M-CORD系統之實作及其在平衡式入侵偵測之應用

以作者查詢圖書館館藏

、以作者查詢臺灣博碩士

、以作者查詢全國書目

、勘誤回報

、線上人數：63

、訪客IP：18.188.175.182

姓名

劉俊廷(Chun-Ting Liu) 查詢紙本館藏

畢業系所

通訊工程學系在職專班

論文名稱

M-CORD系統之實作及其在平衡式入侵偵測之應用
(Implementation of M-CORD System and Its Application in Intrusion Detection with Load Balance)

相關論文

★ 應用MSPP至DWDM都會光纖網路的設計	★ 光網路與WiMAX整合架構研究及其簡化雛型實驗
★ 以Linux系統為基礎之NAT效能優化研究及其實作	★ 光波長劃分多工網路之路徑保護機制研究
★ 標籤交換網路下具有服務品質路由安排之研究	★ 以訊務相關性為基礎的整合性服務可調整QoS排程器之研究
★ 以群體播送支援IPv6環境下移動式網路連結更新之研究	★ 無線區域網路資源動態分配之效能研究
★ 在微觀移動環境下有效資源保留之路徑管理研究	★ 無線網路交握程序之預先認證方法分析與比較
★ 無線區域網路虛擬允入控制之研究	★ IPv6環境下移動網路之連結更新程序及其效能之研究
★ 具有限數量波長轉換節點的分波多工網路之群播波長分配與容量計算研究	★ 階層化行動式IPv6移動錨點選擇機制研究
★ 具高能量移動節點之叢集式感測網路效能研究	★ 預先註冊之快速換手階層化行動式IPv6研究

檔案

[Endnote RIS 格式]

[Bibtex 格式]

[相關文章]

[文章引用]

[完整記錄]

[館藏目錄]

[檢視]

[下載]

本電子論文使用權限為同意立即開放。
已達開放權限電子全文僅授權使用者為學術研究之目的，進行個人非營利性質之檢索、閱讀、列印。
請遵守中華民國著作權法之相關規定，切勿任意重製、散佈、改作、轉貼、播送，以免觸法。

摘要(中)

為了提高服務供應商的資料中心之經濟性以及雲端彈性，由開放網路基金會( ONF, Open Network Foundation )提供了開源軟體CORD( Central Office Re-architected as Datacenter )的解決方案，並將此方案區分為Mobile、Enterprise、Residential三種應用場景。其目的是將Telco Central Office中使用傳統的硬體架構轉換為使用白牌交換機、伺服器的資料中心架構，以增加提供服務彈性及擴充性。
過去Central Office架構因為客戶的需求而需要經常性的採購電信硬體設備，或是在開發新的服務時必須與設備廠商共同開發甚至無法達到預期所需的結果；CORD的理念既是為了解決此類問題，像是未來面對這些問題可透過這種NFV( Network Function Virtualization )的方式達到佈署服務的彈性以及經濟性，由本身公司的硬體架構師和軟體開發人員即可上線新的服務或彈性擴充硬體設備。
本研究將使用Mobile CORD為實驗的方向。架設M-CORD Ciab ( Cord-in-a-box )環境，並針對Open vSwitch調整權重改善NFV資源的負載平衡。例如當終端使用者產生大量的乙太封包，造成NFV的CPU用量增加導致效能降低，系統將透過主動式偵測NFV資源用量，且即時針對Open vSwitch的權重設定調整分配封包的傳送量，使網路流量能分散在多個NFV中。

摘要(英)

In order to improve datacenter economies and cloud agility to service providers, so the ONF(Open Network Foundation) provided a solution for the open source project : CORD(Central Office Re-architected as Datacenter), and this solution is divided into three scenarios: Mobile, Enterprise, and Residential. The purpose is to transform the traditional hardware architecture into a data center architecture in Telco Central Office, it can use white-brand switches and servers to increase service flexibility and scalability.
The ISPs(Internet Service Provider) often need to purchase telecom equipment and develop new services with equipment suppliers in past CO(Central Office) architecture. The concept of CORD is to solve such problems, it provides the features of flexibility and economics through the NFV(Network Function Virtualization) technology if ISPs face these problems in the future. In this way, developers can create new telecom’s services and functions by themselves.
This paper will use M-CORD(Mobile CORD) as the experimental direction. The laboratory setup an M-CORD Ciab(Cord-in-a-box) environment, and adjusted the weight for Open vSwitch to improve the load balance of NFV resources. For example, when a lot of ethernet packets are generated by users, the CPU usage will be increases and the performance decreases. The system will actively detect the CPU usage of NFV resources and adjust the weight of the Open vSwitch in real time. So the NFV will receive packets on average.

關鍵字(中)

★ 軟體定義網路
★ 網路功能虛擬化
★ 負載平衡
★ CORD

關鍵字(英)

論文目次

摘要 I
ABSTRACT II
目錄 III
圖目錄 V
表目錄 VIII
1. 第一章緒論 1
1.1. 研究背景 1
1.2. 研究動機與目的 3
1.3. 章節概要 4
2. 第二章研究背景 5
2.1. CORD基本介紹 5
2.1.1. SDN控制器 5
2.1.2. OpenStack 6
2.1.3. CORD架構 10
2.1.4. M-CORD架構及其應用 14
2.2. OVS負載平衡機制 16
2.3. 相關文獻 19
3. 第三章實驗方法 24
3.1. M-CORD實驗環境介紹 24
3.1.1. M-CORD特性 24
3.1.2. 架設M-CORD環境 25
3.2. NFV網路服務 33
3.3. 負載平衡演算法 37
4. 第四章實作與結果討論 41
4.1. 實作環境 41
4.2. 應用範例 43
4.2.1. M-CORD實作應用 43
4.2.2. 模擬DoS攻擊 46
4.2.3. 演算法實作與結果分析 47
5. 第五章結論 54
6. 參考文獻 56

參考文獻

[1] [Online].Available: https://www.sdnlab.com/19704.html. [Accessed 20 05 2020]
[2] [Online].Available:https://showipprotocols-tw.blogspot.com/2014/06/northbound-southbound-east-west-bound.html. [Accessed 20 05 2020]
[3] [Online].Available: https://www.opennetworking.org/cord/. [Accessed 20 05 2020]
[4] [Online].Available:https://www.2cm.com.tw/2cm/zh-tw/magazine/-Technology/EE1AD67D7C08456CAE1D35B89F89AACE. [Accessed 20 05 2020]
[5] [Online].Available: http://buddhaya7.pixnet.net/blog/post/215247273. [Accessed 20 05 2020]
[6] [Online].Available:https://www.2cm.com.tw/2cm/zh-tw/tech/9D85FB332F864201A1F8DBA3930AF81D. [Accessed 20 05 2020]
[7] [Online].Available: http://sdnhub.org/tutorials/onos. [Accessed 20 05 2020]
[8] [Online].Available: https://zh.wikipedia.org/zh-tw/OpenStack. [Accessed 20 05 2020]
[9] [Online].Available: https://www.openstack.org/software/. [Accessed 20 05 2020]
[10] [Online].Available: https://kairen.gitbooks.io/openstack-liberty/content/conceptions/index.html. [Accessed 20 05 2020]
[11] [Online].Available: https://www.openstack.org/software/. [Accessed 20 05 2020]
[12] [Online].Available: https://www.openstack.org/containers/leveraging-containers-and-openstack/. [Accessed 20 05 2020]
[13] [Online].Available: https://www.opennetworking.org/r-cord/. [Accessed 20 05 2020]
[14] [Online].Available: https://www.sdnlab.com/19664.html. [Accessed 20 05 2020]
[15] [Online].Available: https://www.opennetworking.org/xos/. [Accessed 20 05 2020]
[16] [Online].Available: http://www.conference.cn/download/ONOS/002.pdf. [Accessed 20 05 2020]
[17] [Online].Available: https://www.opennetworking.org/m-cord. [Accessed 20 05 2020]
[18] [Online].Available: https://guide.opencord.org/cord-4.1/profiles/mcord/overview.html. [Accessed 20 05 2020]
[19] [Online].Available: https://www.datacenterdynamics.com/en/news/radisys-launches-server-system-for-telcos. [Accessed 20 05 2020]
[20] [Online].Available: https://zh-hant.insight.tech/%E5%85%A7%E5%AE%B9/5g-%E9%9C%80%E8%A6%81%E5%BB%BA%E6%A7%8B%E6%A8%A1%E5%A1%8A%E7%A1%AC%E9%AB%94%E5%92%8C%E9%96%8B%E6%94%BE%E5%8E%9F%E5%A7%8B%E7%A2%BC%E8%BB%9F%E9%AB%94. [Accessed 20 05 2020]
[21] [Online].Available: https://en.wikipedia.org/wiki/Open_vSwitch. [Accessed 20 05 2020]
[22] [Online].Available: https://www.netadmin.com.tw/netadmin/zh-tw/technology/9FF6A417220F400884C788AB00FA3750. [Accessed 20 05 2020]
[23] [Online].Available: https://docs.pica8.com/display/PICOS2111cg/Creating+a+Group+Table. [Accessed 20 05 2020]
[24] Jibum Hong, Woojoong Kim, Jae-Hyoung Yoo, Won-Ki Hong, "Design and Implementation of Container-based M-CORD Monitoring System", IEICE – The 20th Asia-Pacific Network Operations and Management Symposium (APNOMS) 2019.
[25] Talal Alharbi, Ahamed Aljuhani, "Holistic DDoS Mitigation Using NFV", 2017 IEEE 7th Annual Computing and Communication Workshop and Conference (CCWC), Jan. 2017.
[26] Talha Ahmed Khan, Asif Mehmood, Javier Jose Diaz Rivera, Wang-Cheol Song, "Machine Learning Approach for Automatic Configuration and Management of 5G Platforms", IEICE – The 20th Asia-Pacific Network Operations and Management Symposium (APNOMS) 2019
[27] [Online].Available: https://guide.opencord.org/cord-4.1/install_physical.html. [Accessed 20 05 2020]
[28] [Online].Available: https://www.netadmin.com.tw/netadmin/zh-tw/technology/F332544D7A274E8AAAF7D0295328B744. [Accessed 20 05 2020]
[29] [Online].Available: https://www.comparitech.com/net-admin/network-intrusion-detection-tools. [Accessed 20 05 2020]
[30] [Online].Available: https://zh.wikipedia.org/wiki/Snort. [Accessed 20 05 2020]
[31] [Online].Available: http://www.hping.org. [Accessed 20 05 2020]

指導教授

陳彥文

審核日期

2020-7-21

推文