基于SDN服务链安全资源池的园区网出口方案设计  

Design of Campus Network Exit Scheme Based on SDN Service Chain Security Resource Pool

作　　者：刘杨[1] 汪伦[1] 沈鑫[1] LIU Yang;WANG Lun;SHEN Xin(Information Construction and Management Office of Hefei University of Technology,Hefei 230009,China)

机构地区：[1]合肥工业大学信息化建设与管理办公室,安徽合肥230009

出　　处：《现代信息科技》2025年第1期115-119,共5页Modern Information Technology

摘　　要：为解决传统网络架构中安全设备串接带来的一系列管理问题,将软件定义网络(SDN)架构应用到校园网的设计中。文章对比现有网络架构的优势和不足,提出了一种基于SDN服务链资源池的网络架构。通过对网络架构进行重构,采用基于OpenFlow技术的交换机作为接入平台,由SDN控制器作为转发层面统一对所有的流量进行调度。然后,再运用高可用性(HA)技术来保障转发层面的可靠性,旨在建立一个灵活性高、便利性强、可靠性高和安全可控的网络。最后,经过长期测试证明,完全达到了预先设计的目标。To address the series of management issues caused by the serial connection of security devices in traditional network architecture,the Software Defined Network(SDN)architecture is applied to the design of campus network.This paper compares the advantages and disadvantages of existing network architectures,and proposes a network architecture based on SDN service chain resource pool.Through the reconstruction of the network architecture,it adopts the switch based on OpenFlow technology as the access platform,and the SDN controller is used as the forwarding layer to uniformly schedule all traffic.Then,High Availability(HA)technology is employed to ensure the reliability of the forwarding layer,aiming to establish a network with highflexibility,convenience,reliability,security and controllability.Finally,after long-term testing,it is fully proven to have achieved the pre-designed objectives.

关 键 词：软件定义网络 服务链 安全资源池 高可用性 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]