CN104363159A - Virtual open network building system and method based on software definition network - Google Patents

Abstract

An open virtual network construction system based on software-defined network, including network topology information detection module, network performance detection module, network resource integration module, network resource presentation module, user virtual node selection module, virtual network management module, network resource virtualization module, a host resource virtualization module, and a user interface module; a software-defined network-based open virtual network construction method, including steps: (1) users log in to the open virtual network construction system; (2) the system collects network resource information and sends The user visually displays; (3) the user discovers resources for a specific business and puts forward a service request; (4) the system provides the user with a customized virtual network service; the invention realizes the goal of the user to open and build a virtual network independently.

Description

A software-defined network-based open virtual network construction system and method

technical field

The invention relates to a software-defined network-based open virtual network construction system and method, belonging to the technical field of the Internet, in particular to the technical field of software-defined networks.

Background technique

Network virtualization is an emerging network technology. It abstracts the shared underlying infrastructure (Infrastructure) through virtualization technology and provides a unified programmable interface. It virtualizes infrastructure construction through virtual resource slicing or tunneling. Build multiple isolated and heterogeneous virtual networks on top of the existing infrastructure to provide users with differentiated services. Virtual networks can be simply isolated on the edge network through existing virtual local area network (Virtual Local Area Network, VLAN), virtual private network (Virtual Private Networks, VPN) and other technologies, and data transmission on the public Internet still relies on best effort At the same time, these operations are only supported by the basic network administrator, the process is cumbersome and the function of virtual network construction is limited, which is not enough to meet the diverse needs of multi-user flexible network construction.

In software-defined networking (Software Defined Networking, SDN), "software definition" makes users more proactive, and users can develop and control their own applications and hardware platforms according to their own needs. For SDN, it is a centralized control architecture, which can control multiple network nodes in a unified way, so that it is easier to obtain network device information, control network devices, and present a unified network view to applications/customers, including switches, Routers, virtual machines, storage, virtual subnets, and virtual gateways for communication between virtual subnets. Users can configure virtual machine IP addresses, subnets, and routing rules between subnets according to their own network planning. Both provide a good platform for users to realize independent and flexible construction of private networks and flexible control of networks.

How to use the open customization and centralized control features of SDN to solve the problem of closed and rigid Internet, give users the ability to customize the network system and network protocol, improve the visibility and controllability of the network, and support users to independently define personalized network rules and control strategies have become a technical problem that needs to be solved urgently in the field of Internet technology.

Contents of the invention

In view of this, the purpose of the present invention is to invent a software-defined network-based open virtual network customization method and related systems to solve the problem that the network is invisible to users and users can only use the network passively, so as to realize the active participation of users in network control , Independently select network resources, customize network strategies, and finally achieve the goal of improving user service experience and providing intelligent and personalized services.

In order to achieve the above object, the present invention proposes a software-defined network-based open virtual network construction system, the system includes the following functional modules:

Network topology information detection module: This module is responsible for the detection of network topology information. The network topology mainly refers to the topology structure of the relative logical positions between virtual switches, that is, the topology structure is logical, not physical; The above network topology information is detected by the SDN controller and reported to the application program; because the network topology information is dynamically changing, the SDN controller sends a detection packet to the responsible virtual switch at regular intervals to determine the virtual switch effectiveness; each virtual switch is directly connected to the SDN controller, forming the nodes of the network topology diagram; for link information between nodes, the SDN controller can be regarded as the root node using the Doubletree algorithm to detect;

When a node increases or fails, add or remove the node and connected edges in the network topology map; when a link fails, remove the corresponding edge in the network topology map to Ensure the correctness of network topology information;

The detection content includes the state of the node and the state of the link, which are "active", "suspended" and "downtime". The "active" state means that the node or link is working normally and there is traffic passing, and the "suspended" state It means that the node or link is in an idle state, that is, it works normally but no traffic passes through, and the "downtime" state means that the node or link is abnormal and unreachable; according to the above information, the network topology information detection module constructs nodes and links The state data structure table of , and submit it to the network resource integration module;

Network performance detection module: This module is responsible for detecting the performance of the network. The detection content includes: node processing capability, node buffer capacity and queue length, queue priority scheduling principle and parameters, link delay and bandwidth, network used protocol, etc., according to the above information, the network performance detection module constructs a performance information table of nodes and links, and submits it to the network resource integration module;

The module detects the network in two ways: active detection and passive detection. The active detection method refers to sending a specially combined detection packet in the network, and through the analysis of the characteristic changes of the detection packet affected by the network, Obtain network status and performance changes; the passive detection method refers to deploying data collectors at network measurement points, collecting network traffic flowing through the measurement points, periodically polling passive detection devices and collecting information to judge network performance and state;

Network resource integration module: this module integrates the information provided by the network topology information detection module and the network performance detection module to obtain a data structure with network performance and network topology, including data describing nodes and links Structure table, and data structure information describing the network as a whole;

Network resource presentation module: this module draws the network diagram provided by the network resource integration module, and submits it to the user interaction interface to present it intuitively to the user, specifically: this module according to the data structure information provided by the network resource integration module, Draw a network topology diagram and present the topology diagram to the user; the user can zoom in or zoom out the local network information according to the user's needs; according to the user's needs, the module can present the current network performance parameters and physical parameters; the user can freely touch the Select nodes and links, and conveniently exchange information with the open virtual network construction system to generate topology information;

The network topology diagram is a complex weighted diagram with weights for both nodes and links, wherein the weights of the nodes reflect the current processing capabilities of the nodes, and the weights of the links are delays, or bandwidths, or delays The weighted expression of bandwidth and bandwidth, the complex weighted graph is the basis of user-customized virtual network;

User virtual node selection module: the user independently selects a limited number of virtual nodes and connection relationships according to the visualized physical network resource interface and their own specific needs, and then submits the selected virtual nodes to the virtual network management module; The post-virtual network management module runs the corresponding mapping algorithm to rebuild the virtual network according to the topological relationship provided by the user, and the system displays predictable network creation effects, and the user decides whether to choose again according to the effect;

Virtual network management module: This module is responsible for managing the virtual resources of the network resource virtualization module and the host resource virtualization module, and constructing and managing the virtual network; this module learns about all resource information in the underlying network by collecting, evaluating and managing Various information of the entire network can complete the mapping from the virtual network to the existing network topology according to user needs, and can allocate and optimize global resources according to specific business needs; this module ensures that there will be no conflicts in the process of resource allocation, making the entire network The virtual network mapping operation process is easy to maintain and adjust, which improves the convenience of network control; this module generates a virtual network topology according to the computing and storage capabilities of the virtual machine, the delay of the link between routers and the corresponding bandwidth; the virtual network topology The structure shields the connection relationship of physical links and provides a point-to-point logical connection for the upper layer of the virtual network; network resource virtualization provides each user with a logically independent topology view, which provides convenience for users to customize the virtual network; when the When a user needs to create multiple virtual networks, the system manages different virtual networks of the user in parallel to meet the differentiated needs of different virtual networks of the same user, and the user can also dynamically adjust or cancel the constructed virtual network;

Network resource virtualization module: This module completes the mapping of virtual routers to existing router topologies according to user requirements; through virtual resource slicing, multiple isolated and heterogeneous virtual networks are mapped to the same physical network at the same time. Network resource virtualization is divided into two stages: node mapping and link mapping. The underlying physical network can support flexible path segmentation and periodic path migration.

Host resource virtualization module: This module provides the function of virtualizing a physical host into multiple virtual hosts, and the virtualized host resources will be submitted to the virtual network management module for unified management; the host resource virtualization module is used in the system as The user provides a control operation interface for the virtual machine to realize functions such as creating a virtual host, switching virtual host power, device operation, etc.; realizing the user's flexible control and dynamic adjustment of the virtual host; the physical host is used as the command execution unit to perform specific operations At the same time, it is also used as a command translation unit to forward part of the operating commands and parameters of the system to the virtual host for execution; the system communicates between the physical host and the virtual host by means of terminal sockets;

User interaction interface module: This module provides an interface for users to interact with the open virtual network construction system. The interfaces are divided into four categories: network resource display interface, virtual network resource management interface and user demand perception interface. These interfaces are Two-way, that is, to provide the function of passing parameters between users and the system;

The function of the network resource display interface is: to periodically display the network information detected by the system to the user through integration, or to query whether the current network resources can meet the demand, or the user actively proposes a demand;

The function of the virtual network resource management interface is: the user realizes virtual node creation, switching virtual node power supply, etc. through the control operation interface of the virtual node; the user performs device operations on the virtual node to realize the addition or addition of virtual node storage or network interface Deletion, complete machine migration of virtual nodes, etc., to realize flexible control and dynamic adjustment of virtual nodes; after the virtual nodes are established, the physical machine calls specific scripts to start network services through terminal sockets, and establishes a communication connection with the central console;

The function of the user demand perception interface is: the system perceives user demand through the interface, including the type, time, location, preference, etc. of the demand, and performs resource optimization scheduling.

In order to achieve the above object, the present invention proposes a software-defined network-based open virtual network construction method, characterized in that: the method includes the following steps:

(1) The user logs in to the open virtual network construction system through the user interaction interface; the users include not only basic network administrators, business network administrators, but also ordinary network users;

(2) The open virtual network construction system collects network resource information through the controller in the software-defined network and displays it visually to the user;

(3) The user discovers resources for a specific business through the open virtual network construction system, and puts forward a service request; the resource discovery performed by the user through the system includes the discovery of network resources and the discovery of content resources; Specific business refers to a certain business application that the user needs to configure;

(4) The open virtual network construction and customization system provides users with virtual network customization services, and users customize virtual networks according to specific business needs.

The user interaction interface described in the step (1) refers to the operation interface provided by the open virtual network construction system to the user's terminal, and the user can use the functions provided by the system simply and quickly through the operation interface, both Including basic network management functions such as user registration entrance, network topology map interface, search window, location display of nearby network resources and content resources, Internet Protocol positioning between networks; also includes virtual network solution display interface, customized virtual network, Application programming interface API provision, free labeling of content location, third-party data error correction and other functions unique to this open virtual network construction method; these operating functions vary according to user rights, including basic network administrators, Enterprise network administrators, including ordinary network users, open some basic network management operations according to network operation policies and develop new policy customization functions for enterprise network administrators or ordinary network users to realize the customized construction of their own virtual networks .

In the step (2), the system collects network resources and displays them visually to the user. The system interacts with the controller in the software-defined network to obtain resource information of the entire network, including network topology, network status, Real-time information such as link failures of the underlying physical network, network emergencies, and traffic information on the business layer above the network layer; the system summarizes the obtained network resource information, and intuitively displays to the user through a visual control interface Display, the current status of the entire network will be fully displayed to the user, which is convenient for subsequent users to customize and build a virtual network to avoid network congestion, not just passively accept the network; the system provides basic network generation services for applications, and can provide Provide customized virtual network policy interface for specific applications;

In the step (3), the discovery of the network resource refers to the query of the network element device by the user through the open virtual network construction system, so as to help the user understand the location of the network resource inquired in the network. Specific location; the discovery of the content resource refers to the query of the content resource by the user through the system, so as to help the user understand the distribution position of the content resource inquired in the network, so that the user can select a reasonable location of the content resource for connection The service request mentioned above refers to user-customized service connection, which can be a simple end-to-end connection, or a complex interconnection relationship between multi-party service nodes customized by the user according to specific requirements, so that the network appears externally Specific topological structure features; when a certain business server or a certain segment of the network has a large load, the open virtual network construction system performs global resource load balancing, optimizes scheduling of user requests, and determines which network resources are used to complete user requests. service request.

In the step (4), the system provides users with virtual network customization services to support multiple users to freely build a proprietary network; the free construction of a proprietary network depends on network virtualization technology, and independently selects network resources, according to the computing power of the virtual machine and storage capacity, the delay and corresponding bandwidth of the links between routers, generate multiple isolated and heterogeneous virtual networks, which shield the connection relationship of physical links, and provide point-to-point logic for the upper layer of the virtual network Connection provides each user with a logically independent topology view, allowing users to gain end-to-end control over the network.

The open virtual network construction and customization system described in the step (4) provides virtual network customization services to users, and the specific content of customizing the virtual network for users according to the needs of specific services is: the open virtual network construction system according to the network Based on the information obtained by topology detection and performance detection, and customizing personalized construction strategies, virtual network mapping calculations are performed according to different construction strategies; the described open virtual network construction system recommends default construction schemes to users, and then users perform Adjustment and modification, as well as a more direct self-construction method, the specific operation is: according to the visualized network resource interface, the user independently selects a limited number of virtual nodes according to business needs, personal preferences, network status and other information; after selection The virtual network calculation module runs the corresponding mapping algorithm to rebuild the virtual network according to the virtual nodes provided by the user, and the system displays predictable network creation effects, and the user decides whether to choose again according to the effect; when the user needs to create multiple virtual networks , the parallel management of different virtual networks of the user by the system meets the differentiated requirements of different virtual networks of the same user, and the user can also dynamically adjust or cancel the constructed virtual network.

In the step (4), the system provides virtual network customization services to users, and the customization of virtual networks by users according to specific business needs specifically includes the following steps:

(401) User configures virtual nodes: users create virtual nodes, switch virtual node power, etc. through virtual node control and operation interfaces; users perform device operations on virtual nodes to realize addition or deletion of virtual node storage or network interfaces, virtual node complete machine migration, etc., to achieve flexible control and dynamic adjustment of the virtual node; after the virtual node is established, the physical machine invokes a specific script through the terminal socket to start the network service, and establishes a communication connection with the central console; the system will The connection relationship between virtual nodes is opened to users as a configuration interface, which supports parallel deployment of multiple different topological structures; for different users, the system can provide mutually isolated virtual network environments at the same time, and the topological structures of these virtual network environments are Can be customized by the user;

(402) The system creates a virtual network: the system establishes a user account, performs virtual network settings, creates a software router configuration file, performs network service initialization, and starts a separate virtual router node; the system uses user configuration information as input, Or the user can mark the nodes on the visual graphical interface, establish virtual links between corresponding virtual routers, and generate the topology structure of the virtual network; the virtual topology layer shields the connection relationship of the physical links, and provides point-to-point logical connection of points;

(403) User customizes virtual network security: the system can select security services that need to be carried according to the service requirements of users, select security devices on new traffic paths, and configure them for different network elements to provide optional security services for communication. Level-level security control establishes a highly customized channel through the entire infrastructure; the security service function can support virtual services built in a specific logical environment without a lot of manual configuration;

(404) Customized forwarding of traffic: the system works on the virtual topology, and provides hop-by-hop data forwarding services between virtual nodes; the forwarding layer is the data plane of the virtual network, and performs routing lookup functions to obtain data packets After arriving at the next hop virtual node passed by the destination, the packet is encapsulated and forwarded using the corresponding virtual link.

The invention has the beneficial effects of making full use of the open customization and centralized control characteristics of SDN, effectively collecting network information and visually displaying it to users, realizing the goal of users opening up and building virtual networks independently, improving the transmission efficiency of network applications, and effectively It helps realize the intelligence and personalization of network services.

Description of drawings

FIG. 1 is a block diagram of a software-defined network-based open virtual network construction system proposed by the present invention.

FIG. 2 is a flow chart of a method for constructing an open virtual network based on software-defined networking proposed by the present invention.

Fig. 3 is a schematic diagram of the network topology structure of the network used in the simulation experiment of the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings.

Referring to Fig. 1, the present invention proposes an open virtual network construction system based on software-defined network, and the system includes the following functional modules:

Network topology information detection module: This module is responsible for the detection of network topology information. The network topology mainly refers to the topology structure of the relative logical positions between virtual switches, that is, the topology structure is logical, not physical; The above network topology information is detected by the SDN controller and reported to the application program; because the network topology information is dynamically changing, the SDN controller sends a detection packet to the responsible virtual switch at regular intervals to determine the virtual switch effectiveness; each virtual switch is directly connected to the SDN controller, forming the nodes of the network topology diagram; for link information between nodes, the SDN controller can be regarded as the root node using the Doubletree algorithm to detect;

When a node increases or fails, add or remove the node and connected edges in the network topology map; when a link fails, remove the corresponding edge in the network topology map to Ensure the correctness of network topology information;

The detection content includes the state of the node and the state of the link, which are "active", "suspended" and "downtime". The "active" state means that the node or link is working normally and there is traffic passing, and the "suspended" state It means that the node or link is in an idle state, that is, it works normally but no traffic passes through, and the "downtime" state means that the node or link is abnormal and unreachable; according to the above information, the network topology information detection module constructs nodes and links The state data structure table of , and submit it to the network resource integration module;

Network performance detection module: This module is responsible for detecting the performance of the network. The detection content includes: node processing capability, node buffer capacity and queue length, queue priority scheduling principle and parameters, link delay and bandwidth, network used Protocol (such as RIP or OSPF), etc., according to the above information, the performance information table of the network performance detection module constructs nodes and links, and submits it to the network resource integration module;

There are two ways for this module to detect the network: the active detection method and the passive detection method. The active detection method refers to sending a specially combined detection packet (such as ping, traceroute, mtrace, etc.) The analysis of characteristic changes caused by network influence can obtain network status and performance changes; the passive detection method refers to deploying data collectors (Probes) at network measurement points to collect network traffic flowing through the measurement point and periodically polling Passively detect devices and collect information to judge network performance and status;

Network resource integration module: this module integrates the information provided by the network topology information detection module and the network performance detection module to obtain a data structure with network performance and network topology, including data describing nodes and links Structure table, and data structure information describing the whole network (such as node status, bandwidth, capacity, scheduling principle; link status, delay, bandwidth; network routing algorithm, etc.);

Network resource presentation module: this module draws the network diagram provided by the network resource integration module, and submits it to the user interaction interface to present it intuitively to the user, specifically: this module according to the data structure information provided by the network resource integration module, Depict the network topology diagram and present the topology diagram to the user; the user can zoom in or zoom out the local network information according to the needs; according to the user's needs, the module can present the current network performance parameters (delay and bandwidth) and physical parameters ( IP, MAC address, etc.); the user can freely select nodes and links in a touch mode, and easily interact with the described open virtual network construction system to generate topology information;

The network topology diagram is a complex weighted diagram with weights for both nodes and links, wherein the weights of the nodes reflect the current processing capabilities of the nodes, and the weights of the links are delays, or bandwidths, or delays The weighted expression of bandwidth and bandwidth, the complex weighted graph is the basis of user-customized virtual network;

User virtual node selection module: the user independently selects a limited number of virtual nodes and connection relationships according to the visualized physical network resource interface and their own specific needs, and then submits the selected virtual nodes to the virtual network management module; The post-virtual network management module runs the corresponding mapping algorithm to rebuild the virtual network according to the topological relationship provided by the user, and the system displays predictable network creation effects, and the user decides whether to choose again according to the effect;

Virtual network management module: This module is responsible for managing the virtual resources of the network resource virtualization module and the host resource virtualization module, and constructing and managing the virtual network; this module learns about all resource information in the underlying network by collecting, evaluating and managing Various information of the entire network can complete the mapping from the virtual network to the existing network topology according to user needs, and can allocate and optimize global resources according to specific business needs; this module ensures that there will be no conflicts in the process of resource allocation, making the entire network The virtual network mapping operation process is easy to maintain and adjust, which improves the convenience of network control; this module generates a virtual network topology according to the computing and storage capabilities of the virtual machine, the delay of the link between routers and the corresponding bandwidth; the virtual network topology The structure shields the connection relationship of physical links and provides a point-to-point logical connection for the upper layer of the virtual network; network resource virtualization provides each user with a logically independent topology view, which provides convenience for users to customize the virtual network; when the When a user needs to create multiple virtual networks, the system manages different virtual networks of the user in parallel to meet the differentiated needs of different virtual networks of the same user, and the user can also dynamically adjust or cancel the constructed virtual network;

Network resource virtualization module: This module completes the mapping of virtual routers to existing router topologies according to user requirements; through virtual resource slicing, multiple isolated and heterogeneous virtual networks are mapped to the same physical network at the same time. Network resource virtualization is divided into two stages: node mapping and link mapping. The underlying physical network can support flexible path segmentation and periodic path migration.

Host resource virtualization module: This module provides the function of virtualizing a physical host into multiple virtual hosts, and the virtualized host resources will be submitted to the virtual network management module for unified management; the host resource virtualization module is used in the system as The user provides the control operation interface for the virtual machine, realizes functions such as creating a virtual host, switching virtual host power, device operations (such as adding and deleting storage or network interfaces, whole machine migration of virtual hosts, etc.); realizes the flexibility of the user to the virtual host control and dynamic adjustment; the physical host not only performs specific operations as the execution unit of the command, but also forwards part of the operating commands and parameters of the system to the virtual host for execution as the command translation unit; the system utilizes the terminal socket Communicate between the physical host and the virtual host in word mode;

User interaction interface module: This module provides an interface for users to interact with the open virtual network construction system. The interfaces are divided into four categories: network resource display interface, virtual network resource management interface and user demand perception interface. These interfaces are Two-way, that is, to provide the function of passing parameters between users and the system;

The function of the network resource display interface is: to periodically display the network information detected by the system to the user through integration, or to query whether the current network resources can meet the demand, or the user actively proposes a demand;

The function of the virtual network resource management interface is: the user realizes virtual node creation, switching virtual node power supply, etc. through the control operation interface of the virtual node; the user performs device operations on the virtual node to realize the addition or addition of virtual node storage or network interface Deletion, complete machine migration of virtual nodes, etc., to realize flexible control and dynamic adjustment of virtual nodes; after the virtual nodes are established, the physical machine calls specific scripts to start network services through terminal sockets, and establishes a communication connection with the central console;

The function of the user demand perception interface is: the system perceives user demand through the interface, including the type, time, location, preference, etc. of the demand, and performs resource optimization scheduling.

Referring to Fig. 2, the present invention proposes a method for constructing an open virtual network based on a software-defined network, wherein the method includes the following steps:

(1) The user logs in to the open virtual network construction system through the user interaction interface; the users include not only basic network administrators, business network administrators, but also ordinary network users;

(2) The open virtual network construction system collects network resource information through the controller in the software-defined network and displays it visually to the user;

(3) The user discovers resources for a specific business through the open virtual network construction system, and puts forward a service request; the resource discovery performed by the user through the system includes the discovery of network resources and the discovery of content resources; Specific business refers to a certain business application that the user needs to configure;

(4) The open virtual network construction and customization system provides users with virtual network customization services, and users customize virtual networks according to specific business needs.

The user interaction interface described in the step (1) refers to the operation interface provided by the open virtual network construction system to the user's terminal, and the user can use the functions provided by the system simply and quickly through the operation interface, both Including basic network management functions such as user registration entrance, network topology map interface, search window, location display of nearby network resources and content resources, Internet Protocol positioning between networks; also includes virtual network solution display interface, customized virtual network, Application programming interface API provision, free labeling of content location, third-party data error correction and other functions unique to this open virtual network construction method; these operating functions vary according to user rights, including basic network administrators, Enterprise network administrators, including ordinary network users, open some basic network management operations according to network operation policies and develop new policy customization functions for enterprise network administrators or ordinary network users to realize the customized construction of their own virtual networks .

In the step (2), the system collects network resources and visually displays them to the user. The specific content is: the system interacts with the controller in the software-defined network to obtain resource information of the entire network, including network topology diagrams (such as including switches) , gateways, bridges, firewalls, servers, wireless access points, etc., and corresponding to these network equipment name description, state, physical meaning, etc.), network status (such as link bandwidth, delay, congestion, jitter, throughput rate , packet loss rate, etc.), link failures of the underlying physical network, network emergencies, and service layer traffic information above the network layer (such as service type, service status, service space distribution, service flow direction, etc.) and other real-time information; The system summarizes the obtained network resource information, visually displays it to the user through a visual control interface, and fully displays the current status of the entire network to the user, so that subsequent users can customize and build a virtual network to avoid Network congestion is not just a passive acceptance of the network; the system provides basic network generation services for applications, and can provide customized virtual network policy interfaces for specific applications;

In the step (3), the discovery of the network resource refers to the query of the network element device by the user through the open virtual network construction system, so as to help the user understand the location of the network resource inquired in the network. Specific location; the discovery of the content resource refers to the query of the content resource by the user through the system, so as to help the user understand the distribution position of the content resource inquired in the network, so that the user can select a reasonable location of the content resource for connection The service request mentioned above refers to user-customized service connection, which can be a simple end-to-end connection, or a complex interconnection relationship between multi-party service nodes customized by the user according to specific requirements, so that the network appears externally Specific topological structure features; when a certain business server or a certain segment of the network has a large load, the open virtual network construction system performs global resource load balancing, optimizes scheduling of user requests, and determines which network resources are used to complete user requests. service request.

In the step (4), the system provides users with virtual network customization services to support multiple users to freely build a proprietary network; the free construction of a proprietary network depends on network virtualization technology, and independently selects network resources, according to the computing power of the virtual machine and storage capacity, the delay and corresponding bandwidth of the links between routers, generate multiple isolated and heterogeneous virtual networks, which shield the connection relationship of physical links, and provide point-to-point logic for the upper layer of the virtual network Connection provides each user with a logically independent topology view, allowing users to gain end-to-end control over the network.

The open virtual network construction and customization system described in the step (4) provides virtual network customization services to users, and the specific content of customizing the virtual network for users according to the needs of specific services is: the open virtual network construction system according to the network Based on the information obtained by topology detection and performance detection, and customizing personalized construction strategies, virtual network mapping calculations are performed according to different construction strategies; the described open virtual network construction system recommends default construction schemes to users, and then users perform Adjustment and modification, as well as a more direct self-construction method, the specific operation is: according to the visualized network resource interface, the user independently selects a limited number of virtual nodes according to business needs, personal preferences, network status and other information; after selection The virtual network calculation module runs the corresponding mapping algorithm to rebuild the virtual network according to the virtual nodes provided by the user, and the system displays predictable network creation effects, and the user decides whether to choose again according to the effect; when the user needs to create multiple virtual networks , the parallel management of different virtual networks of the user by the system meets the differentiated requirements of different virtual networks of the same user, and the user can also dynamically adjust or cancel the constructed virtual network.

In the step (4), the system provides virtual network customization services to users, and the customization of virtual networks by users according to specific business needs specifically includes the following steps:

(401) User configures virtual nodes: users create virtual nodes, switch virtual node power, etc. through virtual node control and operation interfaces; users perform device operations on virtual nodes to realize addition or deletion of virtual node storage or network interfaces, virtual node complete machine migration, etc., to achieve flexible control and dynamic adjustment of the virtual node; after the virtual node is established, the physical machine invokes a specific script through the terminal socket to start the network service, and establishes a communication connection with the central console; the system will The connection relationship between virtual nodes is opened to users as a configuration interface, which supports parallel deployment of multiple different topological structures; for different users, the system can provide mutually isolated virtual network environments at the same time, and the topological structures of these virtual network environments are Can be customized by the user;

(402) The system creates a virtual network: the system establishes a user account, performs virtual network settings, creates a software router configuration file, performs network service initialization, and starts a separate virtual router node; the system uses user configuration information as input, Or the user can mark the nodes on the visual graphical interface, establish virtual links between corresponding virtual routers, and generate the topology structure of the virtual network; the virtual topology layer shields the connection relationship of the physical links, and provides point-to-point logical connection of points;

(403) The user performs virtual network security customization: the system can select security services that need to be carried according to the user's service requirements, and select security devices (such as firewalls, IDS/IPS, load balancers, VPNs, etc.) on new traffic paths function), and configure it for different network elements, provide optional security control for communication, and establish a highly customized channel through the entire infrastructure; the security service function can support the virtual services without extensive manual configuration;

(404) Customized forwarding of traffic: the system works on the virtual topology, and provides hop-by-hop data forwarding services between virtual nodes; the forwarding layer is the data plane of the virtual network, and performs routing lookup functions to obtain data packets After arriving at the next hop virtual node passed by the destination, the packet is encapsulated and forwarded using the corresponding virtual link.

Referring to FIG. 3 , the inventor conducted a test simulation experiment on the system and method proposed by the present invention by using Mininet, an SDN simulation test environment widely recognized in the Internet technology field.

50 testers participated in this test. The user's demand is to build a controllable and manageable virtual network that meets their own needs on the provided underlying physical network.

In the experiment, it is assumed that the user needs to allocate the virtual nodes and links of virtual network requests 1 and 2 to the corresponding physical nodes and links of the underlying physical network. Virtual network request 1 consists of nodes a and b and the link connecting them. Node a requires 40 units of CPU resources, node b requires 15 units of CPU resources, and link bandwidth resources require 20 units. The virtual network request 2 consists of three nodes c, d, e and three links connecting them in pairs, where nodes c and d require 10 units of CPU resources respectively, node e requires 30 units of CPU resources, and two nodes ce and de require A link requires 15 units of bandwidth resources, and link cd requires 10 units of bandwidth resources. The resources of nodes and links on the underlying physical network can be seen in Table 1:

Table 1 The underlying physical network resources

On the one hand, the experiment uses an existing classic virtual network mapping algorithm and a new virtual network mapping algorithm to map two virtual network requests for comparison. The classic algorithm is the algorithm proposed by Minlan Yu et al. in the article "Rethinking virtual network embedding:substrate support for path splitting and migration" in 2008. The latest algorithm is Jianxin Liao et al. in the article "Topology-aware Virtual Network Embedding Using Multiple Characteristics" in 2014. The NDC algorithm proposed in this paper. On the other hand of the experiment, each tester acts as a user, and uses the system and method proposed by the present invention to select nodes and links without knowing the results of the algorithm mapping and the test results of other testers.

The experimental results are as follows:

Evaluation indicator 1: Revenue/Cost Ratio

Evaluate the mapping result calculated by the classic algorithm, and the benefit-cost ratio of mapping is 0.5344; evaluate the mapping result obtained by the latest algorithm NDC calculation, the benefit-cost ratio of mapping is 0.5469; adopt the system and the proposed system of the present invention to 50 testers The mapping results obtained by the method are counted, and the average benefit-cost ratio of the mapping is 0.5587

Case 2: Subjective service satisfaction

For each tester, we conduct a black-box test on the classic algorithm results, the latest algorithm results, and the mapping results obtained by using the system and method proposed by the present invention. The tester cannot know the specific algorithm and results. The virtual network 1 and 2 obtained by mapping are actually tested, and then the actual network experience of the two virtual networks in the three situations is sorted. For virtual network 1, 47 of the 50 testers chose the mapping result obtained by the system and method proposed by the present invention as the optimal result; and for virtual network 2, 43 of the 50 testers chose The mapping result obtained by using the system and method proposed in the present invention is taken as the optimal result.

Result analysis:

50 testers used the inventor's self-customized virtual network mapping strategy to map the two virtual networks to the underlying physical network, and compared their results with the classic algorithm results and the latest algorithm results for actual running experience and evaluation. We compare and evaluate the self-customized virtual network mapping strategy with the classic algorithm and the latest algorithm through the objective benefit-cost ratio and subjective service satisfaction. The experimental results show that with the objective benefit-cost ratio as the evaluation index, the self-customized virtual network mapping strategy can obtain more efficient mapping results than the classical algorithm and the latest algorithm; with the subjective service satisfaction as the evaluation index, the self-customized virtual network mapping strategy In most cases, the strategy has obtained mapping results that are more satisfying to users than the classical algorithm and the latest algorithm.

The experimental results fully prove that it is completely feasible to use the customized virtual network mapping strategy to complete the task of virtual network mapping. The customized mapping results are more efficient and flexible than running the algorithm directly, and are closer to the needs of users, making it possible for users to participate in decision-making.

The inventor has obtained satisfactory experimental results through a large number of experiments and simulations, which proves that the present invention is feasible and very effective.

Claims (8)

1., based on an open virtual network constructing system for software defined network, it is characterized in that: described system comprises following functional module:

Network topological information detecting module: the detection of this module in charge network topological information, described network topology mainly refers to the topological structure of the relative logical location between virtual switch, and namely topological structure is in logic, and not physically; Described network topological information is responsible for detection by SDN controller and result is offered application program; Because network topological information is dynamic change, SDN controller sends detection packet, to determine the validity of this virtual switch to be responsible for virtual switch at set intervals; Each virtual switch is directly connected with SDN controller, constitutes the node of described network topological diagram; For the link information between node, SDN controller can be regarded as root node and utilize Doubletree algorithm to detect;

When node occurring and increasing or lost efficacy, add in described network topological diagram or remove this node and connected limit; When link failure, in described network topological diagram, corresponding sides are removed, to ensure the correctness of network topological information;

Detection content comprises the state of node and the state of link, " activity ", " hang-up ", " shutdown " respectively, wherein " activity " state refers to that node or antenna efficiency are normal and has flow to pass through, " hang-up " state refers to that node or link are in idle condition, namely working properly but pass through without flow, it is abnormal, unreachable that " shutdown " state refers to that node or link occur; According to above information, the status data structure table of described network topological information detecting module structure node and link, and submitted to network resource integration module;

Network performance detecting module: the performance of this module in charge detection network, detection content comprises: the agreement etc. that the time delay of the disposal ability of node, the buffer pool size of node and queue length, queue priority scheduling principle and parameter, link and bandwidth, network use, according to above information, the performance information table of described network performance detecting module structure node and link, and submitted to network resource integration module;

The mode of this module detection network has active probe mode and passive detection mode two kinds, described active probe mode points in network the detection packet sent through specific combination, the analysis of the occurrence features change by web influence suffered by detection packet, obtains network state and performance change; Passive detection mode refers to disposes data acquisition unit in the measurement point of network, collects and flows through the network traffics of this measurement point, periodically poll passive detection equipment Information Monitoring, to judge network performance and state;

Network resource integration module: the information that described network topological information detecting module and described network performance detecting module provide is integrated by this module, obtain the data structure with network performance and network topology structure, comprise the data structure table of description node and link, and describe the data structure information of overall network; Internet resources present module: the Drawing Network Diagram that network resource integration module provides by this module out, be submitted on User Interface and present to user intuitively, be specially: the data structure information that this module provides according to described network resource integration module, depict network topology structure figure, and this topology diagram is presented to user; User can zoom in or out partial network information as required; According to user's needs, this module can present current network performance parameter and physical parameter; User with touch manner unrestricted choice node and link, can carry out information interaction with described open virtual network constructing system and generates topology information easily;

Described network topology structure figure is that a node and link are all with the complicated weighted graph of weight, the weight of its interior joint reflects the current processing capabilities of node, the weight of link is time delay, or bandwidth, or the weighting of time delay and bandwidth is expressed, this complicated weighted graph is the basis of customization virtual network;

User's dummy node selects module: the dummy node of selection, according to described visual physical network resource interface, according to the real needs of oneself, from dummy node and the annexation of main separation finite number, is then submitted to virtual network administration module by user; The topological relation having selected rear virtual network administration module to provide according to user, runs corresponding mapping algorithm and rebuilds virtual network, and system shows predictable network creation effect, and user determines whether again select according to effect;

Virtual network administration module: the virtual resource of this module in charge network resource administration virtualization modules and host resource virtualization modules, and structure and the management of carrying out virtual network; This module is passed through all resource informations in collection, assessment and management bottom-layer network thus is understood the various information of whole network, the mapping of virtual network to existing network topology can be completed according to user's request, allotment and the optimization of global resource can be carried out according to concrete business demand; This module ensures can not clash in the process of Resourse Distribute, makes the mapping of whole virtual network process of runing be convenient to safeguard adjustment, improves the convenience of network control; This module calculates and storage capacity according to virtual machine, the time delay of link and corresponding bandwidth between router, generating virtual network topology structure; This virtual network topology shields the annexation of physical link, and the upper strata for virtual network provides the logic of point-to-point to connect; Internet resources are virtual turns to each user provides in logic independently topological view, for customization virtual network is provided convenience; When described user needs to create multiple virtual network, the concurrent management that the different virtual network of described system of users carries out, meet the differentiated demand of same user's different virtual network, described user also can adjust dynamically or cancel constructed virtual network;

Internet resources virtualization modules: this module completes the mapping of virtual router to existing route device topology according to user's request; By the mode that virtual resource is cut into slices, to be isolated from each other multiple and the virtual network of isomery is mapped on same physical network simultaneously; Internet resources are virtual is divided into node mapping and two stages of link maps, and bottom physical network can support path segmentation flexibly and periodic Path Migration;

Host resource virtualization modules: this module provides virtual for the physical host function becoming multiple fictitious host computer, the host resource fictionalized carries out unified management by being submitted to described virtual network administration module; This host resource virtualization modules provides the control operation interface for virtual machine for user in systems in which, realizes creating the functions such as fictitious host computer, switch fictitious host computer power supply, equipment operating; Realize user to the flexible control of fictitious host computer and dynamic conditioning; Described physical host both performs specific operation as the performance element of order, simultaneously also the part operation order of described system and parameter to be forwarded in fictitious host computer to perform as the unit of reporting of order; Described system utilizes terminal socket mode to communicate between physical host and fictitious host computer;

User Interface module: this module provides user and described open virtual network constructing system to carry out mutual interface, namely interface is divided into four classes: Internet resources display interface, virtual network resource management interface and user's request perception interface, these interfaces are all two-way, namely provide the function of user and system interaction Transfer Parameters;

The function of described Internet resources display interface is: system is periodically shown to user through integrating the network information detected, or user initiatively proposes demand, inquiry current network resources could meet;

The function of described virtual network resource management interface is: user, by the control operation interface of dummy node, realizes dummy node establishment, switch dummy node power supply etc.; User carries out equipment operating to dummy node, realize dummy node store or the increase of network interface or deletion, dummy node complete machine migration etc., realize the flexible control to dummy node and dynamic conditioning; After described dummy node is set up, physical machine starts network service by terminal socket call particular script, sets up and communicates to connect with central control board;

The function of described user's request perception interface is: system, by this interface perception user's request, comprises the type of demand, time, place, preference etc., carries out priority scheduling of resource.

2., based on an open virtual network construction method for software defined network, it is characterized in that: described method comprises following operative step:

(1) user logs in open virtual network constructing system by User Interface; Described user had both comprised basic network keeper, business network keeper, also comprised normal network users;

(2) the open virtual network constructing system described in is by the controller collection network resource information in software defined network and intuitively show to user;

(3) user is the discovery that specific transactions carries out resource by described open virtual network constructing system, and proposes service request; Described user comprises the discovery of Internet resources and the discovery of content resource by the resource discovering that system is carried out; Described specific transactions refers to that this user needs the some service application configured;

(4) the open virtual network described in builds custom-built system and provides virtual network customize services to user, and user needs according to specific transactions the customization carrying out virtual network.

3. a kind of open virtual network construction method based on software defined network according to claim 2, it is characterized in that: the User Interface described in described step (1) refers to the operation interface that described open virtual network constructing system is supplied to the terminal of user, the function that user uses described system to provide by operation interface quickly and easily, both comprise user and register entrance, network topological diagram interface, search window, neighbouring Internet resources and content resource position display, basic network management function is waited in the agreement Internet Protocol location interconnected between network, also comprise virtual network scheme display interface, customizing virtual network, application programming interface API provide, the distinctive function of this opening virtual network construction method such as free mark, third party's correcting data error of location of content, these described operating functions are different according to user right, both comprise basic network keeper, enterprise network administrator, also comprise normal network users, and develop new tactful customization function to enterprise network administrator or normal network users according to network operation strategy open portion basic network bookkeeping, the customization realizing its own virtual network builds.

4. a kind of open virtual network construction method based on software defined network according to claim 2, it is characterized in that: the particular content that systematic collection Internet resources also carry out display directly perceived to user in described step (2) is: the controller in described system and software defined network is mutual, obtain the resource information of whole network, comprise the real time information such as the operation layer flow information on network topological diagram, network state, the link failure of bottom physical network, network accident and network layer; The described network resource information got gathers by described system, intuitively shown to user by Visual controlling interface, user is showed completely by the present situation of whole network, facilitate subsequent user to carry out self-defined structure virtual network to avoid network congestion, not only just accept network passively; Described system provides basic network to generate service for application, can customize virtual network policy interface for application-specific provides.

5. a kind of open virtual network construction method based on software defined network according to claim 2, it is characterized in that: in described step (3), the discovery of described Internet resources refers to the inquiry that user is carried out network element device by described open virtual network constructing system, understands inquired about Internet resources particular location residing in a network to help user; The discovery of described content resource refers to the inquiry that user is carried out content resource by system, and the position understood inquired about content resource to help user and distribute in a network, is convenient to user and selects the rational position of described content resource to connect; Described proposition service request refers to that user customized service connects, it can be simply connect end to end that this customize services connects, also can be that user customizes the complicated interconnecting relation in many ways between service node according to specific requirement, make network externally present specific topological features; When a certain service server, certain section of offered load are larger, described open virtual network constructing system carries out the balancing resource load of the overall situation, is optimized scheduling, determines by the service request of which Internet resources completing user the request of user.

6. a kind of open virtual network construction method based on software defined network according to claim 2, is characterized in that: in described step (4) system provide virtual network customize services to support to user multiple user freely builds proprietary network; The described proprietary network that freely builds relies on network virtualization technology, from main separation Internet resources, according to computing capability and the storage capacity of virtual machine, the time delay of link and corresponding bandwidth between router, generate multiple being isolated from each other and the virtual network of isomery, this net mask annexation of physical link, the upper strata for virtual network provides the logic of point-to-point to connect, for each user provides in logic independently topological view, user is made to obtain the control of network end-to-end.

7. a kind of open virtual network construction method based on software defined network according to claim 2, it is characterized in that: the open virtual network described in described step (4) builds custom-built system and provides virtual network customize services to user, user according to the particular content of the customization carrying out virtual network that needs of specific transactions is: described open virtual network constructing system detects according to network topology probe and performance the information obtained, and customized personal construction strategy, carry out virtual network mapping calculation according to different construction strategy; Described open virtual network constructing system recommends the constructing plan given tacit consent to user, then user carries out redjustment and modification according to self-demand, and more directly building mode voluntarily, concrete operations are: according to this visual Internet resources interface, user is according to information such as business demand, individual preference, network states, and user is from the dummy node of main separation finite number; The dummy node having selected rear Virtual Networking Computing module to provide according to user, runs corresponding mapping algorithm and rebuilds virtual network, and system shows predictable network creation effect, and user determines whether again select according to effect; When described user needs to create multiple virtual network, the concurrent management that the different virtual network of described system of users carries out, meet the differentiated demand of same user's different virtual network, described user also can adjust dynamically or cancel constructed virtual network.

8. a kind of open virtual network construction method based on software defined network according to claim 2, it is characterized in that: in described step (4), system provides virtual network customize services to user, and user specifically comprises following operating procedure according to the customization carrying out virtual network that needs of specific transactions:

(401) user's configuration virtual node: user, by the control operation interface of dummy node, realizes dummy node establishment, switch dummy node power supply etc.; User carries out equipment operating to dummy node, realize dummy node store or the increase of network interface or deletion, dummy node complete machine migration etc., realize the flexible control to dummy node and dynamic conditioning; After described dummy node is set up, physical machine starts network service by terminal socket call particular script, sets up and communicates to connect with central control board; Annexation between dummy node opens as configuration interface to user by described system, supports that multiple different topological structure is parallel and disposes; To different users, described system can provide mutually isolated virtual network environment simultaneously, and the topological structure of these virtual network environments all can by described user's customized;

(402) system creation virtual network: described system sets up user account, carries out virtual network setting, creates software router configuration file, carries out network service initialization, and start independent virtual router node; Described system with the configuration information of user for input, or user by mark visualized graph interface on node, between corresponding virtual router, set up virtual link, generating virtual topology of networks; Virtual topology layer shields the annexation of physical link, and the upper strata for virtual network provides the logic of point-to-point to connect;

(403) user carries out virtual network security customization: described system can need the security service of carrying according to the demand for services apolegamy of user, new flow path matches safety means, and configured for heterogeneous networks element, for communication provides the security control of optional rank, the height setting up a through a whole set of infrastructure customizes passage; The Virtual Service built under described security service function can be supported in certain logic environment, without the need to a large amount of manual configuration;

(404) carry out customization to flow to forward: described system works, on virtual topology, provides the data forwarding service of hop-by-hop between dummy node; Forwarding is the datum plane of virtual network, performs route querying function, obtain packet arrive destination the down hop dummy node of process, then encapsulation operation is carried out to message, utilizes corresponding virtual link to forward.