#Mac address labels template verification#

SR only keeps the flow state in the message header, instead of the OpenFlow implementation in classical SDN which needs to keep the state for each hop of each flow and overcomes its convergence bottleneck 4, 5, 6.Д®ssentially, SR adopts SDN architecture based on the transformation of the IP system, while it brings agility to future networks, in addition to the inherent threats of traditional IP networks such as traffic eavesdropping, service denial, and identity theft, SR also faces new hidden dangers such as single point failure of controller 7 and service failure of SR nodes 8 caused by the introduction of new components and new network layers. Therefore, it is also known as 'Next Generation MPLS', which has been deployed in top operators/OTT (Over the Top) networks at home and abroad, and can be implemented based on open source SDN routers such as OpenDaylight. Based on the labeling mechanism introduced by MPLS technology, it deletes the complicated LDP/RSVP-TE protocol required for label allocation, greatly simplifies the MPLS control plane and realizes an application-driven network 1, 2, 3. It takes source routing and statelessness as its key characteristics. SR is the key technology of large-scale SDN (software-defined network) backbone network innovation at present.

Finally, the simulation test results of 5 security functions and security costs show that the proposed architecture can solve port scanning, traffic monitoring, topology detection, loop attack, and DoS attack of SR network data plane with an average access delay cost of 2.84В s for each new network agent, and realize multi-faceted protection of SR network data plane. In the trust evaluation mechanism as the core of the model, System cloud grey model (1,1) weighted Markov prediction model is introduced to obtain real-time trust based on the historical behavior of device nodes, and 4 indexes, namely benign message ratio, loyal forwarding ratio, forwarding ratio stationarity coefficient, packet rate stationarity coefficient, are introduced to distinguish malicious devices from normal devices.

#Mac address labels template verification#

Focusing on the security management of access devices in the SR data plane, first, this paper proposes an SR security model SbSR (SDP-based SR) based on SDP trust enhancement architecture, then, two-level SDP AH trust verification mechanism and 4 trust management mechanisms including initial trust value, trust evaluation, trust renewal, trust inheritance are designed. Combining SR with software-defined perimeter (SDP), a new network security technology, is expected to solve the traditional problems such as data monitoring, denial of service, and new threats such as loop attack and label detection faced by SR data plane. Segment routing (SR) technology is a new network functional technology derived from MPLS technology and based on SDN.