Research and Implementation of Scientific DMZ Based on SDN

doi:10.3969/j.issn.1671-1122.2019.09.028

Abstract

Abstract:

The transmission of scientific big data usually has high requirements for network transmission performance different from ordinary Internet applications. In actual production networks, especially in LANs, many network security devices such as firewalls and IDS are usually deployed, these devices provide security for the transmission of traffic, but also affect network transmission performance. This paper uses the new software-defined networking technology, proposed a scientific DMZ network architecture based on software-defined networking. While protecting the security of common business flows, it handles the trusted scientific data stream flexibly to ensure the transmission performance of scientific data.

Key words: scientific data transmission, software-defined networking, scientific DMZ

CLC Number:

TP309

Yaqiu ZHOU, Yongmao REN, Zhuo LI, Xu ZHOU. Research and Implementation of Scientific DMZ Based on SDN[J]. Netinfo Security, 2019, 19(9): 134-138.

Figures/Tables 5

References 15

[1]	DIEGO K, FERNANDO M V R, PAULO V, et al. Software-Defined Networking: A Comprehensive Survey[J]. Proceedings of the IEEE, 2015, 103(1): 14-76.
[2]	XIA Wenfeng, WEN Yonggang, CHUAN H F, et al.A Survey on Software-Defined Networking[J]. IEEE Communications Surveys & Tutorials, 2015, 17(1): 27-51.
[3]	MCKEOWN N, ANDERSON T, BALAKRISHNAN H, et al.OpenFlow: Enabling Innovation in Campus Networks[J]. Acm Sigcomm Computer Communication Review, 2008, 38(2): 69-74.
[4]	WESINGER R E, COLEY C D. Firewall Providing Enhanced Network Security and User Transparency: United States, US5898830A[P].1999-4-27.
[5]	REN Yongmao, TANG Haina, LI Jun, et al.Optical Network Control and Management for Grid Applications[J]. Journal of Software, 2008, 19(6): 1481-1490.
	任勇毛,唐海娜,李俊,等.支持网格应用的光网络控制和管理[J].软件学报,2008,19(6):1481-1490.
[6]	WANG Weihang, REN Yongmao, TANG Mingjie, et al.End-System Performance Aware Transport Protocols[J]. Journal of Software, 2010, 21(7): 1635-1645.
	王伟杭,任勇毛,唐明洁,等.终端性能自适应传输协议[J].软件学报, 2010,21(7):1635-1645.
[7]	ELI D, LAUREN R, BRIAN T, et al.The Science Dmz: A Network Design Pattern for Data-intensive Science[J]. Scientific Programming, 2014, 22(2): 173-185.
[8]	NARISETTY, RAJA R. How Long Does It Take to Offload Traffic from Firewall?[EB/OL]. , 2013-12-15.
[9]	ZHANG Chaokun, CUI Yong, TANG Heyi, et al.State of the Art Survey on Software Defined Networking(SDN)[J]. Journal of Software, 2015, 26(1): 62-81.
	张朝昆,崔勇,唐翯祎,等.软件定义网络(SDN)研究进展[J].软件学报,2015,26(1):62-81.
[10]	ZUO Qingyun, CHEN Ming, ZHAO Guangsong, et al.Research on OpenFlow Based SDN Technologies[J]. Journal of Software, 2013, 24(5): 1078-1097.
	左青云,陈鸣,赵广松,等.基于OpenFlow的SDN技术研究[J].软件学报,2013,24(5):1078-1097.
[11]	The Open Network Operating System. Wiki Documents[EB/OL]. , 2019-4-10.
[12]	VAHIDA Z A, PIYUSH C.Network Discovery Protocol LLDP and LLDP-MED[J]. International Journal of Computer Applications, 2010, 1(9): 93-97.
[13]	The Energy Sciences Network(ESnet). Iperf3: A TCP, UDP,SCTP Network Bandwidth Measurement tool[EB/OL]. , 2018-11-15.
[14]	HALILI, E H.Apache JMeter: A Practical Beginner’s Guide to Automated Testing and Performance Measurement for Your Websites[M]. London Packt Publishing, 2008.
[15]	WILL R. Nginx: the High-performance Web Server and Reverse Proxy[EB/OL]. , 2018-11-15.