Abnormal Traffic Monitoring System Based On Software Definition Method

With the rise of container technology,more and more enterprises will use docker container technology in their production environment.In order to maintain the safe and smooth operation of the entire environment,the demand for monitoring the running docker container and the server where the docker container is running on it becomes increasingly urgent.This paper first describes the current cloud computing and virtual environment for abnormal traffic monitoring needs,and then based on the openstack environment to build a set of software-based definition of the virtual machine monitoring system,and achieve that when exception traffic appears in the system,the alarm system will send alert.Then based on OpenvSwitch technology to build docker cluster network architecture,based on Prometheus + grafana build open source docker monitoring system.Using the Floodlight as a controller to draw the docker network topology and modify the ping-flood traffic through the sdn method to better monitor the docker container and the host running the docker container,and discover some abnormal traffic and events in time.Make sure the entire production environment is stable.With the development of virtualization technology and docker container technology,the need of monitoring virtual environment and docker operating environment becomes increasingly urgent.Only the entire system is under a full range of monitoring,we can completely control the entire system,we can find problem in time,maintaining the entire system safe and stable.