KR101776695B1 - Apparatus and method for inter-sdn network domain federation - Google Patents

Abstract

The present invention relates to an inter-SDN network domain interconnection device and a method thereof. The device comprises: a management module for generating and transmitting an SDN network interconnection execution command and connection information of a first software defined network (SDN); and a first control module for performing network interconnection using the connection information according to the SDN network interconnection performance command. Data transmission between hosts connected to different SDN networks can perform fast and efficient data transfer by performing L2 communication over a physically and directly connected link.

Description

  [0001] APPARATUS AND METHOD FOR INTER-SDN NETWORK DOMAIN FEDERATION [0002]

 The present invention relates to an inter-SDN network domain interconnection method and apparatus.

 Conventional network interconnection or data transfer technologies have provided interconnection and separate data transmission between heterogeneous networks utilizing an integrated SDN controller / cluster for only a single SDN network domain. However, this approach did not provide independence and transparency of the data transmission method. Also, the conventional technology has a problem of high cost in data transmission by utilizing a separate data transmission scheme for network interconnection.

 Mixed control system and method of open flow based wireless network (KR 10-2014-0073038)

 Disclosure of Invention Technical Problem [6] The present invention is directed to a method and an apparatus for interconnecting different SDN network domains interworking with SDN controllers / clusters operating independently to solve the above problems.

 According to an embodiment of the present invention, a network domain interconnection device includes a management module that generates and transmits SDN network interconnection execution commands and access information of a first SDN (Software Defined Network) network; And a first control module for performing network interconnection using the access information according to the SDN network interconnection performance command.

According to an embodiment of the present invention, there is provided a network domain interconnection method, comprising: a management module generating and transmitting an SDN network interconnection execution command and access information of a first SDN (Software Defined Network) network; And a first control module performing network interconnection using the access information according to the SDN network interconnection performance command.

 As described above, according to the present invention, by providing an inter-SDN network domain interconnection method and apparatus, data transmission between hosts connected to different SDN networks can perform L2 communication over a physical / Data transfer can be performed.

In addition, according to the present invention, a method of transmitting data by setting a border switch as a proxy of a host of a relative SDN without using a separate data transmission scheme for Inter-SDN network domain interconnection, Can be provided.

1 is a diagram for explaining the structure and procedure of an inter-SDN interconnection system.
FIG. 2 is a view for explaining a first method of peer access information exchange and network application procedure based on REST API.
FIG. 3 is a diagram for explaining a second method of peer access information exchange and network application procedure based on the REST API.
4 is a block diagram of a module of an inter-SDN network domain interconnection device.
5 is a flowchart illustrating a method of interconnecting Inter-SDN network domains.

One embodiment of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

1 is a view for explaining a structure and a procedure of an inter-SDN interconnection system.

Referring to FIG. 1, an Inter-SDN interconnect system may include an Inter-SDN network interconnection application (A module), an SDN controller / cluster (C module). That is, an individual SDN network domain may include an Inter-SDN network interconnection application (A module), SDN controller / cluster (C module). That is, the reference SDN network domain may include the above-described C module, and the corresponding SDN network domain (Corresponding SDN network) may include each of the above-described C modules. In addition, the Inter-SDN interworking system may further include a data store (D module). 1) Module A can provide a C module with a data modeling schema for interconnection. The data modeling supporting format described above may include JSON, XML. 2) The C module can then request topology information to the physical network (N). 3) The C module can receive the above-mentioned topology information from the physical network N and transmit it to the A module. 4) The A module can select a border switch and a link directly connected to the Corresponding SDN network to be interconnected and a list of hosts to request data communication permission. The above-described Corresponding SDN network can be connected by at least one border switch and link. 5) The A module can then generate peer access information in a supported format such as JSON according to the cooperative data modeling schema described above. The above-mentioned peer-to-peer connection information may include a list of a border switch identifier, a border switch port identifier, and an identifier (MAC address, IP address, etc.) of hosts to request communication permission. 6) The A module can transmit the file (including the peer connection information) generated in the above 5) to the C module and transmit the Inter-SDN network interconnection execution command. 7) C module can perform mutual access information exchange and network authorization (host authorization) based on REST API using Internet service. 7) fails, the C module can transmit to the A module the result of the SDN link failure in the response message to the inter-SDN network interconnection execution command. A detailed description thereof will be given in FIG. 3 below. 8) The C module can integrate the above-described mutually exchanged information into a single file according to the interlinked data modeling method and store it in the C module. If it can not be stored in the C module, it can be stored in the D module.

However, the process of 8) can be changed according to the intention of the designer and can be omitted. The 9-I) C module can transmit the response message to the Inter-SDN network interconnection execution command transmitted from the A module to the C module in the A module at step 6). If the A module is granted Inter-SDN network interworking for all the requested hosts, the C module may skip transmission of the host list information to the A module and transmit only the peer access information to the corresponding SDN. When the A module requests some of the inter-SDN network interworking with the requested hosts, the C module can send the A module the authorized authorized host list information including the correspondent SDN peer access information. 9-II) C module can create and transmit a flow rule for inter-SDN network interconnection to a border switch in the physical network N or the physical network N. [ The above flow rules can be generated based on the peer access information of the Corresponding SDN. In addition, flow rules for the host list of the corresponding SDN can be set based on the corresponding SDN border switch and link information. Also, the C module can be executed simultaneously or sequentially or in reverse order on the 9-Ⅰ) and 9-Ⅱ described above. After the process described above, the 10-I) A module can complete the Inter-SDN network interconnection procedure. 10-II) It is possible to apply the flow rule to the border switch in the physical network (N).

According to the present invention, information exchange and control message delivery for Inter-SDN network interconnection are performed through Internet communication of individual SDN controllers / clusters (C modules) included in the above-described different SDN networks. In addition, according to the present invention, communication between hosts in different SDN networks can transmit and receive data using a link (L2 (Layer 2)) directly connected physically. Corresponding Set up a physical link-connected border switch with the corresponding SDN as a proxy for the authorized hosts in the Corresponding SDN and transmit data according to the original data transmission scheme of each SDN network based on this. Specifically, the data transmission method includes: 1) generating a flow or generating a packet to an arbitrary host; 2) the access switch generates a packet in message when there is no flow rule and transmits it to the SDN controller / cluster ), 3) a step of searching for a flow processing method according to the identifier of the host in the C module, 4) a step of generating a border switch according to the above-mentioned search method in advance by 9-II) and 10-II) And transmitting data to a border switch of a corresponding SDN according to the flow rule. For reference, the transmission from the border switch to the destination host in the Corresponding SDN network is performed according to the original SDN data transmission policy because the destination host is the host in the network. In the case of the above-mentioned search step, if the host is under the SDN controller / cluster management (SDN local network host), the C module can generate a flow rule according to an independent data transmission policy in the SDN network and transmit a packet out message to the corresponding switch. Also, in the case of the above-described searching step, in the case of a searchable host (Corresponding SDN network host) in the integrated file generated according to the interlinked data modeling method, in the integrated file in which the corresponding host information exists, Identifier of the host) as a proxy for the host, generates a flow rule according to the original data transmission policy of the SDN network, and transmits a packet out message to the corresponding switch. Also, in the case of the above-described searching step, if there is no host information in the SDN controller / cluster and interconnection integration file, the C module can generate a corresponding flow filtering rule and transmit a Packet Out message to the corresponding switch. In addition, the C module can create virtual bogus hosts or virtual nodes corresponding to the MAC addresses of hosts authorized in the corresponding SDN or the IP addresses of the hosts based on the access information (peer access information). The virtual bogus hosts or virtual nodes described above can access or access the border switch in the physical network N. [ Then, when a flow related to the IP-based network service is generated as a host authorized in the Corresponding SDN, the originating host can transmit an ARP request message. The ARP server or C module receiving the ARP request message described above can transmit the IP address of the host in the Corresponding SDN and the MAC address corresponding to the ARP response message to the source host based on the information of the virtual bogus host described above. Then, the above-described source host can transmit and receive data using the physically directly connected link (Layer 2) described above. A specific method of transmitting and receiving data using a link (L2 (Layer 2)) has been described above. At the same time that the network inter-SDN network interconnection is terminated, the C module can stop the ARP process by deleting all the virtual nodes or virtual bogus hosts described above.

FIG. 2 is a diagram for explaining a first method of peer access information exchange and network application procedure based on REST API; FIG.

Referring to FIG. 2, the C module illustrated in FIG. 2 may perform REST API-based peer-to-peer connection information exchange and network authorization procedures. The SDN Controller A and SDN Controller B shown in FIG. 3 are individual SDN controllers / clusters (C modules) included in different SDN networks. That is, if the reference SDN network includes the SDN Controller A, the Corresponding SDN network of the above-described reference SDN network may include the SDN Controller B. The C module can perform the process of transmitting ① equality access information ② deciding whether to associate and approve host ③ response message delivery process. C module (SDN Controller A, SDN Controller B) can be performed independently / in parallel for each SDN network domain to perform inter-SDN network interconnection. Also, C module SDN Controller A, SDN Controller B) can exchange peer access information based on REST API exchange method. The C module can terminate the above-mentioned interchange when receiving the correspondence information of Corresponding SDN and receiving the approval procedure completion information and the response message of the peer connection information transfer. 1-I) SDN Controller A can transmit the linkage information to SDN Controller B to explain the REST API-based peer-to-peer connection exchange information and network authorization procedure between SDN Controller A and SDN Controller B described above. 2-I) SDN Controller B, which receives the linkage information from SDN Controller A, can decide to approve linkage and host authorization. 3-I) The SDN Controller A may perform the following procedure (8 of FIG. 2) after receiving a response message from the SDN Controller B for association and host authorization acknowledgment. 1-Ⅱ) SDN Controller B can transmit the linkage information to SDN Controller A. SDN Controller A, which has received the linkage information from SDN Controller B, can then decide to approve the linking and host authorization. 3-Ⅱ) SDN Controller B can perform the following procedure (8 in Fig. 2) after receiving a response message from SDN Controller A for connection and host authorization acknowledgment.

FIG. 3 is a diagram for explaining a second method of peer access information exchange and network application procedure based on the REST API.

Referring to FIG. 3, the SDN Controller A can transmit the linkage information to the SDN Controller B in accordance with the second method of the peer access information exchange and the network authorization procedure based on the REST API. 2-I) SDN Controller B, which receives the linkage information from SDN Controller A, can decide to approve linkage and host authorization. 3-Ⅰ) The SDN Controller A can receive a response message from the SDN Controller B for association and host authorization acknowledgments. 1-Ⅱ) SDN Controller B connection information to SDN Controller A. 2-Ⅱ) The SDN Controller A receives the connection information from the SDN Controller B, determines the connection and host approval for the SDN Controller B, and can perform the next procedure (Fig. 2, 8)). The SDN Controller B may then perform the following procedure (8 of FIG. 2) after receiving a response message from the SDN Controller A for the association and host authorization acknowledgment. In the first method, the SDN Controller A sends the linkage information to the SDN Controller B, and after the SDN Controller B decides to approve the association and the host authorization, and the SDN Controller A receives the response message, the SDN Controller A performs the following procedure . On the other hand, the second method is that the SDN Controller A sends the linkage information to the SDN Controller B, and after the SDN Controller B decides to approve the association and the host authorization, the SDN Controller A receives the response message and the linkage information of the SDN Controller B SDN Controller A can proceed to the next step.

4 is a block diagram of a module of an inter-SDN network domain interconnection device.

Referring to FIG. 4, the Inter-SDN network domain interconnection device includes a management module 400 and a first control module 410. The management module may correspond to the Inter-SDN network interconnection application program (A module) described above with reference to FIG. That is, the function of the inter-SDN network interconnection application (A module) can be performed by the management module. The first control module may correspond to the above-described SDN controller / cluster (C module) in Fig. That is, the functions of the SDN controller / cluster (C module) can be performed by the first control module. Also, the second control module may correspond to the above-described SDN controller / cluster (C module) in FIG. That is, the function of the SDN controller / cluster (C module), can be performed by the second control module. The first control module and the second control module correspond to the above-described SDN Controller A and SDN Controller B in Figs. 2 and 3, respectively. That is, the first control module can perform the function of the SDN Controller A. And the second control module can perform the function of the SDN controller B.

The management module can generate and transmit the SDN network interconnection execution command and the access information of the first SDN (Software Defined Network) network. The first control module can perform network interconnection using the access information according to the SDN network interconnection performance command. The first control module may also transmit the connection information of the first SDN network to the second control module included in the second SDN network and receive the connection information of the second SDN network from the second control module . Also, the first control module can perform network authorization. The first control module can generate an integrated file based on the connection information of the received second SDN network and the connection information of the first SDN network. After the first control module transmits the first SDN network connection information to the second control module, after the first control module receives the response message for deciding the linking and network authorization from the second control module, 1 < / RTI > control module can generate an integrated file. The first control module transmits the first SDN network connection information to the second control module and then transmits a response message for deciding the linking and network authorization and connection information of the second SDN network from the second control module 1, the first control module can generate an integrated file. The first control module may generate a flow rule for data transmission based on the generated integrated file. The path for SDN network interconnection described above and the path for data transmission may be all-in-all. The path for data transfer described above may be physically directly connected between the first SDN network and the second SDN network.

5 is a flowchart illustrating a method of interconnecting Inter-SDN network domains.

Referring to FIG. 5, the inter-SDN network domain interconnection method includes generating and transmitting an SDN network interconnection execution command and connection information of a first SDN (Software Defined Network) network (S500) And performing network interconnection using the access information according to the SDN network interconnection performance command (S510). The management module may perform the step of generating and transmitting the SDN network interconnection execution command and the access information of the first SDN (Software Defined Network) network. The description has been given above with reference to Figs. 1, 2, 3 and 4. The first control module can perform the network interconnection by utilizing the access information according to the SDN network interconnection execution command of the first control module. The description has been given above with reference to Figs. 1, 2, 3 and 4.

400: management module
410: first control module

Claims (5)

A management module for generating and transmitting an SDN network interconnection execution command and access information of a first SDN (Software Defined Network) network; And
And a first control module for performing network interconnection using the access information according to the SDN network interconnection performance command,
The first control module transmits the connection information of the first SDN network to a second control module included in a second SDN network and receives connection information of the second SDN network from the second control module and,
The first control module generates an integrated file based on the connection information of the received second SDN network and the connection information of the first SDN network,
Wherein the access information includes at least one of a border switch identifier information, a border switch port identifier information, The network domain interworking apparatus of claim 1, wherein the management module sends interlinked data modeling schema information to the first control module.   2. The network domain interworking apparatus of claim 1, wherein after the first control module receives topology information and transmits the topology information to the management module, the management module determines the second SDN network. 3. The system according to claim 2, wherein the inter-cooperative data modeling schema information includes pre-set support format information, and the first control module generates the connection information based on the pre- . delete

Images