信息网络安全

信息网络安全 ›› 2016, Vol. 16 ›› Issue (3): 71-76.doi: 10.3969/j.issn.1671-1122.2016.03.012

• • 上一篇    下一篇

基于数据包回溯的软件定义网络中的故障排除

蒋宽(), 杨鹏   

  1. 南京邮电大学,江苏南京210000
  • 收稿日期:2015-12-15 出版日期:2016-03-25 发布日期:2020-05-13
  • 作者简介:

    作者简介: 蒋宽(1990--),男,山东,硕士研究生,主要研究方向为软件定义网络架构与安全应用;杨鹏(1993--),男,江苏,硕士研究生,主要研究方向为软件定义网络架构与安全应用.

  • 基金资助:
    国家自然科学基金[61272422]

Troubleshooting Based on Packet Traceback in Software-defined Networks

Kuan JIANG(), Peng YANG   

  1. Nangjing University of Posts and Telecommunications, Nanjing Jiangsu 210000, China
  • Received:2015-12-15 Online:2016-03-25 Published:2020-05-13

RichHTML

2

PDF (PC)

104

摘要：

面对日益严重的网络安全问题,网络管理员主要使用解决特定问题的工具,如ping,traceroute,SNMP,tcpdump等,能否找到故障位置关键靠网络管理员的经验和能力.文章介绍了基于来源回溯的故障排除方案,并从数据包回溯角度完善了方案的不足.来源回溯适用于流规则冲突方面的检测,直接使用图论方法进行分析,得到错误原因,但是面对如规则丢失这类的问题,并没有很好的解决方案.文章提出一种基于数据包回溯的故障排除方案,能够有效检测流规则冲突和规则丢失这两类事件,扩大故障排除的范围,是对来源回溯方案的重要补充.通过程序构造特定源地址的数据包,按照逆向策略进行运算得到故障位置.整个回溯过程并不需要用户进行人为的干预,具有实时性和自动化的特点.

关键词: 软件定义网络, 来源回溯, 故障排除

Abstract:

With the increasingly numbers of serious problems of network security, network operators solve specific problems mainly use the tools such as ping, traceroute, SNMP, tcpdump and so on. Their experience and ability is crucial to find the position of the fault. This paper describes the troubleshooting way based on provenance traceback and improves it with packets traceback. Provenance traceback is used in detection of rule conflicts, which using graph theory to locate the root cause, but not used widely in the detection of rule loss. This paper presents a troubleshooting solution that based on packet traceback, which can effectively detect the rule conflicts and rules loss and expand the scope, which is an important complement to the provenance traceback. Constructing packets by specific source IP addresses, using back policy to get the fault location. The whole process does not require the user to back human intervention, with real-time and automated features.

Key words: software-defined networks, provenance traceback, troubleshooting

中图分类号: