POX SDN控制器入门：组件与架构详解

需积分: 14 100 浏览量更新于2024-07-19 1 收藏 1.06MB PDF 举报

POX是一个开源的软件定义网络(SDN)控制器，由Stanford Open Networking Lab开发，旨在提供一个灵活且易于扩展的平台来实现网络控制。本入门文档详细介绍了如何安装和配置POX，以及其核心组件的功能和用途。 1. **安装与需求**: POX需要满足一定的技术要求，包括Python支持（推荐使用PyPy版本），以及基本的操作系统环境。在安装前，请确保你的系统已经具备这些条件。 2. **代码获取与版本选择**: 你可以从POX的官方GitHub仓库获取代码。选择合适的分支或版本对于后续的开发和使用至关重要，因为不同的版本可能对应不同的功能特性和兼容性。 3. **组件介绍**: - **Stock Components**: POX包含多个预置的核心组件，如`forwarding`模块，用于处理不同层次的网络转发策略，如`forwarding.hub`用于创建二层交换机，`forwarding.l2_learning`支持基于学习的二层交换。 - `openflow`模块负责OpenFlow协议的支持，包括`of_01`版本的OpenFlow，`discovery`用于设备发现，`debug`用于调试信息，`keepalive`保持连接健康等。 - `web`模块提供了Web服务接口，如`webservice`可以用来创建简单的网络设备，`webcore`是基础的Web框架。 - `messenger`用于组件间的通信，`proto`包包含了各种协议处理程序，如`arp_responder`、`dns_spy`等。 - `info`包提供数据包捕获和分析功能，`misc`包则包含了额外的功能扩展，如负载均衡、MAC地址过滤、NAT转换等。 - `log`模块负责日志管理，包括控制台日志的显示和格式设置。 4. **示例与教程**: 文档中提到了如何通过web服务创建一个hub，这展示了POX的实用性和灵活性。此外，还有教程 (`misc.of_tutorial`) 和示例代码 (`full_payload`、`mac_blocker`等)帮助用户理解和应用这些组件。 5. **定制与控制**: 用户可以根据需要禁用控制台日志（`Disabling the Console Log`），并了解如何调整日志格式 (`Log Formatting`) 和输出 (`Log Out`)。 POX Wiki文档为初学者提供了全面的指南，覆盖了从安装到配置再到理解各个组件功能的全过程，适合对SDN控制器感兴趣的开发者和技术人员深入研究和实践。通过理解和使用POX，用户能够更好地构建和管理网络流量，实现网络功能的动态调整和自动化控制。

14-2-21 POX Wiki - Open Networking Lab - Confluence

https://openflow.stanford.edu/display/ONL/POX+Wiki#POXWiki-ExecutingCodeintheFutureusingaTimer 7/40

Loading this component will cause POX to create pcap traces containing OpenFlow messages, which you can then load into Wireshark to analyze. All the

headers are synthetic so it's not totally a replacement for actually running tcpdump or Wireshark. It does, however, have the nice property that there is

exactly one OpenFlow message in each frame (which makes it easier to look at!).

openflow.keepalive

This component causes POX to send periodic echo requests to connected switches. This addresses two issues.

First, some switches (including the reference switch) will assume that an idle control connection indicates a loss of connectivity to the controller and will

disconnect after some period of silence (often not particularly long). This behavior is almost certainly broken: one can easily argue that if the switches

want to disconnect when the connection is idle, it is their responsibility to send echo requests, but arguing won't fix the switches.

Secondly, if you lose network connectivity to the switch, you don't immediately get a FIN or a RST, so it's hard to say exactly when you'll notice that you've

lost the switch. By sending echo requests and tracking their responses, you get a bound on how long it will take to notice.

NOTE: This component is badly named and will probably be renamed in the carp branch.

proto.pong

The pong component is a sort of silly example which simply watches for ICMP echo requests (pings) and replies to them. If you run this component, all

pings will seem to be successful! It serves as a simple example of monitoring and sending packets and of working with ICMP.

proto.arp_responder

An ARP utility that can learn and proxy ARPs, and can also answer queries from a list of static entries. This component also adds the ARP table to the

interactive console as "arp" – allowing you to interactively query and modify it.

Simply specify IP addresses and the ethernet address you want to associate with them as options:

proto.arp_responder --192.168.0.1=00:00:00:00:00:01 --192.168.0.2=00:00:00:00:00:02

info.packet_dump

A simple component that dumps packet_in info to the log. Sort of like running tcpdump on a switch.

proto.dns_spy

This component monitors DNS replies and stores their results. Other components can examine them by accessing core.DNSSpy.ip_to_name[<ip

address>] and core.DNSSpy.name_to_ip[<domain name>].

proto.dhcp_client

A DHCP client component. This is probably not useful on its own, but can be useful in conjunction with other components.

proto.dhcpd

This is a simple DHCP server. By default, it claims to be 192.168.0.254, and serves clients addresses in the range 192.168.0.1 to 192.168.0.253,

claiming itself to be the gateway and the DNS server.

Note: You might want to use proto.arp_responder to make 192.168.0.254 (or whatever you choose as the IP address) ARP-able.

There are a number of options you can configure:

Option Meaning

network Subnet to allocate addresses from, e.g., "192.168.0.0/24" or "10.0.0.0/255.0.0.0"

first First'th address in subnet to use (256 is x.x.1.0 in a /16).

last Last'th address in subnet to use (258 is x.x.1.2 in a /16). If 'None', use rest of valid range.

count Alternate way to specify last address to use

ip IP to use for DHCP server

router Router IP to tell clients. Defaults to whatever is set for ip. 'None' will stop the server from telling clients anything.

dns DNS server to tell clients. Defaults to whatever is set for router. 'None' will stop the server from telling clients anything.

Example:

proto.dhcpd --network=10.1.1.0/24 --ip=10.1.1.1 --first=10 --last=None --router=None --dns=4.2.2.1

14-2-21 POX Wiki - Open Networking Lab - Confluence

https://openflow.stanford.edu/display/ONL/POX+Wiki#POXWiki-ExecutingCodeintheFutureusingaTimer 8/40

You can also launch this component as proto.dhcpd:default to serve 192.168.0.100-199.

Right before issuing an address, the DHCP server raises a DHCPLease event which you can listen to if you want to learn or deny address allocations:

misc.of_tutorial

This component is for use with the OpenFlow tutorial. It acts as a simple hub, but can be modified to act like an L2 learning switch.

misc.full_payload

By default, when a packet misses the table on a switch, the switch may only send part of the packet (the first 128 bytes) to the controller. This

component reconfigures every switch that connects so that it will send the full packet.

misc.mac_blocker

This component is meant to be used alongside some other reactive forwarding applications, such as l2_learning and l2_pairs. It pops up a Tkinter-based

GUI that lets you block MAC addresses.

It works by wedging its own PacketIn handler in front of the PacketIn handler of the forwarding component. When it wants to block something, it kills the

event by returning EventHalt. Thus, the forwarding component never sees the packet/event, never sets up a flow, and the traffic just dies.

Thus, it demonstrates Tkinter-based GUIs in POX as well as some slightly-advanced event handling (using higher-priority event handlers to block

PacketIns). See the pox.lib.revent section of this manual for more on working with events, and see the FAQ entry for creating a firewall for another not-

entirely-dissimilar example that blocks TCP ports.

misc.nat

A component which does Network Address Translation.

misc.ip_loadbalancer

This component (which started in the carp branch) is a simple TCP load balancer.

./pox.py misc.ip_loadbalancer --ip=<Service IP> --servers=<Server1 IP>,<Server2 IP>,...

Give it a service_ip and a list of server IP addresses. New TCP flows to the service IP will be randomly redirected to one of the server IPs.

Servers are periodically probed to see if they're alive by sending them ARPs.

misc.gephi_topo

Streams detected topology to Gephi.

Gephi is a pretty awesome open-source, multiplatform graph visualization/manipulation/analysis package. It has a plugin for streaming graphs back and

forth between it and something else over a network connection. The gephi_topo component uses this to provide visualization for switches, links, and

(optionally) hosts detected by other POX components. There's a blog post about this component on noxrepo.org.

This component is loosely based on POXDesk's tinytopo module. It requires discovery, and host_tracker is optional.

Example usage:

./pox.py openflow.discovery misc.gephi_topo host_tracker forwarding.l2_learning

def _I_hate_00_00_00_00_00_03 (event):

if event.host_mac == EthAddr("00:00:00:00:00:03"):

event.nak() # Deny it!

core.DHCPD.addListenerByName('DHCPLease', _I_hate_00_00_00_00_00_03)

剩余39页未读，继续阅读

乌托

粉丝: 82
资源: 13

POX SDN控制器入门：组件与架构详解

简单的POX下网络层防火墙

openflow+pox操作命令

pox-lite:Freehold PoX Lite智能合约

可实现的POX

pox.xml详细

poxstuff:Pox 材料库

JSP_POX_GA _upload_路径选择_网络调度遗传算法_pox_

POX下的简单网络层防火墙

JSP_POX_GA.zip

ubunto启动pox命令

最新资源