controller generates a second flow table based on the mirroring instruction and the first flow table sent by the first data switch; wherein the first data switch initiates the transmission of the message, the first flow table encapsulates the message, and the second flow table Include at least an action command corresponding to the mirroring instruction, the second data switch extracts the message from the second flow table, and mirrors the message to the designated node based on the action command; and the monitoring management unit receives the message according to the specified node The message monitors and manages network traffic.
  • the packet mirroring method provided by the embodiments of the present invention does not need to manually configure the data switch, but the SDN controller implements control of the data switch; in terms of network traffic monitoring, the method can focus on a specific port and a virtual machine. Even packets corresponding to a specific application exclude messages that do not need to be monitored, thereby enabling finer-grained traffic monitoring and reducing the load on the monitoring server.
  • the method is simple and convenient to implement, and is beneficial to popularize and apply in the industry.
  • FIG. 1 is a flowchart of an SDN-based packet mirroring method according to a first embodiment of the present invention.
  • FIG. 2 is a block diagram showing the structure of a network traffic monitoring management system according to a second embodiment of the present invention.
  • an SDN controller and first and second data switches are exemplarily illustrated, and the SDN controllers are communicatively coupled with the first and second data switches, respectively.
  • the present invention can be implemented in the case of including a plurality of SDN controllers and more data switches, as long as the plurality of SDN controllers and the more data switches are coupled to each other, and Communicate in accordance with the agreed agreement.
  • the SDN northbound interface is an interface open to the upper layer service application of the SDN controller, and its goal is to enable the business application to conveniently call the underlying network resources and capabilities.
  • developers of network services can invoke various network resources in the form of software programming.
  • the SDN southbound interface is an interface that is open to the underlying switching device by the SDN controller.
  • the upstream channel is used to monitor and collect information reported by the underlying switching device.
  • the SDN controller also uses the downstream channel of the southbound interface to the downstream network. The device is controlled.
  • the first embodiment of the present invention provides an SDN-based packet mirroring method, which includes the following steps.
  • Step S10 The upper layer application sends a mirroring instruction to the SDN controller through the first northbound interface of the SDN controller.
  • the SDN controller provides a packaged northbound interface for the upper layer application.
  • the upper layer application can implement functions such as calling, allocating, and releasing network resources.
  • the call to the northbound interface affects the SDN controller to deliver the corresponding control policy to the data switch through the southbound interface protocol.
  • the first northbound interface is programmed by the user.
  • Step S20 The SDN controller generates a second flow table based on the mirroring instruction and the first flow table sent by the first data switch.
  • the first data switch initiates the transmission of the message
  • the first flow table encapsulates the message
  • the second flow table includes at least the action command corresponding to the mirroring instruction.
  • the action command instructs the switch receiving the second flow table how to perform message mirroring, as described below.
  • the first and second flow tables employ an OpenFlow protocol.
  • the packet structure of the OpenFlow protocol (hereinafter referred to as a flow table) is as shown in the following table.
  • Match Fields match fields, match the data packets, and execute the actions in the flow table after the matching is completed;
  • Actions Action sets, including at least one action command, used to control the actions of the data switch, such as encapsulation/decapsulation, multipath forwarding, output to one or several ports, and so on.
  • a command to output data to the designated port may be added after the normal forwarding action: output. If the data is forwarded to port 1 (the port connecting the application) and port 5 (the port connected to the control system), the action command can be added: output 1 5; in other words, the second flow table will include the action command corresponding to the mirror instruction.
  • Step S30 The second data switch extracts the packet from the second flow table, and mirrors the packet to the designated node based on the action command.
  • the data switch receiving the second flow table obtains the action command output 1 5, according to which the second data switch mirrors the message to port 5.
  • the monitoring system monitors and manages network traffic according to each packet received by the designated node.
  • the monitoring management is performed by using a packet as a unit, and the packet can correspond to a specific port, a virtual machine, or even a specific application, and the packet that does not need to be monitored is excluded.
  • the present invention can implement finer-grained traffic. monitor.
  • a second embodiment of the present invention provides a network traffic monitoring management system, which includes at least an upper application control unit 101, an SDN controller 102, and a monitoring management unit 103.
  • the network traffic monitoring management system is communicatively coupled to the first and second data switches 201, 202 via the SDN controller 102.
  • the first data switch 201 initiates the transmission of the message
  • the second data switch 202 expects to obtain the message
  • the monitoring management unit 103 expects to obtain the message image to monitor the network traffic.
  • the upper application control unit 101 sends a mirroring instruction to the SDN controller 102 through the first northbound interface of the SDN controller 102.
  • the SDN controller 102 generates a second flow table based on the mirroring instruction and the first flow table sent by the first data switch 201; the first flow table encapsulates a message to be transmitted, and the second flow table includes at least an action command corresponding to the mirroring instruction.
  • the second data switch 202 After receiving the second flow table, the second data switch 202 extracts the message from the second flow table and mirrors the message to the designated node based on the action command.
  • the monitoring management unit 103 monitors and manages network traffic according to the packet received by the designated node.
  • the SDN controller 102 can issue control policies to the first and second data switches 201, 202 to instruct the data switches 201, 202 to perform other actions in addition to the mirroring action.
  • the network traffic monitoring management system can be deployed according to a distributed system, for example, the upper application control unit and the SDN controller are set at the local end, and the monitoring management unit is set at the remote end.
  • the first and second data switches 201, 202 can also be disposed at another remote end.
  • the network traffic monitoring management system can also be deployed in a cloud computing manner.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Environmental & Geological Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明涉及一种基于SDN的报文镜像方法，其中，SDN控制器与上层应用、及至少一个数据交换机分别耦合，方法包括如下步骤：a)、上层应用通过SDN控制器的第一北向接口向SDN控制器发送镜像指令；b)、SDN控制器基于镜像指令以及第一数据交换机发来的第一流表而生成第二流表；其中，第一数据交换机发起报文的传输，第一流表封装报文，第二流表至少包括对应于镜像指令的动作命令；以及c)、第二数据交换机从第二流表中提取报文，并基于动作命令而将报文镜像到指定结点。该方法能够实现较细粒度的流量监控，同时减轻了监控服务器的负载。

Description

基于SDN的报文镜像方法及网络流量监控管理系统 技术领域
本发明涉及网络流量监控技术领域，更具体地说，涉及一种基于SDN的报文镜像方法。
背景技术
软件定义网络(Software Defined Network,简称SDN)，是网络一种新型网络创新架构，是网络虚拟化的一种实现方式，其核心是通过将网络设备控制面与数据面分离开来，实现了网络流量的灵活控制，使网络作为管道变得更加智能。
端口镜像技术是通过配置交换机或路由器，将一个或多个源端口的数据流量转发到某一个指定端口来实现对网络的监听，指定端口称之为“镜像端口”或“目的端口”。端口镜像并不影响源端口和目的端口的报文交换，只是将所有进入和从源端口输出的报文原样复制了一份到目的端口，并且通过镜像端口对网络的流量进行监控分析。在企业内利用镜像功能，可以很好地对企业内部的网络数据进行监控管理，在网络出故障的时候，可以快速地定位故障。
现有的端口镜像技术存在一些缺陷。一方面，现有技术往往通过人工操作的方式对交换机进行相关的参数配置，才能实现对端口或者报文的镜像。这种方式自动化程度较低，不能对镜像端口进行灵活控制，且容易出现误操作，增加了运维风险。
另一方面，当前流量镜像是针对某一个端口来进行的，所有经过该端口的流量都会被镜像到监控系统中。但是这些流量中许多报文都是监控系统所不需要的，所以要对流量进行进一步的匹配、过滤后才能得到真正需要的报文数据。特别是在当前的云计算环境下，一个交换机端口会承载许多虚拟机的通讯流量，但是监控系统可能只是需要其中一台虚拟机甚至仅是一个应用所涉及的流量。如果将经过该端口的所有流量都镜像的话，不仅会增加网络的负担，影响网络的稳定性，而且对监控服务器的压力也非常大。
发明内容
本发明的目的在于提供一种能够克服上述缺陷、并实现较细粒度流量监控的报文镜像方法。
为实现上述目的，本发明提供一种技术方案如下：
一种基于SDN的报文镜像方法，其中，SDN控制器与上层应用、及至少一个数据交换机分别耦合，方法包括如下步骤：a)、上层应用通过SDN控制器的第一北向接口向SDN控制器发送镜像指令；b)、SDN控制器基于镜像指令以及第一数据交换机发来的第一流表而生成第二流表；其中，第一数据交换机发起报文的传输，第一流表封装报文，第二流表至少包括对应于镜像指令的动作命令；以及c)、第二数据交换机从第二流表中提取报文，并基于动作命令而将报文镜像到指定结点。
优选地，第一、第二流表采用OpenFlow协议。
优选地，第一、第二流表分别至少包括匹配域项、动作集合项， 其中匹配域项用于对报文进行匹配，动作集合项包括用于控制数据交换机的动作的至少一个动作命令。
优选地，第一北向接口由用户进行编程配置。
本发明还提供一种网络流量监控管理系统，至少与第一、第二数据交换机分别耦合，该系统包括：上层应用控制单元，其通过SDN控制器的第一北向接口向SDN控制器发送镜像指令；SDN控制器，其基于镜像指令以及第一数据交换机发来的第一流表而生成第二流表；其中，第一数据交换机发起报文的传输，第一流表封装报文，第二流表至少包括对应于镜像指令的动作命令，第二数据交换机从第二流表中提取报文，并基于动作命令而将报文镜像到指定结点；以及监控管理单元，其根据指定结点接收到的报文对网络流量进行监控管理。
本发明各实施例提供的报文镜像方法不需要对数据交换机进行人工配置，而由SDN控制器实现对数据交换机的控制；就网络流量监控来说，该方法能够聚焦于与特定端口、虚拟机甚至是特定应用相对应的报文，而将不需要监控的报文排除在外，从而可以实现较细粒度的流量监控，同时减轻了监控服务器的负载。该方式实施简单、便利，利于在行业内推广应用。
附图说明
图1示出本发明第一实施例提供的基于SDN的报文镜像方法的流程图。
图2示出本发明第二实施例提供的网络流量监控管理系统的模块结构示意图。
具体实施方式
为便于说明，在本发明各实施例中，例示性地说明一个SDN控制器、以及第一、第二数据交换机，SDN控制器分别与第一、第二数据交换机在通信上耦合。但是，可以理解，根据特定的应用场合，本发明可以在包括多个SDN控制器以及更多的数据交换机的情况下实现，只要该多个SDN控制器以及该更多的数据交换机彼此耦合，并按照协定的协议来通信。
SDN北向接口是SDN控制器向上层业务应用开放的接口，其目标是使得业务应用能够便利地调用底层的网络资源和能力。通过北向接口，网络业务的开发者能以软件编程的形式调用各种网络资源。
SDN南向接口是SDN控制器向底层交换设备开放的接口，一方面通过上行通道对底层交换设备上报的信息进行监控和统计，另一方面SDN控制器也利用南向接口的下行通道对下游网络设备进行控制。
如图1所示，本发明第一实施例提供一种基于SDN的报文镜像方法，其包括如下各步骤。
步骤S10、上层应用通过SDN控制器的第一北向接口向SDN控制器发送镜像指令。
具体地，SDN控制器为上层应用提供了封装好的北向接口，通过调用这些北向接口，上层应用可实现对网络资源的调用、分配以及释放等功能。对北向接口的调用则会影响SDN控制器通过南向接口协议对数据交换机下发相应的控制策略。
根据该步骤S10，第一北向接口由用户进行编程配置。
步骤S20、SDN控制器基于镜像指令以及第一数据交换机发来的第一流表而生成第二流表。
其中，第一数据交换机发起报文的传输，第一流表封装报文，第二流表至少包括对应于镜像指令的动作命令。该动作命令指示接收到第二流表的交换机如何进行报文镜像，如下所述。
根据优选实施方式，第一、第二流表采用OpenFlow协议。具体地，OpenFlow协议的报文结构(以下简称流表)如下表所示。
Figure PCTCN2017117776-appb-000001
Figure PCTCN2017117776-appb-000002
Match Fields：匹配域，对数据包进行匹配，匹配完成后方才执行该流表中的动作；
Figure PCTCN2017117776-appb-000003
Counter：计数器，在说明书中没有讨论；
Figure PCTCN2017117776-appb-000004
Actions：动作集合，包括至少一个动作命令，以用于控制数据交换机的动作，如封装/去封装，多路径转发，输出到一个或几个端口等等。
关于第二流表的生成，作为示例，在流表的动作集合中，可以在正常转发动作后面加入将数据输出到指定端口的命令：output。如将数据转发到端口1(连接应用的端口)和端口5(连接控制系统的端 口)，即可加入动作命令：output 1 5；换言之，第二流表将包括对应于镜像指令的动作命令。
步骤S30、第二数据交换机从第二流表中提取报文，并基于动作命令而将报文镜像到指定结点。
继续上述示例，收到第二流表的数据交换机在解析第二流表之后，获得动作命令output 1 5，根据该命令第二数据交换机会将报文镜像到端口5。
进一步地，监控系统根据指定结点接收到的各个报文来对网络流量进行监控管理。这种监控管理是以报文为单位来甄别进行的，而报文可对应于特定端口、虚拟机甚至是特定应用，将不需要监控的报文排除在外，本发明可以实现较细粒度的流量监控。
如图2所示，本发明第二实施例提供一种网络流量监控管理系统，其至少包括上层应用控制单元101、SDN控制器102以及监控管理单元103。该网络流量监控管理系统通过SDN控制器102与第一、第二数据交换机201、202在通信上耦合。其中，第一数据交换机201发起报文的传输，第二数据交换机202期望获得报文，监控管理单元103期望获得报文镜像以对网络流量进行监控。
具体地，上层应用控制单元101通过SDN控制器102的第一北向接口向SDN控制器102发送镜像指令。
SDN控制器102基于镜像指令以及第一数据交换机201发来的第一流表而生成第二流表；第一流表封装有待传输的报文，第二流表至少包括对应于镜像指令的动作命令，
收到第二流表后，第二数据交换机202从第二流表中提取报文，并基于动作命令而将报文镜像到指定结点。
最后，监控管理单元103根据指定结点接收到的报文对网络流量进行监控管理。
作为一种改进实施方式，SDN控制器102可向第一、第二数据交换机201、202下发控制策略，以指示数据交换机201、202执行除了镜像动作之外的其他动作。
根据优选实施方式，该网络流量监控管理系统可以按照分布式系统来部署，例如，将上层应用控制单元、SDN控制器设置于本地端，而将监控管理单元设置于远程端。而第一、第二数据交换机201、202也可以设置于另一远程端。
进一步地，该网络流量监控管理系统还可以按照云计算方式来部署。
上述说明仅针对于本发明的优选实施例，并不在于限制本发明的保护范围。本领域技术人员可作出各种变形设计，而不脱离本发明的思想及附随的权利要求。

Claims (7)

  1. 一种基于SDN的报文镜像方法，其中，SDN控制器与上层应用、及至少一个数据交换机分别耦合，所述方法包括如下步骤：
    a)、所述上层应用通过所述SDN控制器的第一北向接口向所述SDN控制器发送镜像指令；
    b)、所述SDN控制器基于所述镜像指令以及第一数据交换机发来的第一流表而生成第二流表；其中，所述第一数据交换机发起报文的传输，所述第一流表封装所述报文，所述第二流表至少包括对应于所述镜像指令的动作命令；以及
    c)、第二数据交换机从所述第二流表中提取所述报文，并基于所述动作命令而将所述报文镜像到指定结点。
  2. 根据权利要求1所述的方法，其特征在于，所述第一、第二流表采用OpenFlow协议。
  3. 根据权利要求2所述的方法，其特征在于，所述第一、第二流表分别至少包括匹配域项、动作集合项，其中所述匹配域项用于对所述报文进行匹配，所述动作集合项包括用于控制所述数据交换机的动作的至少一个所述动作命令。
  4. 根据权利要求1所述的方法，其特征在于，所述第一北向接口由用户进行编程配置。
  5. 根据权利要求1至4中任一项所述的方法，其特征在于，其还包括：监控系统根据所述指定结点接收到的所述报文对网络流量进 行监控管理。
  6. 一种网络流量监控管理系统，至少与第一、第二数据交换机分别耦合，所述系统包括：
    上层应用控制单元，其通过SDN控制器的第一北向接口向所述SDN控制器发送镜像指令；
    所述SDN控制器，其基于所述镜像指令以及所述第一数据交换机发来的第一流表而生成第二流表；其中，所述第一数据交换机发起报文的传输，所述第一流表封装所述报文，所述第二流表至少包括对应于所述镜像指令的动作命令，所述第二数据交换机从所述第二流表中提取所述报文，并基于所述动作命令而将所述报文镜像到指定结点；以及
    监控管理单元，其根据所述指定结点接收到的所述报文对网络流量进行监控管理。
  7. 根据权利要求6所述的系统，其特征在于，其按照分布式系统来部署。
PCT/CN2017/117776 2016-12-29 2017-12-21 基于sdn的报文镜像方法及网络流量监控管理系统 Ceased WO2018121406A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US16/474,970 US11088965B2 (en) 2016-12-29 2017-12-21 SDN-based packet mirroring method, and network traffic monitoring and management system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201611242762.8 2016-12-29
CN201611242762.8A CN106982149B (zh) 2016-12-29 2016-12-29 基于sdn的报文镜像方法及网络流量监控管理系统

Publications (1)

Publication Number Publication Date
WO2018121406A1 true WO2018121406A1 (zh) 2018-07-05

Family

ID=59340283

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/117776 Ceased WO2018121406A1 (zh) 2016-12-29 2017-12-21 基于sdn的报文镜像方法及网络流量监控管理系统

Country Status (4)

Country Link
US (1) US11088965B2 (zh)
CN (1) CN106982149B (zh)
TW (1) TWI677218B (zh)
WO (1) WO2018121406A1 (zh)

Families Citing this family (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106982149B (zh) * 2016-12-29 2019-10-01 中国银联股份有限公司 基于sdn的报文镜像方法及网络流量监控管理系统
CN107547308B (zh) * 2017-07-28 2020-04-28 新华三技术有限公司 一种报文镜像方法、装置、软件定义网络sdn中的控制器
CN107770098A (zh) * 2017-09-05 2018-03-06 全球能源互联网研究院有限公司 一种基于sdn的变电站站内通信引流方法及系统
CN107404421A (zh) * 2017-09-18 2017-11-28 赛尔网络有限公司 流量监测、监管方法及系统
CN108270643B (zh) * 2017-12-14 2021-07-02 中国银联股份有限公司 Leaf-Spine交换机之间的链路的探测方法及设备
CN108833304A (zh) * 2018-06-26 2018-11-16 郑州云海信息技术有限公司 云数据系统中报文的管理方法和装置
CN109039806B (zh) * 2018-07-13 2020-08-04 南瑞集团有限公司 一种基于sdn的报文镜像及网络监控的性能优化方法和装置
US10798230B2 (en) * 2018-08-23 2020-10-06 Morgan Stanley Services Group Inc. Faulty distributed system component identification
TWI691183B (zh) * 2018-12-12 2020-04-11 中華電信股份有限公司 應用於虛擬網路功能之備援方法及系統
CN109728947A (zh) * 2018-12-26 2019-05-07 成都科来软件有限公司 一种基于云计算与网络拓扑图结合的网络性能分析方法
CN110049444A (zh) * 2018-12-29 2019-07-23 中国银联股份有限公司 基于5g的定位方法以及基于5g的定位系统
CN111371640B (zh) * 2020-02-24 2023-03-03 深圳供电局有限公司 一种基于sdn控制器的流量采集分析方法及系统
CN113542092A (zh) * 2021-05-27 2021-10-22 贵州电网有限责任公司 一种基于openstack的自动化引流方法
US12425436B2 (en) * 2021-11-29 2025-09-23 Zscaler, Inc. System and method thereof for generating a threat indicator of an agentless third-party application
CN119696929B (zh) * 2025-02-24 2025-08-26 推动时代科技(北京)有限公司 镜像数据的获取和传输方法及系统、介质、计算机设备

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103973481A (zh) * 2014-04-21 2014-08-06 蓝盾信息安全技术股份有限公司 一种基于sdn的云计算数据中心的审计系统及方法
CN104618194A (zh) * 2015-02-15 2015-05-13 杭州华三通信技术有限公司 软件定义网络报文监控方法和sdn控制器、交换设备
US20150142936A1 (en) * 2013-10-21 2015-05-21 Nyansa, Inc. System and method for observing and controlling a programmable network using time varying data collection
CN105306622A (zh) * 2015-11-30 2016-02-03 南京优速网络科技有限公司 一种云网融合域名解析系统及其dns服务方法
CN105357075A (zh) * 2015-11-20 2016-02-24 武汉邮电科学研究院 基于软件定义网络的流量监测系统和方法
CN105743734A (zh) * 2016-01-22 2016-07-06 北京航空航天大学 虚拟机镜像流量传输的控制方法和装置
US20160269482A1 (en) * 2015-03-12 2016-09-15 International Business Machines Corporation Providing agentless application performance monitoring (apm) to tenant applications by leveraging software-defined networking (sdn)
CN106101011A (zh) * 2016-08-22 2016-11-09 杭州华三通信技术有限公司 一种报文处理方法及装置
CN106982149A (zh) * 2016-12-29 2017-07-25 中国银联股份有限公司 基于sdn的报文镜像方法及网络流量监控管理系统

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130088967A1 (en) * 2010-06-08 2013-04-11 Nec Corporation Communication system, control apparatus, packet capture method and packet capture program
US9264301B1 (en) * 2012-09-20 2016-02-16 Wiretap Ventures, LLC High availability for software defined networks
US9419903B2 (en) * 2012-11-08 2016-08-16 Texas Instruments Incorporated Structure for implementing openflow all group buckets using egress flow table entries
CN103684922B (zh) * 2013-12-23 2017-02-15 蓝盾信息安全技术股份有限公司 基于sdn网络的出口信息保密检查检测平台系统及检测方法
US9571296B2 (en) * 2014-04-30 2017-02-14 Ixia Methods and apparatuses for abstracting filters in a network visibility infrastructure
KR101518468B1 (ko) * 2014-05-14 2015-05-15 주식회사 플랜티넷 인터넷 접속 요청을 하는 클라이언트 단말의 인터넷 접속 요청 트래픽으로부터 동일한 공인 ip를 이용하는 사설 네트워크상의 복수개의 클라이언트 단말의 디바이스 대수를 검출하는 방법 및 공인 ip 공유 상태 검출 시스템
CN104168144A (zh) * 2014-08-22 2014-11-26 国都兴业信息审计系统技术（北京）有限公司 一种对sdn网络进行审计的方法
US9532268B2 (en) * 2014-11-19 2016-12-27 Qualcomm Incorporated Methods and apparatus for synchronizing a user equipment with an HFN offset
CN104601432B (zh) * 2014-12-31 2018-03-13 新华三技术有限公司 一种报文传输方法和设备
US9900206B2 (en) * 2015-07-20 2018-02-20 Schweitzer Engineering Laboratories, Inc. Communication device with persistent configuration and verification
US20170048312A1 (en) * 2015-08-12 2017-02-16 Brocade Communications Systems, Inc. Sdn-based mirroring of traffic flows for in-band network analytics
US10148756B2 (en) * 2015-12-09 2018-12-04 At&T Intellectual Property I, L.P. Latency virtualization in a transport network using a storage area network
US10439932B2 (en) * 2016-10-05 2019-10-08 Avago Technologies International Sales Pte. Limited System and method for flow rule management in software-defined networks

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150142936A1 (en) * 2013-10-21 2015-05-21 Nyansa, Inc. System and method for observing and controlling a programmable network using time varying data collection
CN103973481A (zh) * 2014-04-21 2014-08-06 蓝盾信息安全技术股份有限公司 一种基于sdn的云计算数据中心的审计系统及方法
CN104618194A (zh) * 2015-02-15 2015-05-13 杭州华三通信技术有限公司 软件定义网络报文监控方法和sdn控制器、交换设备
US20160269482A1 (en) * 2015-03-12 2016-09-15 International Business Machines Corporation Providing agentless application performance monitoring (apm) to tenant applications by leveraging software-defined networking (sdn)
CN105357075A (zh) * 2015-11-20 2016-02-24 武汉邮电科学研究院 基于软件定义网络的流量监测系统和方法
CN105306622A (zh) * 2015-11-30 2016-02-03 南京优速网络科技有限公司 一种云网融合域名解析系统及其dns服务方法
CN105743734A (zh) * 2016-01-22 2016-07-06 北京航空航天大学 虚拟机镜像流量传输的控制方法和装置
CN106101011A (zh) * 2016-08-22 2016-11-09 杭州华三通信技术有限公司 一种报文处理方法及装置
CN106982149A (zh) * 2016-12-29 2017-07-25 中国银联股份有限公司 基于sdn的报文镜像方法及网络流量监控管理系统

Also Published As

Publication number Publication date
US20190349316A1 (en) 2019-11-14
TWI677218B (zh) 2019-11-11
CN106982149A (zh) 2017-07-25
CN106982149B (zh) 2019-10-01
US11088965B2 (en) 2021-08-10
TW201824827A (zh) 2018-07-01

Similar Documents

Publication Publication Date Title
WO2018121406A1 (zh) 基于sdn的报文镜像方法及网络流量监控管理系统
US11303555B2 (en) Inter-data center software-defined network controller network
US10880210B2 (en) Cloud network having multiple protocols using virtualization overlays across physical and virtualized workloads
CN112398676B (zh) 多租户环境中服务接入端点的基于供应商无关简档的建模
US9203645B2 (en) Virtual input-output connections for machine virtualization
US8943212B2 (en) System and method for translating application program network service requests into actions and performing those actions through the management and/or control plane responsive to previously defined policies and previous requests by the same or another application program
US8489834B1 (en) Automatic class of service provisioning for data transfer within a data center
CN115460074A (zh) 用于分布式计算部署的网络控制器子集群
CN105847185B (zh) 分布式设备的报文处理方法、装置及分布式设备
JP6648893B2 (ja) ローカルライブラリからのネットワーク接続用の機能要件の提供
WO2019178756A1 (zh) Sd-wan系统、sd-wan系统的使用方法及相关装置
US9866436B2 (en) Smart migration of monitoring constructs and data
US7426580B2 (en) System and method for virtualization of the network management and control planes to provide an abstracted view and control of underlying network resources
WO2015024411A1 (zh) 一种服务节点能力信息的获取方法及控制平台
CN108768714A (zh) 一种数据中心综合管理系统及其网络安全实现方法
Sonkoly et al. OpenFlow virtualization framework with advanced capabilities
JP7126021B2 (ja) ＯｐｅｎＦｌｏｗインスタンスの構成
WO2014080993A1 (ja) 通信システム、仮想ネットワーク管理装置、通信ノード、通信方法及びプログラム
CN104320322B (zh) 一种报文控制方法和设备
WO2019034002A1 (zh) 硬件交换机控制流向的方法、装置、终端设备及存储介质
Zhang et al. Design and implementation of the routing function in the nox controller for software-defined networks
CN115834329B (zh) 资源管理系统
WO2015135312A1 (zh) 一种实现sdn网络通信管理的方法及装置
HK1240717B (zh) 基於sdn的报文镜像方法及网络流量监控管理系统
HK1240717A (zh) 基於sdn的報文鏡像方法及網絡流量監控管理系統

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17886056

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17886056

Country of ref document: EP

Kind code of ref document: A1