跳到主要內容

簡易檢索 / 詳目顯示

研究生: 劉俊廷
Chun-Ting Liu
論文名稱: M-CORD系統之實作及其在平衡式入侵偵測之應用
Implementation of M-CORD System and Its Application in Intrusion Detection with Load Balance
指導教授: 陳彥文
口試委員:
學位類別: 碩士
Master
系所名稱: 資訊電機學院 - 通訊工程學系在職專班
Executive Master of Communication Engineering
論文出版年: 2020
畢業學年度: 108
語文別: 中文
論文頁數: 71
中文關鍵詞: 軟體定義網路網路功能虛擬化負載平衡CORD
相關次數: 點閱:8下載:0
分享至:
查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報
  • 為了提高服務供應商的資料中心之經濟性以及雲端彈性,由開放網路基金會( ONF, Open Network Foundation )提供了開源軟體CORD( Central Office Re-architected as Datacenter )的解決方案,並將此方案區分為Mobile、Enterprise、Residential三種應用場景。其目的是將Telco Central Office中使用傳統的硬體架構轉換為使用白牌交換機、伺服器的資料中心架構,以增加提供服務彈性及擴充性。
    過去Central Office架構因為客戶的需求而需要經常性的採購電信硬體設備,或是在開發新的服務時必須與設備廠商共同開發甚至無法達到預期所需的結果;CORD的理念既是為了解決此類問題,像是未來面對這些問題可透過這種NFV( Network Function Virtualization )的方式達到佈署服務的彈性以及經濟性,由本身公司的硬體架構師和軟體開發人員即可上線新的服務或彈性擴充硬體設備。
    本研究將使用Mobile CORD為實驗的方向。架設M-CORD Ciab ( Cord-in-a-box )環境,並針對Open vSwitch調整權重改善NFV資源的負載平衡。例如當終端使用者產生大量的乙太封包,造成NFV的CPU用量增加導致效能降低,系統將透過主動式偵測NFV資源用量,且即時針對Open vSwitch的權重設定調整分配封包的傳送量,使網路流量能分散在多個NFV中。


    In order to improve datacenter economies and cloud agility to service providers, so the ONF(Open Network Foundation) provided a solution for the open source project : CORD(Central Office Re-architected as Datacenter), and this solution is divided into three scenarios: Mobile, Enterprise, and Residential. The purpose is to transform the traditional hardware architecture into a data center architecture in Telco Central Office, it can use white-brand switches and servers to increase service flexibility and scalability.
    The ISPs(Internet Service Provider) often need to purchase telecom equipment and develop new services with equipment suppliers in past CO(Central Office) architecture. The concept of CORD is to solve such problems, it provides the features of flexibility and economics through the NFV(Network Function Virtualization) technology if ISPs face these problems in the future. In this way, developers can create new telecom’s services and functions by themselves.
    This paper will use M-CORD(Mobile CORD) as the experimental direction. The laboratory setup an M-CORD Ciab(Cord-in-a-box) environment, and adjusted the weight for Open vSwitch to improve the load balance of NFV resources. For example, when a lot of ethernet packets are generated by users, the CPU usage will be increases and the performance decreases. The system will actively detect the CPU usage of NFV resources and adjust the weight of the Open vSwitch in real time. So the NFV will receive packets on average.

    摘要 I ABSTRACT II 目錄 III 圖目錄 V 表目錄 VIII 1. 第一章 緒論 1 1.1. 研究背景 1 1.2. 研究動機與目的 3 1.3. 章節概要 4 2. 第二章 研究背景 5 2.1. CORD基本介紹 5 2.1.1. SDN控制器 5 2.1.2. OpenStack 6 2.1.3. CORD架構 10 2.1.4. M-CORD架構及其應用 14 2.2. OVS負載平衡機制 16 2.3. 相關文獻 19 3. 第三章 實驗方法 24 3.1. M-CORD實驗環境介紹 24 3.1.1. M-CORD特性 24 3.1.2. 架設M-CORD環境 25 3.2. NFV網路服務 33 3.3. 負載平衡演算法 37 4. 第四章 實作與結果討論 41 4.1. 實作環境 41 4.2. 應用範例 43 4.2.1. M-CORD實作應用 43 4.2.2. 模擬DoS攻擊 46 4.2.3. 演算法實作與結果分析 47 5. 第五章 結論 54 6. 參考文獻 56

    [1] [Online].Available: https://www.sdnlab.com/19704.html. [Accessed 20 05 2020]
    [2] [Online].Available:https://showipprotocols-tw.blogspot.com/2014/06/northbound-southbound-east-west-bound.html. [Accessed 20 05 2020]
    [3] [Online].Available: https://www.opennetworking.org/cord/. [Accessed 20 05 2020]
    [4] [Online].Available:https://www.2cm.com.tw/2cm/zh-tw/magazine/-Technology/EE1AD67D7C08456CAE1D35B89F89AACE. [Accessed 20 05 2020]
    [5] [Online].Available: http://buddhaya7.pixnet.net/blog/post/215247273. [Accessed 20 05 2020]
    [6] [Online].Available:https://www.2cm.com.tw/2cm/zh-tw/tech/9D85FB332F864201A1F8DBA3930AF81D. [Accessed 20 05 2020]
    [7] [Online].Available: http://sdnhub.org/tutorials/onos. [Accessed 20 05 2020]
    [8] [Online].Available: https://zh.wikipedia.org/zh-tw/OpenStack. [Accessed 20 05 2020]
    [9] [Online].Available: https://www.openstack.org/software/. [Accessed 20 05 2020]
    [10] [Online].Available: https://kairen.gitbooks.io/openstack-liberty/content/conceptions/index.html. [Accessed 20 05 2020]
    [11] [Online].Available: https://www.openstack.org/software/. [Accessed 20 05 2020]
    [12] [Online].Available: https://www.openstack.org/containers/leveraging-containers-and-openstack/. [Accessed 20 05 2020]
    [13] [Online].Available: https://www.opennetworking.org/r-cord/. [Accessed 20 05 2020]
    [14] [Online].Available: https://www.sdnlab.com/19664.html. [Accessed 20 05 2020]
    [15] [Online].Available: https://www.opennetworking.org/xos/. [Accessed 20 05 2020]
    [16] [Online].Available: http://www.conference.cn/download/ONOS/002.pdf. [Accessed 20 05 2020]
    [17] [Online].Available: https://www.opennetworking.org/m-cord. [Accessed 20 05 2020]
    [18] [Online].Available: https://guide.opencord.org/cord-4.1/profiles/mcord/overview.html. [Accessed 20 05 2020]
    [19] [Online].Available: https://www.datacenterdynamics.com/en/news/radisys-launches-server-system-for-telcos. [Accessed 20 05 2020]
    [20] [Online].Available: https://zh-hant.insight.tech/%E5%85%A7%E5%AE%B9/5g-%E9%9C%80%E8%A6%81%E5%BB%BA%E6%A7%8B%E6%A8%A1%E5%A1%8A%E7%A1%AC%E9%AB%94%E5%92%8C%E9%96%8B%E6%94%BE%E5%8E%9F%E5%A7%8B%E7%A2%BC%E8%BB%9F%E9%AB%94. [Accessed 20 05 2020]
    [21] [Online].Available: https://en.wikipedia.org/wiki/Open_vSwitch. [Accessed 20 05 2020]
    [22] [Online].Available: https://www.netadmin.com.tw/netadmin/zh-tw/technology/9FF6A417220F400884C788AB00FA3750. [Accessed 20 05 2020]
    [23] [Online].Available: https://docs.pica8.com/display/PICOS2111cg/Creating+a+Group+Table. [Accessed 20 05 2020]
    [24] Jibum Hong, Woojoong Kim, Jae-Hyoung Yoo, Won-Ki Hong, "Design and Implementation of Container-based M-CORD Monitoring System", IEICE – The 20th Asia-Pacific Network Operations and Management Symposium (APNOMS) 2019.
    [25] Talal Alharbi, Ahamed Aljuhani, "Holistic DDoS Mitigation Using NFV", 2017 IEEE 7th Annual Computing and Communication Workshop and Conference (CCWC), Jan. 2017.
    [26] Talha Ahmed Khan, Asif Mehmood, Javier Jose Diaz Rivera, Wang-Cheol Song, "Machine Learning Approach for Automatic Configuration and Management of 5G Platforms", IEICE – The 20th Asia-Pacific Network Operations and Management Symposium (APNOMS) 2019
    [27] [Online].Available: https://guide.opencord.org/cord-4.1/install_physical.html. [Accessed 20 05 2020]
    [28] [Online].Available: https://www.netadmin.com.tw/netadmin/zh-tw/technology/F332544D7A274E8AAAF7D0295328B744. [Accessed 20 05 2020]
    [29] [Online].Available: https://www.comparitech.com/net-admin/network-intrusion-detection-tools. [Accessed 20 05 2020]
    [30] [Online].Available: https://zh.wikipedia.org/wiki/Snort. [Accessed 20 05 2020]
    [31] [Online].Available: http://www.hping.org. [Accessed 20 05 2020]

    QR CODE
    :::