| The software defined network(SDN)is a new type of network architecture,whose core idea is to separate the control plane from the data forwarding plane and turns the switch into a simple forwarding device.Therefore,the controller is endowed to the ability to control globally,thus achieving the centralized control of the network and programmability.At present,the protocol between the control plane and the forwarding plane is Openflow,and its revision and release is dominated by the Open Network Foundation(ONF).The software defined network not only introduces the separation of the data plane from the control plane,but also brings a different attack pattern from the traditional network.This paper studies the security of the new path installation in the software defined network,and provides the security level partitioning mechanism for the switch.Based on the state of the switch,the switch is classified into three security levels,and combines the attack detection with the choice of route.This mechanism first calculates the shortest paths of the former K,and then regards the minimum value of the switch’s security level as the security level of the path.Finally,the path with the highest security level is selected as the final path.When the security level is the largest,the maximum available bandwidth will be selected as the final path.When the software defined network is faced with the attack,this mechanism shows dynamic scalability,and thus reduces the harm caused by the attack.In the current software defined network,there still exists such problems as load imbalance and being unable to meet the QoS requirement of network traffic.Based on the advantages of SDN controller to master the advantages of global network view,network aware function and network traffic,a route is came up with on the basis of traffic selection mechanism.The mechanism first calculates the shortest paths of the former K,and then calculates the weight of the K paths according to the business attribute of the traffic,and the path with the largest weight will be the best path.This mechanism can select a route which satisfies its QoS requirement for the data flow of different service types,and make the whole network reach load balanced,thus improving the utilization rate of the underlying network resources. |