Avtomatizacija ločevanja prometa v programsko definiranih omrežjih

DEKLEVA, JAKOB (author), Burnik, Urban (mentor)

V diplomski nalogi sta predstavljena razvoj in implementacija paketnega posrednika za namene avtomatizacije ločevanja internetnega prometa, ki ga podjetje uporablja za analizo napadov in delovanja omrežja. Osrednja tema je izdelava programske skripte, ki nam avtomatizira monotono delo in nam pomaga vzpostaviti programsko definirano omrežje. Skripta nam pomaga pri izdelavi paketnega posrednika, ki bo podjetju pomagal z zamenjavo starih stikal, ki sedaj delujejo v vlogi paketnega posrednika. Diplomska naloga je sestavljena iz treh ključnih delov. V prvem je opisana strojna oprema: strežnik, optične povezave ter stikalo Mellanox, ki smo ga uporabili za izdelavo paketnega posrednika. V tem delu sta opisana tudi programska oprema ter programski jezik Python, ki je uporabljen za izgradnjo programske skripte. Na koncu je opisan protokol OpenFlow, katerega smo uporabili za komunikacijo med skriptom in strojno opremo. V drugem delu je opisan razvoj skripte GlueFlow, ki je uporabljen za avtomatizacijo ločevanja prometa. Podrobneje sta predstavljena arhitektura same skripte ter delovanje funkcij skripta, ki nam pomagajo pri avtomatizaciji omrežja. Opisan je tudi postopek komunikacije med skriptom in stikalom. Na koncu je predstavljen postopek vzpostavitve paketnega posrednika v produkcijskem okolju. Podrobneje je opisano delovanje paketnega posrednika za različne odjemalce prometa. V zaključku so predstavljeni uspeh projekta ter možne izboljšave in trenutne pomanjkljivosti.

• Language: Slovenian
• Keywords: paketni posrednik, programsko definirano omrežje, avtomatizacija omrežja, OpenFlow, stikalo Mellanox NS2410, Python
• Work type: Bachelor thesis/paper
• Organization: FE - Faculty of Electrical Engineering
• Year: 2022
• PID: 20.500.12556/RUL-138323
• COBISS.SI-ID: 115497475
• Publication date in RUL: 15.07.2022

Secondary language

• Language: English
• Title: Automated traffic separation in software defined networks

Abstract

The diploma thesis presents the development and implementation of a packet broker for the purposes of automating the separation of Internet traffic, which the company uses to analyze attacks and network operation. The central theme is the creation of a software script that automates our monotonous work and helps us to establish a program-defined network. The script helps us create a packet broker that will help the company by replacing the old switches that now act as a packet broker. The diploma thesis consists of three key parts. The first part describes the hardware: the server, optical connections and the Mellanox Switch, which we used to make the packet broker. This section also describes the software and the Python programming language used to build the programming script. Finally, the OpenFlow protocol, which we used to communicate between the script and the hardware, is described. The second part describes the development of a script, GlueFlow, which is used to automate traffic separation. The architecture of the script itself and the operation of the script functions that help us in network automation are presented in more detail. The communication process between the script and the switch is also described. Finally, the process of establishing a package broker in a production environment is presented. The operation of a packet broker for different traffic clients is described in more detail. In conclusion, the success of the project and possible improvements and current shortcomings are presented.

• Keywords: network packet broker, software-defined network, network automation, OpenFlow, Mellanox switch SN2410, Python