The Design and Implementation of Software Defined Network Security Service Choreography System

According to different users’ personalized network security service requirements, a software defined network security service choreography system has been constructed. The system is composed of service choreography layer, service management layer and service data layer. The architecture and technical details of the system are introduced in detail. Taking single domain as the construction object, this paper explains that the most basic intra-domain choreography structure of the system consists of service controller, network controller and classifier. Expanding from single domain to multi-domain network environment, this paper adds distributed database. Moreover, a path choreography algorithm for multiple network security service controllers is proposed. The experimental results show that the proposed software- defined network security service choreography system can effectively protect the network in the multiple data center environment, which shows that the system is feasible in practical application.