2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)最新文献_第2页

Pairing SDN with network virtualization: The network hypervisor placement problem 将SDN与网络虚拟化配对:网络管理程序的放置问题

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387427

Andreas Blenk, A. Basta, Johannes Zerwas, W. Kellerer

{"title":"Pairing SDN with network virtualization: The network hypervisor placement problem","authors":"Andreas Blenk, A. Basta, Johannes Zerwas, W. Kellerer","doi":"10.1109/NFV-SDN.2015.7387427","DOIUrl":"https://doi.org/10.1109/NFV-SDN.2015.7387427","url":null,"abstract":"A network virtualization hypervisor for Software Defined Networking (SDN) is the essential component for the realization of virtual SDN networks (vSDNs). Virtualizing software defined networks enables tenants to bring their own SDN controllers in order to individually program the network control of their virtual SDN networks. A hypervisor acts as an intermediate layer between the tenant SDN controllers and their respective virtual SDN networks. The hypervisor consists of the network functions that are necessary for virtualization, e.g., translation or isolation functions. For scalability, the hypervisor can be realized via multiple physically distributed instances each hosting the needed virtualization functions. In this way, the physical locations of the instances, which realize the hypervisor, may impact the overall performance of the virtual SDN networks. Network virtualization adds new dimensions to the general SDN controller placement problem. This paper initiates the study of the network hypervisor placement problem (HPP). The HPP targets the following questions: How many hypervisor instances are needed? Where should the hypervisor instances be placed in the network? For our study of the HPP, we provide a mathematical model that solves the HPP for a case where node and link capacity constraints are not considered. We propose four latency metrics for optimizing placement solutions based on our model for vSDNs. Covering a real network topology, our evaluation quantifies the trade-offs between the new metrics when used as objectives. Furthermore, we analyze the impact of the physical network topology on the optimization results and identify potentials for improvement, e.g., in terms of runtime.","PeriodicalId":315251,"journal":{"name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","volume":"247 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117133169","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 34

NFShunt: A Linux firewall with OpenFlow-enabled hardware bypass NFShunt:一种Linux防火墙，支持openflow硬件旁路

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387413

S. Miteff, S. Hazelhurst

{"title":"NFShunt: A Linux firewall with OpenFlow-enabled hardware bypass","authors":"S. Miteff, S. Hazelhurst","doi":"10.1109/NFV-SDN.2015.7387413","DOIUrl":"https://doi.org/10.1109/NFV-SDN.2015.7387413","url":null,"abstract":"Data-intensive research computing requires the capability to transfer files over long distances at high throughput. Stateful firewalls introduce sufficient packet loss to prevent researchers from fully exploiting high bandwidth-delay network links. To work around this challenge, the Science DMZ design trades off stateful packet filtering capability for loss-free forwarding via an ordinary Ethernet switch [1]. We propose a novel extension to the Science DMZ design, which uses an SDN-based firewall. This paper introduces NFShunt, a firewall based on Linux's Netfilter combined with OpenFlow switching. Implemented as an OpenFlow 1.0 controller coupled to Netfilter's connection tracking, NFShunt allows the bypass-switching policy to be expressed as part of an iptables firewall rule-set. Our implementation is described in detail, and latency of the control-plane mechanism is reported. TCP throughput and packet loss is shown at various round-trip latencies, with comparisons to pure switching, as well as to a high-end Cisco firewall. The results support reported observations regarding firewall introduced packet-loss, and indicate that the SDN design of NFShunt is a viable approach to enhancing a traditional firewall to meet the performance needs of data-intensive researchers.","PeriodicalId":315251,"journal":{"name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","volume":"161 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124516680","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 14

Update consistency in software-defined networking based multicast networks 基于多播网络的软件定义网络更新一致性研究

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387424

T. Kohler, Frank Dürr, K. Rothermel

{"title":"Update consistency in software-defined networking based multicast networks","authors":"T. Kohler, Frank Dürr, K. Rothermel","doi":"10.1109/NFV-SDN.2015.7387424","DOIUrl":"https://doi.org/10.1109/NFV-SDN.2015.7387424","url":null,"abstract":"When applying updates on distributed network elements with SDN, intra-update states may violate desired network properties, such as drop- and loop-freeness. Current stateless approaches cannot guarantee the constancy of arbitrary network invariants (correctness) in general, yet update procedures guaranteeing certain invariants do exist. In this paper, we investigate on update consistency for the case of multicast routing and show that there is no correct update procedure w.r.t. both drop- and duplicate-freeness. We show that certain updates of multicast routes inherently raise a concurrency issue, which necessarily results in the occurrence of either drops or duplicates. Furthermore, we present a generic update procedure for multicast routing updates that identifies concurrency-relevant update steps. This procedure allows for the selection of an update strategy, such that either drops or duplicates are avoided. These effects can severely degrade network performance or quality of experience. To investigate the implications of drops and duplicates, we evaluate their frequencies and impact for wide-area network scenarios both, analytically and empirically, through direct measurement in the data plane under update.","PeriodicalId":315251,"journal":{"name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","volume":"88 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125666762","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls VNGuard:一个NFV/SDN组合框架，用于发放和管理虚拟防火墙

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387414

Juan Deng, Hongxin Hu, Hongda Li, Zhizhong Pan, Kuang-Ching Wang, Gail-Joon Ahn, J. Bi, Younghee Park

{"title":"VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls","authors":"Juan Deng, Hongxin Hu, Hongda Li, Zhizhong Pan, Kuang-Ching Wang, Gail-Joon Ahn, J. Bi, Younghee Park","doi":"10.1109/NFV-SDN.2015.7387414","DOIUrl":"https://doi.org/10.1109/NFV-SDN.2015.7387414","url":null,"abstract":"Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.","PeriodicalId":315251,"journal":{"name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126937475","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 45

Mobile cloud networking: From cloud, through NFV and beyond 移动云网络:从云，通过NFV和超越

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387392

G. Carella, A. Edmonds, Florian Dudouet, M. Corici, B. Sousa, F. Z. Yousaf

引用次数: 11

Latency and policy aware hierarchical partitioning for NFV systems NFV系统的延迟和策略感知分层分区

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387428

D. Krishnaswamy, Ravina Kothari, Vijay Gabale

引用次数: 12

SDN-based resilience for smart grid communications 基于sdn的智能电网通信弹性

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387401

Abdullah Aydeger, K. Akkaya, A. Uluagac

引用次数: 26

Scalability analysis and flow admission control in mininet-based SDN environment 基于小网络的SDN环境下的可扩展性分析与流量接纳控制

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387396

Müge Erel, E. Teoman, Yusuf Özçevik, Gokhan Secinti, B. Canberk

引用次数: 29

SnabbSwitch user space virtual switch benchmark and performance optimization for NFV SnabbSwitch用户空间虚拟交换机NFV基准测试和性能优化

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387411

Michele Paolino, Nikolay Nikolaev, J. Fanguede, D. Raho

{"title":"SnabbSwitch user space virtual switch benchmark and performance optimization for NFV","authors":"Michele Paolino, Nikolay Nikolaev, J. Fanguede, D. Raho","doi":"10.1109/NFV-SDN.2015.7387411","DOIUrl":"https://doi.org/10.1109/NFV-SDN.2015.7387411","url":null,"abstract":"New paradigms in networking industry, such as Software Defined Networking (SDN) and Network Functions Virtualization (NFV), require the hypervisors to enable the execution of Virtual Network Functions in virtual machines (VMs). In this context, the virtual switch function is critical to achieve carrier grade performance, hardware independence, advanced features and programmability. SnabbSwitch is a virtual switch designed to run in user space with carrier grade performance targets, based on an efficient architecture which has driven the development of vhost-user (now also adopted by OVS-DPDK, the user space implementation of OVS based on Intel DPDK), easy to deploy and to program through its Lua scripting layer. This paper presents the SnabbSwitch virtual switch implementation along with its novelties (the vhost-user implementation and the usage of a trace compiler) and code optimizations, which have been merged in the mainline project repository. Extensive benchmarking activities, whose results are included in this paper, have been carried on to compare SnabbSwitch with other virtual switching solutions (i.e., OVS, OVS-DPDK, Linux Bridge, VFIO and SR-IOV). These results show that SnabbSwitch performs as well as hardware based solutions, such as SR-IOV and VFIO, while allowing for additional functional and flexible operation; they show also that SnabbSwitch is faster than the vhost-user based version (user space) of OVS-DPDK.","PeriodicalId":315251,"journal":{"name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","volume":"87 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121420576","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 44

Dynamic virtual network configuration between containers using physical switch functions for NFV infrastructure 使用NFV基础设施的物理交换功能的容器之间的动态虚拟网络配置

2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN) Pub Date : 2015-11-01 DOI: 10.1109/NFV-SDN.2015.7387421

Yukihiro Nakagawa, Chunghan Lee, Kazuki Hyoudou, Shinji Kobayashi, Osamu Shiraki, J. Tanaka, T. Ishihara

{"title":"Dynamic virtual network configuration between containers using physical switch functions for NFV infrastructure","authors":"Yukihiro Nakagawa, Chunghan Lee, Kazuki Hyoudou, Shinji Kobayashi, Osamu Shiraki, J. Tanaka, T. Ishihara","doi":"10.1109/NFV-SDN.2015.7387421","DOIUrl":"https://doi.org/10.1109/NFV-SDN.2015.7387421","url":null,"abstract":"Container-based virtualization simplifies the deployment of applications and will have a significant impact on the future of data center networks. In an NFV infrastructure, it is required to dynamically extend/reduce resources granted to the virtual network function (VNF) as needed. In this paper, we explored SDN technology to construct lightweight virtual networks between Linux containers in dynamic container placement to isolate tenant traffic. We used an SDN controller to distribute logical endpoint information to physical switches before the host physical location was determined for the container. And we used physical switch functions to promptly configure virtual networks between containers when a container was dynamically placed on a host and started in a split second. We also actively probed the container and automatically removed the virtual network when the container stopped. By using our prototype, virtual networks were automatically constructed with no interaction with the SDN controller as soon as 500 of the containers were started.","PeriodicalId":315251,"journal":{"name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","volume":"102 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115447051","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11