基于SDN的政企vCPE VPN业务研究

SDN已成为当前的研究热点.用SDN技术实现vCPE的主要思想是通用硬件+软件的方式实现CPE,同时用SDN控制器集中管理vCPE,并提供开放的北向可编程接口.采用此方法,不仅可以为政企客户提供丰富的增值业务,还可以加快政企客户业务部署速度,增强业务灵活部署的能力.提出了基于SDN技术的vCPE模型,并研究采用vCPE后,如何根据企业不同的需求实现VPN业务的问题.提出了3种适用于vCPE的VPN技术,即VxLAN VPN、MPLS协议VPN和IPSec VPN,并从多角度比较了3种方法的优劣.此外还提出VxLAN VPN、MPLS VPN和IPSec VPN的融合方案,在保证VPN业务高安全性的同时,分别保持VxLAN VPN低成本的优势和MPLS VPN高传输速率和QoS保障的优势,从而使得政企客户能够根据自身带宽、安全性和时延等需求,选购灵活的随选VPN产品.

Research on VPN service for government and enterprise customers in SDN-based vCPE networks

SDN technology has been studied widely recently.The main idea of SDN-based vCPE is using custom hardware and software to replace CPE.All vCPEs are managed by the SDN controller in a centralized way and the open programmable north interface can be provided.In this way,not only a wealth of value-added services can be provided for government and enterprise customers,but also the pace of deploying services can be speeded up and the flexibility can be enhanced.A SDN based vCPE model was proposed and the problem of how to realize VPN services for government and enterprise customers in SDN-based vCPE networks according to their own needs was researched.Three VPN technologies of VxLAN VPN,MPLS VPN and IPSec VPN were proposed and they were compared from different perspectives.In addition,fused schemes were proposed to combine the advantages in security,transmission rate and QoS,so that government and enterprise customers can select flexible VPN products according to their own needs in bandwidth,security,delay and others.