基于SDN的局域网未知单播处理机制研究  

Study on SDN-based unknown unicast processing mechanism

作　　者：韩颖铮[1] 邓国强[1] HAN Ying-zheng;DENG Guo-qiang(Information and Network Engineering and Research Center,South China University of Technology,Guangzhou 510640,China)

机构地区：[1]华南理工大学信息网络工程研究中心,广东广州510640

出　　处：《电子设计工程》2018年第10期41-44,共4页Electronic Design Engineering

基　　金：广东省省级科技计划项目(2014A040401017;2015A030401027)

摘　　要：交换机对收到的未知单播帧通常采取洪泛的方式进行处理,当交换机接收处理的未知单播帧数量和速率过大时,将消耗大量的交换机资源和网络带宽,影响正常的数据转发,攻击者可以利用交换机的未知单播洪泛机制发起网络攻击。禁止或抑制未知单播帧洪泛则对一些特殊的网络应用造成影响。基于软件定义网络(Soft Designed Network)架构,提出一种以ARP广播替代未知单播洪泛的机制,用于解决洪泛机制造成的资源消耗和网络攻击问题,通过仿真实验验证了所提出方案的可行性和有效性。A switch usually processes the received unknown unicast（UU）frames through flooding,but it consumes tremendous resources and much bandwidth if receiving and processing too large quantity of UU frames at a very high speed,which affects the normal data forwarding. In this case,the network may be attacked through the UU flooding mechanism of switch,but some special network applications may be affected if the flooding of UU frames is prohibited or inhibited. On the basis of software defined network architecture,a mechanism replacing UU flooding by address resolution protocol broadcast is put forward to resolve the problems of resource consumption and network attack resulting from the flooding mechanism,and a simulation test is carried out to verify the feasibility and effectiveness of the proposed solution.

关 键 词：软件定义网络 地址解析协议 未知单播 局域网 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]