『您的瀏覽器不支援JavaScript功能,若網頁功能無法正常使用時,請開啟瀏覽器JavaScript狀態』

跳到主要內容區塊

工業技術研究院

:::

技術名稱: SDN控制器

技術簡介

SDN(Software Defined Networking)顛覆網路長久以來的架構和思維,改變傳統網路架構的控制模式,從分散式走向集中控管架構,網路設備趨於標準與簡單化,而以軟體為主的控制器(Controller)躍升為網路管理與控制的主角,藉由集中控管與可程式化的特性,將大幅提升網路運作的彈性與效能,並降低營運與管理成本。SDN已是下世代網路技術的發展趨勢,但在現實的企業環境中,要將全部的網路設備替換成SDN設備,建造一個全SDN的網路環境是不切實際的,只能逐步替換部分設備,讓傳統網路與SDN網路可以協同運作,達到SDN網路的平滑演進。資通所針對運用SDN架構於企業網路的Migration議題,以不影響既有網路運作為前提,優先移轉Edge Switch,研發Mixed SDN網路的Controller及相關控制技術,提供企業Mixed SDN網路介接運作功能、簡化VLAN管理與維護機制、強化網路存取控制及優化封包繞送機制,建立Enterprise SDN Migration for Edge Switch解決方案,此方案已實際布建於工研院區網,有效改善網管人員網路維運的成本與效率。

Abstract

Software Defined Networking (SDN) overturned the long-existent concept and architectural principle of traditional networking as distributed to become concentrated control and management. As a result, networking device was largely standardized and simplified; it stages the software-based Controller to play the main role in network management and control, enhancing to a great extent of the flexibility and effectiveness in the operation of network. SDN is no doubt the trend for the development of next-generation network technology. But in reality, it is impractical to replace all network devices with SDN-enabled devices for the construction of a full SDN environment. What is more workable is to gradually replace some of the equipment, so that the traditional network and SDN network can cooperate to achieve the smooth migration of SDN network. Targeting at the SDN migration issues in enterprise environment, while keeping original network operation, ICL developed techniques to simplify the mechanism of VLAN management and maintenance, enhance the mechanism of network access control, and improve the packet routing performance. The ICL SDN Migration solution had been deployed in ITRI campus, effectively reducing OPEX.

技術規格

1.以OpenDaylight Helium MD (Model-Driven)架構為Controller平台基礎 2.支援SDN Mixed網路拓樸探測(Topology Discovery),建立與維護網路拓樸相關資訊 3.支援OpenFlow Switch間迴圈(Loop)鏈路介接的繞送架構,並提供SDN網路拓樸變動或鏈路(Link)故障失效之自動偵測並重建路由 4.支援SDN Mixed網路之L2網路介接運作,提供end-to-end最短路徑(最少hop數)與一次性雙向路由建立 5.支援SDN Mixed網路不同Subnet環境下的L3繞送機制,具備IP Gateway透過Static Route機制進行路由繞送,並提供透過傳統網路既有IP Gateway的介接傳輸機制 6.彈性的VLAN管理機制,可同時或混合使用Port-based、IP-based及MAC-based等方式進行VLAN管理;支援與傳統網路802.1Q介接機制 7.支援各Subnet之虛擬DHCP Relay功能,負責接收Host發送之DHCP broadcast封包,並代為向DHCP Server要求動態IP位址 8.支援SDN網路DHCP Snooping、IP Source Guard、MAC Access (Deny) List安全防護機制 9.支援定期擷取網路流量統計資料,包括針對每個OpenFlow Switch、每個Switch Port、每筆flow entry累計的流量資料 10.支援ONF OpenFlow 1.0/1.3版以上通訊協定於TCP或TLS傳輸協定上運作 11.支援Out-of-Band Control Plane介接架構 12.支援OF-DPA流表型態(Table Type Pattern;TTP)的控制運作 13.提供Northbound RESTful API介面 14.提供圖形化介面之網路與服務管理操作伺服器(NMS),提供SDN Mixed網路拓撲、設備連線資訊、網路流量監看、Subnet與VLAN管理維護、網路存取限制名單維護等功能

Technical Specification

1.Developed based on OpenDaylight Helium MD (Model-Driven) Framework. 2.Support SDN mixed network topology discovery for establishing and maintaining the network topology status and information. 3.Support loop topology of SDN network, and the automatic detection of node or link down event to re-establish a new transmission path. 4.Support L2 forwarding interworking with traditional network in SDN mixed network, providing the end-to-end path provision with shortest path and two-way route establishment. 5.Support L3 routing operation and interworking with traditional network using static route mechanism in SDN mixed network 6.Support flexible VLAN management depending on Port-based, IP-based or/and MAC-based rule; support interworking with 802.1Q operation in traditional network for SDN mixed network. 7.Support Virtual DHCP Relay function for each subnet 8.Support the network security protection of DHCP Snooping、IP Source Guard and MAC Access (Deny) List in SDN Network. 9.Support periodical retrieving the network traffic statistics by each OpenFlow switch, switch port and flow entry. 10.Support ONF OpenFlow 1.0/1.3 protocol over TCP or TLS 11.Support Out-of-Band mechanism for OpenFlow Control Channel 12.Support OF-DPA TTP (Table Type Pattern) operation 13.Support Northbound RESTful API 14.Providing GUI-based Network Management System, including SDN mixed topology view, host connection information, network traffic monitoring, Subnet and VLAN configuration and maintenance, static IP allowed list and MAC deny list configuration, etc.

技術特色

1.以OpenDaylight Helium MD (Model-Driven)框架為基礎,提供SDN Controller核心與智能應用模組,定義YANG模型提供Notification、DataStore與RPC一致性服務介面。 2.具備企業SDN Migration應用服務技術,支援Mixed網路L2/L3協同運作、VLAN智慧管理、設備網路存取安全控制,提升網路管理與維護效能,並實際布建於工研院企業網路與交大校園資工系網路進行服務驗證。 3.具備獨立於SDN Controller的圖形化介面管理維運系統,減少Controller負荷影響效能。

應用範圍

1.企業網路應用:提供企業網路Edge Switch Migration服務,簡化企業網路佈署與管理維護效能,已實際佈建於工研院區網。 2.SDN Switch產品應用:提供SDN Switch產品服務驗證,及SDN網通產品與Controller整合測試,掌握time to market;已技術授權國內晶片廠商,從產業上游加速SDN網通產品發展速度。

接受技術者具備基礎建議(設備)

系統環境需求: (一).SDN Controller -Ubuntu 12.04 64bit -Openjdk7: Java platform -CPU:Intel Xeon E5-2630v2,2.6GHz,6*2核心 -記憶體:64GB,DDR3-1600MHz -網路卡:Gigabit Ethernet (二).SDN NMS -Windows server 2008 R2 64bits -Java JDK 1.7 : Java platform -MYSQL : version after (5.6.12) -CPU:Intel Xeon E3-1240,3.3GHz,4*2核心 -記憶體:8GB,DDR3-1333MHz -網路卡:Gigabit Ethernet

接受技術者具備基礎建議(專業)

需具備SDN與OpenFlow相關知識,以及Ethernet網路運作基本概念與開發應用程式能力。

技術分類 通訊

聯絡資訊

聯絡人:陳瑛芬(890229) 企劃與推廣組

電話:+886-3-5917281 或 Email:almada@itri.org.tw

客服專線:+886-800-45-8899

傳真:+886-3-5820240

[{"text":"企業網","weight":13.0},{"text":"材化所","weight":11.5},{"text":"機械所","weight":10.0},{"text":"綠能所","weight":9.4},{"text":"生醫所","weight":8.0},{"text":"半導體","weight":6.2},{"text":"南分院","weight":5.0},{"text":"太陽能","weight":5.0},{"text":"課程","weight":5.0},{"text":"遠紅外線","weight":5.0},{"text":"雷射","weight":4.0},{"text":"LED","weight":4.0},{"text":"LED可見光","weight":3.0},{"text":"5G","weight":3.0},{"text":"工研人","weight":3.0},{"text":"電光所","weight":3.0},{"text":"綠能與環境研究所","weight":3.0},{"text":"機械","weight":3.0},{"text":"資通所","weight":2.0},{"text":"面板","weight":2.0},{"text":"文字轉語音","weight":2.0},{"text":"實習","weight":2.0},{"text":"無人機","weight":2.0},{"text":"生醫","weight":2.0},{"text":"3D","weight":2.0},{"text":"v2x","weight":2.0},{"text":"員工","weight":2.0},{"text":"地圖","weight":2.0},{"text":"太陽光電","weight":2.0},{"text":"材料與化工研究所","weight":1.0}]