Design And Implementation Of Cloud-based Flow Security Platform Based On SDN

With the advancement of the national Internet strategy,more and more enterprises,especially the emerging industries,bundle their own business development with Internet applications not only to utilize the Internet efficient and low cost of customer coverage to quickly promote their business,but also use Internet technology to help enterprises Management,improve production efficiency.However,with the development of network reference cloud and resource sharing in breadth and depth,network security,especially information security has become increasingly prominent,which has become one of the primary concerns of cloud application users.The software defined networking architecture decouples the control plane and data plan in traditional switches and routers.The network is managed by one or more centralized controllers,which can achieve the network configuration and management,programmable network and enable innovation in network.The purpose of this thesis is to propose a new cloud-based flow security platform architecture from the perspective of user security in the framework of software defined networking technology.The content of this thesis mainly includes the structure of data traffic into cloud platform,the specific design of the functions of the server cluster management,and the final model implementation of the user management functions.The implement of user management functions in this thesis includes the management of hardware probes and mobile agents and the establishment and maintenance of tunnels between network devices.At the same time,in order to cope with the increasingly complicated network conditions in the future,load balancing algorithm and SDN architecture are combined to achieve user management functions in this thesis.Finally,the function of the model is implemented,which proves the feasibility of the security cloud platform.