KR101924712B1 - Method for transmitting packet and openflow switch - Google Patents

Abstract

A method for transmitting packets and an open flow switch are provided. An open flow switch is a device within a Software Defined Network (SDN), which forwards received packets to another device. The open flow switch determines the type of the network to which the packet is transmitted based on the identification information of the received packet, and transmits the packet based on the determined network type.

Description

[0001] METHOD FOR TRANSMITTING PACKET AND OPENFLOW SWITCH [0002]

The following embodiment relates to an open flow switch for transmitting a method packet for transmitting a packet, and more particularly to an open flow switch in a software defined network.

As the network traffic increases due to the development of the network technology and the spread of the smart phone, the scale of the network becomes larger and more complicated. As a result, Software Defined Network (SDN) technology has been developed for flexible control and effective network management.

SDN technology can implement a programmable network by separating existing network equipment into a data plane and a control plane. At this time, since the control plane is controlled by the central controller, and the data plane is controlled by the network equipment such as the router and the open flow switch, the visibility of the resources can be ensured. In SDN technology, the controller can control network devices using the Southbound API, such as Open Flow. An open flow is a standardized protocol that enables communication between the data plane and the control plane.

Korean Patent Publication No. 10-2015-0135041 (published on December 02, 2015) discloses an open flow routing apparatus and method. In the open flow routing in a security (SECaaS) system as a service based on cloud computing, the disclosed invention detects valid paths between a plurality of virtual machines providing security services and VPN gateways and effective paths between virtual machines, respectively, Calculating a metric weight based on the link cost and the processing cost for each effective path detected by the controller, setting the minimum cost path for the valid paths based on the metric weight, The method of claim 1, wherein the minimum cost path established through the open flow protocol to the switch (Open vSwitch, OVS) is stored as a flow table, and at least one of the open flow switch and the open V switch, based on the flow table, .

One embodiment may provide a packet transmission method.

One embodiment may provide an open flow switch in a software defined network.

According to an aspect, a packet transmission method performed by an open flow switch in a Software Defined Network (SDN) comprises: receiving a packet; Determining a type of a network to which the packet is transmitted based on the identification information included in the packet; And transmitting the packet based on the determined network type.

The type of the network may include an internal network and an external network.

Wherein the step of determining the type of the network to which the packet is transmitted comprises: extracting the identification information included in the packet; And determining whether the flow represented by the identification information is an internal network or an external network.

Wherein the step of transmitting the packet based on the determined network type comprises the steps of: when the type of the network is determined as the internal network, transmitting the packet using first flow tables set for the internal network; ; And if the type of the network is determined to be the external network, transmitting the packet using second flow tables set for the external network.

Wherein each of the first flow tables has a first identification value indicating that the flow of the first flow table is set in the internal network and each of the second flow tables has a flow of the second flow table And may have a second identification value indicating that it is set.

Wherein the transmitting the packet using the first flow tables comprises: determining a matching flow corresponding to the identification information of the first flow tables; Executing an instruction set in the matching flow; And transmitting the packet based on the matching flow.

The transmitting of the packet using the first flow tables may include transmitting the packet to a controller of the SDN when the matching flow corresponding to the identification information is not determined among the first flow tables step; Receiving an additional flow from the controller; And transmitting the packet using the additional flow.

The step of transmitting the packet using the first flow tables may further comprise updating the first flow tables using the additional flow.

Wherein the transmitting the packet using the second flow tables comprises: determining a matching flow corresponding to the identification information of the second flow tables; Executing an instruction set in the matching flow; And transmitting the packet based on the matching flow.

According to another aspect, an open flow switch in a Software Defined Network (SDN) comprises: a memory for storing a program for transmitting a packet; And a processor for executing the program, the program comprising: receiving a packet; Determining a type of a network to which the packet is transmitted based on the identification information included in the packet; And transmitting the packet based on the determined network type.

The type of the network may include an internal network and an external network.

Wherein the step of determining the type of the network to which the packet is transmitted comprises: extracting the identification information included in the packet; And determining whether the flow represented by the identification information is an internal network or an external network.

Wherein the step of transmitting the packet based on the determined network type comprises the steps of: when the type of the network is determined as the internal network, transmitting the packet using first flow tables set for the internal network; ; And if the type of the network is determined to be the external network, transmitting the packet using second flow tables set for the external network.

A packet transmission method is provided.

An open flow switch within the software defined network is provided.

Figure 1 illustrates a software defined network according to an example.
2 is a configuration diagram of an open flow switch according to an embodiment.
3 is a flowchart of a packet transmission method according to an embodiment.
4 is a flow diagram of a method for determining the type of network to which a packet is sent according to an example.
5 is a flow diagram of a method for transmitting a packet based on a network type according to an example.
6 is a flowchart of a method of transmitting a packet using first flow tables according to an example.
7 is a flowchart of a method of transmitting a packet using second flow tables according to an example.
8 is a flow diagram of a method for transmitting a packet using an additional flow according to an example.
9 is a packet transmission method performed on an open flow switch according to an example.

In the following, embodiments will be described in detail with reference to the accompanying drawings. However, the scope of the patent application is not limited or limited by these embodiments. Like reference symbols in the drawings denote like elements.

Various modifications may be made to the embodiments described below. It is to be understood that the embodiments described below are not intended to limit the embodiments, but include all modifications, equivalents, and alternatives to them.

The terms used in the examples are used only to illustrate specific embodiments and are not intended to limit the embodiments. The singular expressions include plural expressions unless the context clearly dictates otherwise. In this specification, the terms "comprises" or "having" and the like refer to the presence of stated features, integers, steps, operations, elements, components, or combinations thereof, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this embodiment belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

In the following description of the present invention with reference to the accompanying drawings, the same components are denoted by the same reference numerals regardless of the reference numerals, and redundant explanations thereof will be omitted. In the following description of the embodiments, a detailed description of related arts will be omitted if it is determined that the gist of the embodiments may be unnecessarily blurred.

Figure 1 illustrates a software defined network according to an example.

OpenFlow is one of the interface standard technologies of Software Definition Network (SDN). Openflow provides network engineers with an interface to more easily manipulate network equipment, and allows the flexibility of the various functional modules through the controller's program. For example, existing network equipment must either upgrade all existing equipment associated with the network or physically add additional equipment to add new functions to the network. When using open flows, it is relatively easy to add new functions through the controller.

Hereinafter, the network refers to a connection structure in which information can be exchanged between each node such as a terminal and a server. As an example of such a network, a 3rd generation partnership project (3GPP) network, a long term evolution (LTE) network, a WIMAX a wireless LAN, a wide area network (WAN), a personal area network (PAN), a Bluetooth network, a satellite broadcast network, an analog broadcast network , A digital multimedia broadcasting (DMB) network, and the like, and is not limited to the described embodiments.

The SDN 100 to which the open flow is applied includes an open flow controller 110 and open flow switches 112 to 120. Open flow switches 112 to 120 are connected to terminals (130, 132, 134) may be connected. The open flow controller 110 may be implemented in software in a computer or a server. The open flow controller 110 performs internal communication with the open flow switches 112 to 120 using an open flow protocol.

The open flow controller 110 may set a routing path for the packet and generate information about the set routing path as a flow table. The flow table can be composed of a plurality of tables according to ONF (Open Networking Foundation) recommendation. The open flow table may include at least one of a rule field, an action field, and a statistics field for each flow. The rule field may include identification information, the execution field may include a method of processing the packet (e.g., output port, etc.), and the statistics field may include statistical information that is a result of packet processing. The open flow controller 110 can transmit the generated flow tables to the respective switches 112 to 120. [ Hereinafter, the routing path and the flow can be understood to have the same meaning as each other.

The open flow switches 112-120 can forward packets using flow tables. For example, a packet may be transmitted to an internal terminal via an internal network. The terminals in the SDN 100 may be terminals 130, 132, and 134 connected to the SDN 100. The internal network is a network that is not connected to an external network (e.g., the Internet). As another example, when a packet is transmitted over the Internet to an external terminal, the routing path set in the SDN 100 may be an external network.

Even if the same network devices are used, if the external network and the internal network can be separated, efficient network operation is possible, and security can be enhanced through centralization.

Hereinafter, a method of transmitting a packet using an open flow and an open flow switch will be described in detail with reference to FIGS. 2 to 9. FIG. The network to be transmitted may be different depending on the routing path through which the packet is transmitted.

2 is a configuration diagram of an open flow switch according to an embodiment.

The open flow switch 200 includes a communication unit 210, a processor 220, and a memory 230. The open flow switch 200 may be any one of the open flow switches 112 to 120 described above with reference to Fig. For example, the open flow switch 200 may be implemented as a system-on-chip (SOC), but is not limited thereto.

The communication unit 210 is connected to the processor 220 and the memory 230 to transmit and receive data. The communication unit 210 may be connected to another external device to transmit / receive data.

The communication unit 210 may be implemented as a circuitry in the open flow switch 200. For example, the communication unit 210 may include an internal bus and an internal bus. As another example, the communication unit 210 may be an element that connects the open flow switch 200 to an external device. The communication unit 210 may be an interface. The communication unit 210 can receive data from an external device and transmit data to the processor 220 and the memory 230. [

The processor 220 processes the data received by the communication unit 210 and the data stored in the memory 230. "Processor" may be a data processing device embodied in hardware having circuitry having a physical structure for performing desired operations. For example, the desired actions may include code or instructions included in the program. For example, a data processing apparatus embodied in hardware may be a microprocessor, a central processing unit, a processor core, a multi-core processor, a multiprocessor, , An application-specific integrated circuit (ASIC), and a field programmable gate array (FPGA).

The processor 220 executes computer readable code (e.g., software) stored in a memory (e.g., memory 230) and instructions triggered by the processor 220.

The memory 230 stores data received by the communication unit 210 and data processed by the processor 220. [ For example, the memory 230 may store a program. The stored program may be a set of syntaxes executable by the processor 220 that are coded to allow transmission of the packet.

According to an aspect, the memory 230 may include one or more volatile memory, non-volatile memory and random access memory (RAM), flash memory, hard disk drive, and optical disk drive.

The memory 230 stores a set of instructions (e.g., software) that operate the open flow switch 200. The instruction set that operates the open flow switch 200 is executed by the processor 220.

The communication unit 210, the processor 220, and the memory 230 will be described in detail with reference to Figs. 3 to 9 below.

3 is a flowchart of a packet transmission method according to an embodiment.

The following steps 310 to 330 are performed by the open flow switch 200 described above with reference to Fig.

In step 310, the communication unit 210 receives the packet. For example, the communication unit 210 may receive a packet from another open flow switch connected to the switch 200. [ As another example, the communication unit 210 may receive a packet from a user terminal connected to the switch 200. [ The user terminal may be the terminals 130, 132, 134 described above with reference to FIG. A packet includes a head and a payload. The head may contain information about the packet. The payload may include data that the terminal generating the packet wants to transmit to another terminal.

At step 320, the processor 320 determines the type of network to which the packet is to be transmitted. If the final destination of the packet is a terminal in the SDN, the network transmitting the packet may be an internal network. If the final destination of the packet is a terminal connected to an external network, the network transmitting the packet may be an external network. Depending on the type of network that is transmitting the packets, the system settings for the routing path of the packets may vary. For example, the degree of security for the transmission of a packet may vary. A method for determining the type of network to which a packet is to be transmitted is described in detail below with reference to FIG.

At step 330, the processor 330 transmits the packet based on the determined network type. A method of transmitting a packet based on the determined network type will be described in detail below with reference to Figs. 5 to 8.

4 is a flow diagram of a method for determining the type of network to which a packet is sent according to an example.

Step 320 described above with reference to FIG. 3 includes the following steps 410 and 420.

At step 410, the processor 220 extracts the identification information contained in the packet. The identification information may be included in the head of the packet. For example, the identification information may include at least one of a source, a destination, information on the switches, a flow, and information on a kind of a network to be used. As another example, the identification information may include at least one of an IP address (Internet Protocol address) and a MAC address (Media Access Control address), and packets having the same identification information may be transmitted in the same flow. A flow refers to a routing path through which a packet is transmitted.

At step 420, the processor 220 determines whether the flow represented by the identification information is an internal network or an external network. For example, the processor 220 may use the pre-identify table stored in the memory 230 to determine which network the packet uses. A field for the pre-identifier may be added to the flow entry component of the pre-identification table. It can be determined via the pre-identifier which network the packet uses.

5 is a flow diagram of a method for transmitting a packet based on a network type according to an example.

The above-described step 330 with reference to FIG. 3 may further include the following steps 510 to 530.

At step 510, the processor 220 determines whether the network used by the packet has been determined to be the internal network. Although it is described in step 510 that the network used by the packet is determined to be the internal network, conversely, the processor 220 may determine whether the network used by the packet is determined to be the external network.

In step 520, if it is determined to be an internal network, the processor 220 transmits the packet using the first flow tables. The first flow tables may be flow tables for flows using an internal network. For example, each of the first flow tables may have a first identification value indicating that the flow of the first flow table is set in the internal network. The first identification value may be included in the pre-identification table. A method of transmitting a packet using the first flow tables will be described in detail below with reference to FIG.

At step 530, if determined to be an external network, the processor 220 transmits the packet using the second flow tables. The second flow tables may be flow tables for flows using an external network. For example, each of the second flow tables may have a second identification value indicating that the flow of the second flow table is set in the external network. The second identification value may be included in the pre-identification table. A method of transmitting a packet using the second flow tables will be described in detail below with reference to FIG.

6 is a flowchart of a method of transmitting a packet using first flow tables according to an example.

The above-described step 520 with reference to FIG. 5 includes the following steps 610 to 630.

At step 610, the processor 220 may determine a matching flow corresponding to the identification information in the first flow tables. For example, if the first flow tables are numbered, the table with the smallest number can be compared with the identification information in turn. For example, if the first flow tables are numbered from 0 to n, they can be compared with the identification information sequentially from table 0 to table n. The identification information registered in the rule field of the flow table and the identification information of the packet can be compared. If the flow table corresponding to the identification information is determined in the middle of the comparison, the comparison is interrupted and the next step can be performed. The flow table determined to correspond to the identification information is named a matching table.

At step 620, the processor 220 executes the instructions set in the matching table. For example, the processor 220 may process the packet according to an action field of a matching table. The instruction may update the set of execution fields, update the packet, update the match set fields, and update the metadata.

In step 630, the communication unit 210 transmits the packet based on the matching flow of the matching table. For example, the packet can be forwarded to the next switch of the open flow switch 200 according to the matching flow.

Only the first flow tables for the internal network are considered in order to transmit the packet, so that the effect of separating the external network and the network occurs.

7 is a flowchart of a method of transmitting a packet using second flow tables according to an example.

Step 530 described above with reference to Figure 5 includes the following steps 710-730.

At step 710, the processor 220 may determine a matching flow corresponding to the identification information in the second flow tables. For example, if the second flow tables are numbered, they can be compared with the identification information in turn from the flow table with the smallest number. For example, when the second flow tables are numbered from 500 to k, the table 500 to the table k can be sequentially compared with the identification information. 500 may be a number greater than n described above with reference to FIG. The identification information registered in the rule field of the table and the identification information of the packet can be compared. If the flow table corresponding to the identification information is determined in the middle of the comparison, the comparison is interrupted and the next step can be performed.

At step 720, the processor 220 executes the instructions set in the matching table. For example, the processor 220 may process the packet according to the execution field of the matching table. The instruction may update the set of execution fields, update the packet, update the match set field, and update the metadata.

In step 730, the communication unit 210 transmits the packet based on the matching flow of the matching table. For example, the packet can be forwarded to the next switch of the open flow switch 200 according to the matching flow.

Only the second flow tables for the external network are considered to transmit the packet, so that the internal network and the network are separated from each other.

8 is a flow diagram of a method for transmitting a packet using an additional flow according to an example.

Steps 520 described above with reference to Figures 5 and 6 may further include the following steps 810-850. Step 810 may be performed after step 610 is performed.

At step 810, the processor 220 determines whether a matching table corresponding to the identification information of the packet has been determined. If the matching table is determined, the above-described step 620 may be performed. If the matching table is not determined, step 820 may be performed.

In step 820, the communication unit 210 transmits the packet to the controller of the SDN. For example, the processor 220 may transmit a packet over a channel with a controller of the SDN. The channel may be operated using an open flow protocol.

The controller that received the packet can determine the routing path of the packet. The controller can send the routing path to the open flow switch 200 as an additional flow.

In step 830, the communication unit 210 receives an additional flow for the packet from the controller. The additional flow is in the form of a flow table, and the flow table can be numbered.

At step 840, the processor 220 updates the first flow tables using an additional flow. For example, the processor 220 may add a flow table of additional flows to the first flow tables.

In step 850, the communication unit 210 transmits the packet using the additional flow.

Although step 520 has been described as further including steps 810 through 850, steps similar to steps 810 through 850 may be further included in step 530. [ For example, the description of the internal network may be equally applied to the description of the external network, and the processor 220 may update the second flow tables using the additional flow. Duplicate descriptions will be omitted below.

9 is a packet transmission method performed on an open flow switch according to an example.

The open flow switch 900 may correspond to the open flow switch 200 described above with reference to Figs.

The open flow switch 900 receives the packet and determines the type of network used to transmit the packet based on the identification information of the packet and the pre-identification table stored in the open flow switch 900. Each operation pipeline is performed according to the type of network.

For example, if it is determined to be an internal network, the identification information may be compared to the first flow tables including Table 0 through Table n, and an action set for the determined matching table may be executed. After the action set is executed, the packet may be transmitted in accordance with the matching flow.

  As another example, if determined to be an external network, the identification information may be compared to the second flow tables including table 1000 through table k, and an action set for the determined matching table may be executed. After the action set is executed, the packet may be transmitted in accordance with the matching flow.

If the type of network used to transmit the packet is determined in advance based on the pre-identification table, the effect of separating the networks that may be used for transmitting the packet appears. That is, the operation pipeline for the determined network can be performed so that it can be separated from other networks.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

Although the embodiments have been described with reference to the drawings, various technical modifications and variations may be applied to those skilled in the art. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

200: Open flow switch
210:
220: Processor
230: Memory

Claims (14)

A method of packet transmission, performed by an openflow switch in a Software Defined Network (SDN)
Receiving a packet;
Determining a type of a network to which the packet is transmitted based on the identification information included in the packet; And
Transmitting the packet using flow tables set for the determined network type;
Lt; / RTI >
Wherein the step of transmitting the packet using the flow tables comprises:
Transmitting the packet to a controller of the SDN if it can not determine a matching flow corresponding to the identification information among the flow tables;
Receiving an additional flow from the controller, the additional flow being a routing path for the packet determined by the controller; And
Transmitting the packet using the additional flow < RTI ID = 0.0 >
/ RTI >
Packet transmission method.
The method according to claim 1,
The type of the network includes,
Including an internal network and an external network,
Packet transmission method.
3. The method of claim 2,
Wherein the step of determining the type of the network to which the packet is transmitted comprises:
Extracting the identification information included in the packet; And
Determining whether the flow represented by the identification information is an internal network or an external network
/ RTI >
Packet transmission method.
3. The method of claim 2,
Wherein the step of transmitting the packet using the flow table set for the determined network type comprises:
If the type of the network is determined as the internal network, transmitting the packet using first flow tables set for the internal network; And
If the type of the network is determined to be the external network, transmitting the packet using second flow tables set for the external network
/ RTI >
Packet transmission method.
5. The method of claim 4,
Each of the first flow tables having a first identification value indicating that the flow of the first flow table is set in the internal network,
Each of the second flow tables having a second identification value indicating that the flow of the second flow table is set in the external network,
Packet transmission method.
5. The method of claim 4,
Wherein the transmitting the packet using the first flow tables comprises:
Determining a matching flow corresponding to the identification information among the first flow tables;
Executing an instruction set in the matching flow; And
Transmitting the packet based on the matching flow
/ RTI >
Packet transmission method.
delete The method according to claim 1,
Wherein the step of transmitting the packet using the flow tables comprises:
Updating said flow tables using said additional flow
≪ / RTI >
Packet transmission method.
5. The method of claim 4,
Wherein the transmitting the packet using the second flow tables comprises:
Determining a matching flow corresponding to the identification information among the second flow tables;
Executing an instruction set in the matching flow; And
Transmitting the packet based on the matching flow
/ RTI >
Packet transmission method.
A computer-readable recording medium storing a program for carrying out the method according to any one of claims 1 to 6, 8 and 9.
An openflow switch in a Software Defined Network (SDN)
A memory for storing a program for transmitting a packet; And
The processor executing the program
Lt; / RTI >
The program includes:
Receiving a packet;
Determining a type of a network to which the packet is transmitted based on the identification information included in the packet; And
Transmitting the packet using flow tables set for the determined network type;
Lt; / RTI >
Wherein the step of transmitting the packet using the flow tables comprises:
Transmitting the packet to a controller of the SDN if it can not determine a matching flow corresponding to the identification information among the flow tables;
Receiving an additional flow from the controller, the additional flow being a routing path for the packet determined by the controller; And
Transmitting the packet using the additional flow < RTI ID = 0.0 >
/ RTI >
Open flow switch.
12. The method of claim 11,
The type of the network includes,
Including an internal network and an external network,
Open flow switch.
13. The method of claim 12,
Wherein the step of determining the type of the network to which the packet is transmitted comprises:
Extracting the identification information included in the packet; And
Determining whether the flow represented by the identification information is an internal network or an external network
/ RTI >
Open flow switch.
13. The method of claim 12,
Wherein the step of transmitting the packet using the flow table set for the determined network type comprises:
If the type of the network is determined as the internal network, transmitting the packet using first flow tables set for the internal network; And
If the type of the network is determined to be the external network, transmitting the packet using second flow tables set for the external network
/ RTI >
Open flow switch.

Images