春风十里不如你 —— Taozi - karaf https://xiongan.host/index.php/tag/karaf/ 【SDN】防DDoS攻击应用开发 https://xiongan.host/index.php/archives/204/ 2023-05-06T20:34:03+08:00 防DDoS攻击SDN应用开发基础环境Opendaylight + Mininet (安装好karaf等组件)Open vSwitch 2.3.1实验步骤查看控制器ip和交换机的连接状态登录控制器,查看端口是否处于监听状态netstat -an|grep 6633登录交换机,查看交换机与控制器的连接情况root@guest-virtual-machine:/home/guest# ovs-vsctl show 2e6efe16-6875-4feb-8451-7da554fbd3c8   ovs_version: "2.0.2" //以上是交换机与控制器未连接成功,需要手动连接,显示以下的“is_connected:true” root@guest-virtual-machine:/home/guest# ovs-vsctl add-br br-sw root@guest-virtual-machine:/home/guest# ovs-vsctl set-controller br-sw tcp:192.168.123.10:6633 root@guest-virtual-machine:/home/guest# ovs-vsctl show登陆主机,查看主机与控制器连接情况,如果没连接,需要手动连接登录交换机,连接控制器(基于OVSDB协议创建一个新的连接)ovs-vsctl set-manager tcp:192.168.123.10:6640安装sFlow将sFlow安装包上传至控制器,并解压登录交换机,部署sFlow Agentovs-vsctl -- --id=@sflow create sflow agent=s1 target=\"192.168.123.10:6633\" header=128 sampling=10 polling=1 -- set bridge br-sw sflow=@sflow查看已配置的sFlow Agent信息ovs-vsctl list sflow登录控制器,启动sFlow验证防DDoS攻击打开浏览器,查看状态http://192.168.123.10:8008/html/index.html#status 【OpenDaylight】Karaf的使用 https://xiongan.host/index.php/archives/193/ 2023-03-24T11:20:00+08:00 Karaf使用ssh可能会连接不上,需要配置本地VM8的网卡,或者ssh,推荐下面方法vi /etc/ssh/sshd_config //最后添加一行 PermitRootLogin yes //保存后重启服务器即可用远程工具连接Ubuntu主机首先连接虚拟机上传安装包,解压缩并进入目录中,启动控制台root@guest-virtual-machine:/home/guest# tar -zxvf distribution-karaf-0.3.0-Lithium.tar.gz root@guest-virtual-machine:/home/guest# cd distribution-karaf-0.3.0-Lithium //启动一(不推荐) root@guest-virtual-machine:/home/guest# ./bin/karaf //启动二(后台运行) root@guest-virtual-machine:/home/guest/distribution-karaf-0.3.0-Lithium# ./bin/start root@guest-virtual-machine:/home/guest/distribution-karaf-0.3.0-Lithium# ./bin/client -u karaf安装opendaylight组件//安装REST API功能 opendaylight-user@root>feature:install odl-restconf //安装L2交换机和OpenFlow功能 opendaylight-user@root>feature:install odl-l2switch-switch-ui opendaylight-user@root>feature:install odl-openflowplugin-flow-services-ui //安装Karaf控制台的md-sal功能 opendaylight-user@root>feature:install odl-mdsal-apidocs //安装DLUX功能 0.3.0无需安装,0.6.0可以安装 //opendaylight-user@root>feature:install odl-dluxapps-applications //opendaylight-user@root>feature:install odl-faas-all //列出所有组件 opendaylight-user@root>feature:list验证opendaylight功能首先查看ip地址:连接控制器root@guest-virtual-machine:/home/guest# mn --controller=remote,ip=192.168.123.10,port=6633mininet> pingall *** Ping: testing ping reachability h1 -> h2 h2 -> h1 *** Results: 0% dropped (2/2 received)访问web控制器(账号密码admin)卸载opendaylight组件opendaylight-user@root>logoutlogout退出,回到上一目录中root@guest-virtual-machine:/home/guest/distribution-karaf-0.3.0-Lithium# rm -rf data root@guest-virtual-machine:/home/guest/distribution-karaf-0.3.0-Lithium# ./bin/karaf clean opendaylight-user@root>feature:list -i查看已安装组件,确认已卸载