Design of a Soft Isolation Mechanism for Kubernetes-Based Multi-Tenant NFV Platform

Abstract

Network slicing as a core concept in 5G mobile networks can meets today's diverse mobile network service usage scenarios through virtualization technology. In addition, the network slice management system can provide multiple tenants to manage the lifecycle of 5G network slices. However, when running network slices in an unsecured environment, attackers can illegally break into network slices and steal network service information through security vulnerabilities. And, attackers can even threaten network slices that are not fully isolated from each other, creating security concerns. In order to prevent security risks to the users of network slice management system and to implement multi-tenant management,a soft isolation mechanism between network slices based on Kubernetes-based NFV MANO system is designed to avoid the above problems and achieve the availability and security of network slices.