基于OpenFlow的虚拟机流量检测系统的设计与实现

发布时间：2019-03-30 08:00

【摘要】：云平台下的虚拟机在物理机内部交互流量,而不通过防火墙等安全组件。针对这类流量无法在网络边界被获取并检测的问题,分析了OpenFlow技术的原理,提出了一种基于OpenFlow技术将虚拟机流量重定向到入侵检测系统进行检测的方案。方案使用OpenFlow虚拟交换机和控制器替代传统交换机,然后基于OpenFlow技术控制流量转发过程,将其导向外部的安全组件进行处理,并构建了由虚拟交换机、控制单元、入侵检测和系统配置管理4个模块组成的流量检测系统。实验结果表明,系统能够在满足虚拟机网络正常使用的前提下,将待监管流量导向入侵检测系统进行处理,而且能够同时提供交换机级及虚拟机级两种粒度的流量重定向控制。通过对虚拟机引流的方式实现在传统场景中解决云计算环境下流量检测问题,同时能够基于OpenFlow轻松实现流量处理的扩展操作。
[Abstract]:Virtual machines on cloud platforms interact within physical machines without passing through security components such as firewalls. In order to solve the problem that this kind of traffic can not be obtained and detected at the network boundary, the principle of OpenFlow technology is analyzed, and a scheme of redirecting virtual machine traffic to intrusion detection system based on OpenFlow technology is proposed. The scheme uses OpenFlow virtual switch and controller to replace the traditional switch, then controls the flow forwarding process based on OpenFlow technology, directs it to the external security component for processing, and constructs the virtual switch and control unit. Intrusion detection and system configuration management four modules of traffic detection system. The experimental results show that the system can guide the supervised traffic to intrusion detection system under the premise of satisfying the normal use of virtual machine network, and it can also provide two kinds of granular traffic redirection control at the switch level and the virtual machine level at the same time. The method of virtual machine drainage is used to solve the problem of traffic detection in cloud computing environment in traditional scenarios, and the extended operation of traffic processing based on OpenFlow can be realized easily at the same time.
【作者单位】：四川大学计算机学院;
【基金】：国家自然科学基金资助项目(61272447) 国家2012年移动重大03专项(12H1510)
【分类号】：TP393.08

【参考文献】