在軟體定義網路中範圍編碼基礎之網路驗證;Range Encoding-Based Network Verification in SDN

NCUIR > College of Electrical Engineering & Computer Science > Graduate Institute of Computer Science and Information Engineering > Electronic Thesis & Dissertation > Item 987654321/68926

Please use this identifier to cite or link to this item: http://ir.lib.ncu.edu.tw/handle/987654321/68926

Title:	在軟體定義網路中範圍編碼基礎之網路驗證;Range Encoding-Based Network Verification in SDN
Authors:	曾彥綸;Tseng,Yen-Lun
Contributors:	資訊工程學系
Keywords:	軟體定義網路;網路驗證;範圍編碼;三態內容尋址儲存器;Software-defined Networks;Network Verification;Range Encoding;Ternary Content Addressable Memory
Date:	2015-08-13
Issue Date:	2015-09-23 14:46:46 (UTC+8)
Publisher:	國立中央大學
Abstract:	現代的網路由於具有高度的複雜性，所以常常導致許多意外的錯誤網路行為。現有方法利用存於交換器內的資料層資訊來驗證網路行為，都需要利用很久的時間來驗證，以至於當錯誤發生時無法提供即時的防護。目前最大的挑戰在於，如何在最短的時間內驗證出網路的行為是否出錯，否則將會使網路的效能大大的降低。在這份論文中，我們提出了一個方法可以達到快速的驗證網路行為。我們可以找出由軟體定義網路的控制器中發出的錯誤規則並且阻止其進入並運行在資料層，避免造成了異常的網路錯誤行為，達到了及時的防護效果。經由利用現行網路的規則資料庫來實驗，我們發現我們的方法較之前的方法能夠達到更快的驗證時間。;Modern networks are complex and prone to a lots of failures. Existing approach that verify data-plane information operate offline at timescales of seconds to hours, thus cannot detect or prevent failures as they arise. The main challenge here is to achieve extremely low latency during the verification so that network performance is not affected. In this thesis, we present our work, which achieves this goal. Our work find faulty rules issued by SDN applications, and optionally prevent them from reaching the data plane of network and causing anomalous network behavior in a quick time to provide live protection. With the help of experiments using a real world network rule sets, we found that our method is capable of processing rule update and verification in short time.
Appears in Collections:	[Graduate Institute of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	373	View/Open

社群 sharing

Loading...