首页 > 最新文献

2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)最新文献

英文 中文
Panel Discussions: The Impact of P4 on SDN/NFV 小组讨论:P4对SDN/NFV的影响
Timothy Culver, Krishna Kadiyala, F. Ozog, Roland Picard, Leo Popokh
Defined Networks: A Comprehensive Approach”
定义网络:综合方法”
{"title":"Panel Discussions: The Impact of P4 on SDN/NFV","authors":"Timothy Culver, Krishna Kadiyala, F. Ozog, Roland Picard, Leo Popokh","doi":"10.1109/nfv-sdn50289.2020.9289889","DOIUrl":"https://doi.org/10.1109/nfv-sdn50289.2020.9289889","url":null,"abstract":"Defined Networks: A Comprehensive Approach”","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"153 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123603255","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
DPDK-FQM: Framework for Queue Management Algorithms in DPDK DPDK- fqm: DPDK中队列管理算法框架
Archit Pandey, Gokul Bargaje, Avinash, Sanjana Krishnam, Tarun Anand, Leslie Monis, M. Tahiliani
The advantages of Network Function Virtualization (NFV) have attracted many use cases ranging from virtual Customer Premises Equipment (vCPE) to virtual Radio Access Network (vRAN) and virtual Evolved Packet Core (vEPC). Fast packet processing libraries such as Data Plane Development Kit (DPDK) are necessary to enable NFV. Currently, DPDK provides a framework for Quality of Service (QoS) which is used for queue management, traffic shaping and policing, but it lacks a general purpose queue management framework. In this paper, we propose DPDK-FQM, a framework to implement queue management algorithms in DPDK, run them and collect the desired statistics. Subsequently, we implement Proportional Integral controller Enhanced (PIE) and Controlled Delay (CoDel) queue management algorithms by using the proposed framework. We develop a new DPDK application to demonstrate the usage of APIs in DPDK-FQM, and verify the correctness of the framework and implementations of PIE and CoDel. Our experiments on a high speed network testbed show that PIE and CoDel exhibit their key characteristics by controlling the queue delay at a desired target, while fully utilizing the bottleneck bandwidth.
网络功能虚拟化(NFV)的优势吸引了许多用例,从虚拟客户端设备(vCPE)到虚拟无线接入网(vRAN)和虚拟演进分组核心(vEPC)。数据平面开发工具包(Data Plane Development Kit, DPDK)等快速数据包处理库是实现NFV的必要条件。目前,DPDK提供了用于队列管理、流量整形和监管的服务质量(QoS)框架,但缺乏通用的队列管理框架。在本文中,我们提出了DPDK- fqm框架来实现DPDK中的队列管理算法,并运行它们并收集所需的统计信息。随后,我们利用所提出的框架实现了比例积分控制器增强(PIE)和控制延迟(CoDel)队列管理算法。我们开发了一个新的DPDK应用程序来演示DPDK- fqm中api的使用,并验证了PIE和CoDel的框架和实现的正确性。我们在高速网络试验台上的实验表明,PIE和CoDel在充分利用瓶颈带宽的同时,能够在期望的目标上控制队列延迟,从而显示出它们的关键特性。
{"title":"DPDK-FQM: Framework for Queue Management Algorithms in DPDK","authors":"Archit Pandey, Gokul Bargaje, Avinash, Sanjana Krishnam, Tarun Anand, Leslie Monis, M. Tahiliani","doi":"10.1109/NFV-SDN50289.2020.9289914","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289914","url":null,"abstract":"The advantages of Network Function Virtualization (NFV) have attracted many use cases ranging from virtual Customer Premises Equipment (vCPE) to virtual Radio Access Network (vRAN) and virtual Evolved Packet Core (vEPC). Fast packet processing libraries such as Data Plane Development Kit (DPDK) are necessary to enable NFV. Currently, DPDK provides a framework for Quality of Service (QoS) which is used for queue management, traffic shaping and policing, but it lacks a general purpose queue management framework. In this paper, we propose DPDK-FQM, a framework to implement queue management algorithms in DPDK, run them and collect the desired statistics. Subsequently, we implement Proportional Integral controller Enhanced (PIE) and Controlled Delay (CoDel) queue management algorithms by using the proposed framework. We develop a new DPDK application to demonstrate the usage of APIs in DPDK-FQM, and verify the correctness of the framework and implementations of PIE and CoDel. Our experiments on a high speed network testbed show that PIE and CoDel exhibit their key characteristics by controlling the queue delay at a desired target, while fully utilizing the bottleneck bandwidth.","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121429448","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
PowerDPDK: Software-Based Real-Time Power Measurement for DPDK Applications PowerDPDK:基于软件的DPDK应用实时功率测量
Mishal Shah, Mehnaz Yunus, Pavan Vachhani, Leslie Monis, M. Tahiliani, B. Talawar
Data Plane Development Kit (DPDK) provides a set of libraries for fast packet processing that allow applications in the user space to directly interact with the NIC. Currently, DPDK provides a power management library that enables the applications to save power. However, it lacks features to effectively measure the power consumption of the system. In this paper we propose PowerDPDK, a software-based real-time library to measure the power consumption of DPDK applications. PowerDPDK leverages the Running Average Power Limit (RAPL) feature available on modern Intel processors to provide the power consumed by the CPU package and DRAM. We discuss the architecture of PowerDPDK and describe the process to incorporate it into DPDK applications. Subsequently, we use PowerDPDK to measure the power consumption of a few sample DPDK applications and a chain of Virtual Network Functions (VNFs) in OpenNetVM, a high-performance container-based platform for Network Function Virtualization (NFV). We show that a major share of the power consumed by DPDK is due to the use of Poll Mode Drivers (PMD), and hence, even a simple Layer 2 forwarding application consumes a large amount of power.
数据平面开发工具包(Data Plane Development Kit, DPDK)提供了一组用于快速数据包处理的库,允许用户空间中的应用程序直接与NIC交互。目前,DPDK提供了一个电源管理库,使应用程序能够节省电力。但缺乏有效测量系统功耗的特性。在本文中,我们提出了一个基于软件的实时库PowerDPDK来测量DPDK应用程序的功耗。PowerDPDK利用现代英特尔处理器上可用的运行平均功率限制(RAPL)功能来提供CPU封装和DRAM所消耗的功率。我们讨论了PowerDPDK的体系结构,并描述了将其合并到DPDK应用程序中的过程。随后,我们使用PowerDPDK来测量OpenNetVM中几个示例DPDK应用程序和虚拟网络功能链(VNFs)的功耗,OpenNetVM是一个基于高性能容器的网络功能虚拟化(NFV)平台。我们表明,DPDK消耗的大部分功率是由于使用了轮询模式驱动程序(PMD),因此,即使是简单的第二层转发应用程序也会消耗大量功率。
{"title":"PowerDPDK: Software-Based Real-Time Power Measurement for DPDK Applications","authors":"Mishal Shah, Mehnaz Yunus, Pavan Vachhani, Leslie Monis, M. Tahiliani, B. Talawar","doi":"10.1109/NFV-SDN50289.2020.9289896","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289896","url":null,"abstract":"Data Plane Development Kit (DPDK) provides a set of libraries for fast packet processing that allow applications in the user space to directly interact with the NIC. Currently, DPDK provides a power management library that enables the applications to save power. However, it lacks features to effectively measure the power consumption of the system. In this paper we propose PowerDPDK, a software-based real-time library to measure the power consumption of DPDK applications. PowerDPDK leverages the Running Average Power Limit (RAPL) feature available on modern Intel processors to provide the power consumed by the CPU package and DRAM. We discuss the architecture of PowerDPDK and describe the process to incorporate it into DPDK applications. Subsequently, we use PowerDPDK to measure the power consumption of a few sample DPDK applications and a chain of Virtual Network Functions (VNFs) in OpenNetVM, a high-performance container-based platform for Network Function Virtualization (NFV). We show that a major share of the power consumed by DPDK is due to the use of Poll Mode Drivers (PMD), and hence, even a simple Layer 2 forwarding application consumes a large amount of power.","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129269424","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
5G Network Slicing Enabling Edge Services 5G网络切片支持边缘服务
M. Kourtis, Themis Anagnostopoulos, S. Kukliński, M. Wierzbicki, Andreas Oikonomakis, G. Xilouris, I. Chochliouros, N. Yi, A. Kostopoulos, Lechosław Tomaszewski, Thanos Sarlas, H. Koumaras
Network slicing already plays an important role as a critical enabler in the current 5G technology domain. 5G aims to disrupt and accelerate innovation in various vertical fields, among those is the vehicular industry. In the detailed scope of the 5G-DRIVE research project promoting cooperation between the EU and China, a set of trials is to be undertaken towards promoting 5G growth. In this paper, initially, we identify a variety of challenges arising from the 5G convergence to the automotive industry. Then we describe the specific innovative framework of the 5G-DRIVE research, together with a novel network slicing mechanism deployed at the edge. Then an analysis on the corresponding architectures is presented, and how they operate in a set of trials for new 5G services. The services described are a virtualized caching network function (vCache), and a deep packet inspection one (vDPI), which are deployed at the edge facilitating an edge 5G service. For each case, the services are deployed and evaluated in the 5G Drive platform using the Katana slicing framework. Additional analysis of the OSM slicing platform is presented. The results demonstrate the performance of a network slicing mechanism for 5G service deployments in an edge enabled platform.
网络切片作为当前5G技术领域的关键推动者,已经发挥了重要作用。5G旨在颠覆和加速各个垂直领域的创新,其中包括汽车行业。在促进中欧合作的5G- drive研究项目的详细范围内,将开展一系列促进5G增长的试验。在本文中,我们首先确定了5G向汽车行业融合所带来的各种挑战。然后,我们描述了5G-DRIVE研究的具体创新框架,以及部署在边缘的新型网络切片机制。然后对相应的架构进行了分析,以及它们如何在一系列新的5G服务试验中运行。介绍部署在边缘的虚拟化缓存网络功能(vCache)和深度包检测功能(vDPI),实现边缘5G业务。对于每种情况,使用Katana切片框架在5G Drive平台中部署和评估服务。对OSM切片平台进行了进一步的分析。结果证明了在边缘支持平台中部署5G服务的网络切片机制的性能。
{"title":"5G Network Slicing Enabling Edge Services","authors":"M. Kourtis, Themis Anagnostopoulos, S. Kukliński, M. Wierzbicki, Andreas Oikonomakis, G. Xilouris, I. Chochliouros, N. Yi, A. Kostopoulos, Lechosław Tomaszewski, Thanos Sarlas, H. Koumaras","doi":"10.1109/NFV-SDN50289.2020.9289880","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289880","url":null,"abstract":"Network slicing already plays an important role as a critical enabler in the current 5G technology domain. 5G aims to disrupt and accelerate innovation in various vertical fields, among those is the vehicular industry. In the detailed scope of the 5G-DRIVE research project promoting cooperation between the EU and China, a set of trials is to be undertaken towards promoting 5G growth. In this paper, initially, we identify a variety of challenges arising from the 5G convergence to the automotive industry. Then we describe the specific innovative framework of the 5G-DRIVE research, together with a novel network slicing mechanism deployed at the edge. Then an analysis on the corresponding architectures is presented, and how they operate in a set of trials for new 5G services. The services described are a virtualized caching network function (vCache), and a deep packet inspection one (vDPI), which are deployed at the edge facilitating an edge 5G service. For each case, the services are deployed and evaluated in the 5G Drive platform using the Katana slicing framework. Additional analysis of the OSM slicing platform is presented. The results demonstrate the performance of a network slicing mechanism for 5G service deployments in an edge enabled platform.","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128653624","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 11
Using Linux TCP connection repair for mid-session endpoint handover: a security enhancement use-case 在会话中期端点切换中使用Linux TCP连接修复:一个安全增强用例
Vitor A. Cunha, Daniel Corujo, J. Barraca, R. Aguiar
Slice-based Network Control allows the delivery of different SLAs to heterogeneous services and the isolation of network flows, all within the same shared infrastructure. Industry 4.0 and the IoT are prime use-cases for Network Slicing and expose a large number of embedded systems that cannot run advanced anti-malware routines - this raises significant security concerns. An approach to defending against these issues is honeynets, isolated sandbox networks with decoy functions (honeypots) mimicking the real endpoints. However, steering an active TCP connection (i.e., the attack) to a different endpoint (i.e., the decoy) is still a significant challenge. This article proposes using the SDN controller to bootstrap a smooth handover of the active TCP session across endpoints. Our proposal's core is a purpose-built proxy function that will resume a live attack session with the decoy using the Linux Kernel's TCP-REPAIR features. Because we are effectively recreating the socket as if the connection was initially established with that new endpoint, all of the TCP state machine and control sequence inner-workings are still done seamlessly by the kernel's built-in routines and the higher-level abstractions that use them. The results show that our approach has a similar performance to a regular socket (latency and throughput), while the new management interfaces integrate nicely into the existing Network Slicing operations.
基于片的网络控制允许向异构服务交付不同的sla并隔离网络流,所有这些都在相同的共享基础设施中。工业4.0和物联网是网络切片的主要用例,并暴露了大量无法运行高级反恶意软件例程的嵌入式系统——这引发了重大的安全问题。防御这些问题的一种方法是蜜网,一种具有模拟真实端点的诱饵功能(蜜罐)的孤立沙盒网络。然而,将活动的TCP连接(即攻击)引导到不同的端点(即诱饵)仍然是一个重大挑战。本文建议使用SDN控制器引导活动TCP会话跨端点的平滑切换。我们提议的核心是一个专门构建的代理函数,它将使用Linux内核的TCP-REPAIR特性恢复带有诱饵的实时攻击会话。因为我们正在有效地重新创建套接字,就好像连接最初是用新端点建立的一样,所以所有TCP状态机和控制序列内部工作仍然由内核的内置例程和使用它们的高级抽象无缝地完成。结果表明,我们的方法具有与常规套接字相似的性能(延迟和吞吐量),而新的管理接口可以很好地集成到现有的网络切片操作中。
{"title":"Using Linux TCP connection repair for mid-session endpoint handover: a security enhancement use-case","authors":"Vitor A. Cunha, Daniel Corujo, J. Barraca, R. Aguiar","doi":"10.1109/NFV-SDN50289.2020.9289898","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289898","url":null,"abstract":"Slice-based Network Control allows the delivery of different SLAs to heterogeneous services and the isolation of network flows, all within the same shared infrastructure. Industry 4.0 and the IoT are prime use-cases for Network Slicing and expose a large number of embedded systems that cannot run advanced anti-malware routines - this raises significant security concerns. An approach to defending against these issues is honeynets, isolated sandbox networks with decoy functions (honeypots) mimicking the real endpoints. However, steering an active TCP connection (i.e., the attack) to a different endpoint (i.e., the decoy) is still a significant challenge. This article proposes using the SDN controller to bootstrap a smooth handover of the active TCP session across endpoints. Our proposal's core is a purpose-built proxy function that will resume a live attack session with the decoy using the Linux Kernel's TCP-REPAIR features. Because we are effectively recreating the socket as if the connection was initially established with that new endpoint, all of the TCP state machine and control sequence inner-workings are still done seamlessly by the kernel's built-in routines and the higher-level abstractions that use them. The results show that our approach has a similar performance to a regular socket (latency and throughput), while the new management interfaces integrate nicely into the existing Network Slicing operations.","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126587563","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Deep Learning-based Slow DDoS Attack Detection in SDN-based Networks 基于sdn网络的深度学习慢速DDoS攻击检测
Beny Nugraha, Rathan Narasimha Murthy
Software-Defined Networking (SDN) is a promising networking paradigm that provides outstanding manageability, scalability, controllability, and flexibility. Despite having such promising features, SDN is not intrinsically secure. For instance, it still suffers from Denial of Service (DDoS) attacks, which is one of the major threats that compromise the availability of the network. One type of DDoS attacks, that is considered as one of the most challenging to be detected, are slow DDoS attacks. In recent years, deep learning algorithms have been applied for reliable and highly accurate traffic anomaly detection. Therefore, in this paper, we propose the use of a hybrid Convolutional Neural Network-Long-Short Term Memory (CNN-LSTM) model to detect slow DDoS attacks in SDN-based networks. The performance of this method is evaluated based on custom datasets. The obtained results are quite impressive - all considered performance metrics are above 99%. Our hybrid CNN-LSTM model also outperforms other deep learning models like MultiLayer Perceptron (MLP) and standard machine learning models like l-Class Support Vector Machines (l-Class SVM).
软件定义网络(SDN)是一种很有前途的网络范例,它提供了出色的可管理性、可伸缩性、可控性和灵活性。尽管有这些很有前途的特性,SDN本质上并不安全。例如,它仍然遭受拒绝服务(DDoS)攻击,这是危及网络可用性的主要威胁之一。有一种类型的DDoS攻击被认为是最具挑战性的检测之一,即慢速DDoS攻击。近年来,深度学习算法已被应用于可靠、高精度的流量异常检测。因此,在本文中,我们提出使用混合卷积神经网络-长短期记忆(CNN-LSTM)模型来检测基于sdn的网络中的慢速DDoS攻击。基于自定义数据集评估了该方法的性能。获得的结果非常令人印象深刻——所有考虑的性能指标都在99%以上。我们的混合CNN-LSTM模型也优于其他深度学习模型,如多层感知器(MLP)和标准机器学习模型,如l-Class支持向量机(l-Class SVM)。
{"title":"Deep Learning-based Slow DDoS Attack Detection in SDN-based Networks","authors":"Beny Nugraha, Rathan Narasimha Murthy","doi":"10.1109/NFV-SDN50289.2020.9289894","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289894","url":null,"abstract":"Software-Defined Networking (SDN) is a promising networking paradigm that provides outstanding manageability, scalability, controllability, and flexibility. Despite having such promising features, SDN is not intrinsically secure. For instance, it still suffers from Denial of Service (DDoS) attacks, which is one of the major threats that compromise the availability of the network. One type of DDoS attacks, that is considered as one of the most challenging to be detected, are slow DDoS attacks. In recent years, deep learning algorithms have been applied for reliable and highly accurate traffic anomaly detection. Therefore, in this paper, we propose the use of a hybrid Convolutional Neural Network-Long-Short Term Memory (CNN-LSTM) model to detect slow DDoS attacks in SDN-based networks. The performance of this method is evaluated based on custom datasets. The obtained results are quite impressive - all considered performance metrics are above 99%. Our hybrid CNN-LSTM model also outperforms other deep learning models like MultiLayer Perceptron (MLP) and standard machine learning models like l-Class Support Vector Machines (l-Class SVM).","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"47 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133326479","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 30
GANSO: Automate Network Slicing at the Transport Network Interconnecting the Edge GANSO:在连接边缘的传输网络上自动进行网络切片
José Takeru Infiesta, Carlos Guimarães, L. Contreras, A. D. Oliva
5G and Edge computing are two technologies set to impose a paradigm shift from today's traditional networking solutions. In particular, transport networks, which connect distinct computing infrastructures, must guarantee a wide range of performance requirements from coexisting network services. 5G network slicing enables such capability by providing the flexibility to support multiple and isolated virtual networks over the same and shared infrastructure. This paper introduces the GST And Network Slice Operator (GANSO) framework for automating the creation of network slices over SDN architectures, focusing on transport networks interconnecting Edge data centers. To characterise the type of network slice to be deployed, it uses Generic network Slice Templates (GSTs). Initially, five GST attributes are implemented in a proof-of-concept prototype, namely through configurable User Data Access and Rate Limit parameters. It is then validated in a scenario considering the instantiation of network slices over the transport network for different virtual applications hosted across the edge-to-cloud continuum.
5G和边缘计算是两种技术,旨在实现当今传统网络解决方案的范式转变。特别是,连接不同计算基础设施的传输网络必须保证来自共存网络服务的广泛性能需求。5G网络切片通过提供在相同和共享的基础设施上支持多个和隔离的虚拟网络的灵活性来实现这种功能。本文介绍了GST和网络切片运营商(GANSO)框架,用于在SDN架构上自动化创建网络切片,重点是连接边缘数据中心的传输网络。为了描述要部署的网络切片的类型,它使用通用网络切片模板(gst)。最初,五个GST属性在概念验证原型中实现,即通过可配置的用户数据访问和速率限制参数。然后在考虑跨边缘到云连续体托管的不同虚拟应用程序在传输网络上的网络切片实例化的场景中对其进行验证。
{"title":"GANSO: Automate Network Slicing at the Transport Network Interconnecting the Edge","authors":"José Takeru Infiesta, Carlos Guimarães, L. Contreras, A. D. Oliva","doi":"10.1109/NFV-SDN50289.2020.9289875","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289875","url":null,"abstract":"5G and Edge computing are two technologies set to impose a paradigm shift from today's traditional networking solutions. In particular, transport networks, which connect distinct computing infrastructures, must guarantee a wide range of performance requirements from coexisting network services. 5G network slicing enables such capability by providing the flexibility to support multiple and isolated virtual networks over the same and shared infrastructure. This paper introduces the GST And Network Slice Operator (GANSO) framework for automating the creation of network slices over SDN architectures, focusing on transport networks interconnecting Edge data centers. To characterise the type of network slice to be deployed, it uses Generic network Slice Templates (GSTs). Initially, five GST attributes are implemented in a proof-of-concept prototype, namely through configurable User Data Access and Rate Limit parameters. It is then validated in a scenario considering the instantiation of network slices over the transport network for different virtual applications hosted across the edge-to-cloud continuum.","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"67 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132281536","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
Enhancing Performance, Security, and Management in Network Function Virtualization 增强网络功能虚拟化的性能、安全性和管理能力
Yang Zhang, Zhi-Li Zhang
In an era of ubiquitous connectivity, various new applications, network protocols, and online services (e.g., cloud services, distributed machine learning, cryptocurrency) have been constantly creating, underpinning many of our daily activities. Emerging demands for networks have led to growing traffic volume and complexity of modern networks, which heavily rely on a wide spectrum of specialized network functions (e.g., Firewall, Load Balancer) for diverse purposes. Although these (virtual) network functions (VNFs) are widely deployed, they are instantiated in an uncoordinated manner failing to meet growing demands of evolving networks. In this dissertation, we argue that networks equipped with VNFs can be designed in a fashion similar to how computer software is programmed today. By following the blueprint of modularization, networks can be made more efficient, secure, and manageable.
在一个无处不在的连接时代,各种新的应用程序、网络协议和在线服务(例如云服务、分布式机器学习、加密货币)一直在不断创造,支撑着我们的许多日常活动。对网络的新需求导致了通信量的增长和现代网络的复杂性,这在很大程度上依赖于广泛的专业网络功能(例如,防火墙,负载平衡器)来实现各种目的。尽管这些(虚拟)网络功能(vnf)被广泛部署,但它们的实例化方式不协调,无法满足不断发展的网络日益增长的需求。在本文中,我们认为配备VNFs的网络可以以类似于当今计算机软件编程的方式进行设计。遵循模块化的蓝图,可以提高网络的效率、安全性和可管理性。
{"title":"Enhancing Performance, Security, and Management in Network Function Virtualization","authors":"Yang Zhang, Zhi-Li Zhang","doi":"10.1109/NFV-SDN50289.2020.9289888","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289888","url":null,"abstract":"In an era of ubiquitous connectivity, various new applications, network protocols, and online services (e.g., cloud services, distributed machine learning, cryptocurrency) have been constantly creating, underpinning many of our daily activities. Emerging demands for networks have led to growing traffic volume and complexity of modern networks, which heavily rely on a wide spectrum of specialized network functions (e.g., Firewall, Load Balancer) for diverse purposes. Although these (virtual) network functions (VNFs) are widely deployed, they are instantiated in an uncoordinated manner failing to meet growing demands of evolving networks. In this dissertation, we argue that networks equipped with VNFs can be designed in a fashion similar to how computer software is programmed today. By following the blueprint of modularization, networks can be made more efficient, secure, and manageable.","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114580517","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Incremental Deployment of Hybrid IP/SDN Network with Optimized Traffic Engineering 基于优化流量工程的IP/SDN混合网络增量部署
Ali Kelkawi, Ameer Mohammed, Anwar Alyatama
The recent introduction of Software Defined Networks (SDN) into the traditional networking paradigm to create hybrid SDN networks brings with it several economical, technical and organizational challenges which must be addressed. In deploying hybrid SDN networks, the maintenance of numerous factors is taken into consideration such as throughput, network traffic, load balancing and fast failure recovery. One strategy that has been suggested is the incremental deployment of SDN controllers alongside legacy networking systems to reap the benefits of both paradigms while minimizing disruptions to networking services and maintaining network performance from the perspective of traffic engineering. In this paper, we seek to explore an optimal incremental deployment sequence of legacy networking devices to programmable SDN switches based on traffic engineering measures, namely minimizing maximum link utilization, thus determining the most suitable devices to migrate. A combination of two metaheuristics algorithms (Particle Swarm Optimization and Ant Colony Optimization) are implemented to identify this optimal sequence in terms of the locations of routers to be migrated along with the optimal weight setting and flow split ratios at each stage of migration. The deployment sequence is simulated and compared with static migration algorithms for evaluation.
最近,软件定义网络(SDN)被引入到传统的网络范式中,以创建混合SDN网络,这带来了一些必须解决的经济、技术和组织方面的挑战。在部署混合SDN网络时,需要考虑吞吐量、网络流量、负载均衡和快速故障恢复等诸多因素的维护。已经提出的一种策略是在遗留网络系统的基础上逐步部署SDN控制器,以获得两种模式的好处,同时最大限度地减少对网络服务的中断,并从流量工程的角度保持网络性能。在本文中,我们试图探索基于流量工程措施的传统网络设备到可编程SDN交换机的最佳增量部署顺序,即最小化最大链路利用率,从而确定最适合迁移的设备。结合两种元启发式算法(粒子群优化算法和蚁群优化算法),根据要迁移的路由器的位置以及迁移每个阶段的最佳权重设置和流量分割比率来确定该最优序列。对部署顺序进行了仿真,并与静态迁移算法进行了比较。
{"title":"Incremental Deployment of Hybrid IP/SDN Network with Optimized Traffic Engineering","authors":"Ali Kelkawi, Ameer Mohammed, Anwar Alyatama","doi":"10.1109/NFV-SDN50289.2020.9289859","DOIUrl":"https://doi.org/10.1109/NFV-SDN50289.2020.9289859","url":null,"abstract":"The recent introduction of Software Defined Networks (SDN) into the traditional networking paradigm to create hybrid SDN networks brings with it several economical, technical and organizational challenges which must be addressed. In deploying hybrid SDN networks, the maintenance of numerous factors is taken into consideration such as throughput, network traffic, load balancing and fast failure recovery. One strategy that has been suggested is the incremental deployment of SDN controllers alongside legacy networking systems to reap the benefits of both paradigms while minimizing disruptions to networking services and maintaining network performance from the perspective of traffic engineering. In this paper, we seek to explore an optimal incremental deployment sequence of legacy networking devices to programmable SDN switches based on traffic engineering measures, namely minimizing maximum link utilization, thus determining the most suitable devices to migrate. A combination of two metaheuristics algorithms (Particle Swarm Optimization and Ant Colony Optimization) are implemented to identify this optimal sequence in terms of the locations of routers to be migrated along with the optimal weight setting and flow split ratios at each stage of migration. The deployment sequence is simulated and compared with static migration algorithms for evaluation.","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"60 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114718512","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
[Copyright notice] (版权)
{"title":"[Copyright notice]","authors":"","doi":"10.1109/nfv-sdn50289.2020.9289853","DOIUrl":"https://doi.org/10.1109/nfv-sdn50289.2020.9289853","url":null,"abstract":"","PeriodicalId":283280,"journal":{"name":"2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128651449","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
期刊
2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1