SDN虚拟网络的安全设计与部署.pdfVIP

摘 要 虚拟化网络的安全性问题一直引人关注，搭建更安全、更优质的网络也是众多网络 技术人员梦寐以求的。 时，网络需求的不断增长使得传统网络面临严峻挑战，新型的S DN网络应运而生。本文将围绕这些方面的问题展开讨论与研究。 本文主要搭建了两种网络。一种是较为传统的网络，使用的是vyatta路由器，另一种 是目前比较新颖的SDN网络。本文更多的篇幅将用于讲解传统的vyatta路由器的安全网 络的搭建与测试。　 本文首先介绍了所用到的技术和软件，例如SDN网络的概念、OpenvSwitch虚拟交换 机、vyatta软件等等。目的是让读者能在阅读具体技术细节时能对本文所用到的技术能够 有大概的了解。 本文的工作主要是搭建VirtualBox虚拟机平台，在虚拟机中安装Vyatta路由器软件、 SDN控制器、虚拟交换机OpenvSwitch ；在云平台上分别实现Vyatta虚拟机、OpenvSwitch 虚拟交换机启用36个虚拟网卡的功能（利用VirtualBox功能），用Vyatta实现虚拟机端口 转发功能，以及虚拟机之间互不连通的VLAN功能（利用VirtualBox 的Host Only虚拟网卡）；搭建SDN控制器和OpenvSwitch虚拟交换机的网络 关键词：虚拟化；路由器；vyatta ；SDN I Abstract This paper describes the process in building a secure network on virtualization platform for safety testing. This paper set up two networks. One is the more traditional networks, using vyatta router, another is relatively new SDN network. In this paper, more space will be used to build and test explain traditional vyatta router security network. This paper describes the technology and software those have been used , for example, the concept of SDN network, OpenvSwitch virtual switch, vyatta software and so on. The purpose is to allow the reader to have a overlook of the technology before reading the specific technical details. The main work of this paper is to build a VirtualBox virtual machine platforms, install Vyatta router software, SDN controllers, virtual switches OpenvSwitch in the virtual machine; enable 36 virtual NICs function (using VirtualBox function)on the Vyatta virtual machines and OpenvSwitch virtual switches, achieving port forwarding between virtual machines with Vyatta, and virtual machines do not communicate with each other VLAN function (using the VirtualBox Host Only virtual NIC); build network with SDN controllers and virtual switch OpenvSwitch Keyword: V