network function virtualization (NFV) is promising to lower the network operator's capital expenditure and operational expenditure by replacing proprietary hardware-based network equipment with software-based virt...
详细信息
ISBN:
(纸本)9781509013289
network function virtualization (NFV) is promising to lower the network operator's capital expenditure and operational expenditure by replacing proprietary hardware-based network equipment with software-based virtual networkfunctions that can be consolidated into telecom clouds. In particular, NFV provides an efficient way to deploy network services using service function chains that consist of a set of virtual networkfunctions interconnected by virtual links. A practical and yet theoretically challenging issue related to NFV Management and Orchestration is how to jointly optimize the topology design and mapping of multiple service function chains, which is called the JTDM problem. In this paper, we develop an Integer Linear Programming (ILP) model to formulate the JTDM problem with the objective of minimizing the bandwidth consumption in the physical substrate. We propose a novel heuristic algorithm, namely Closed-loop with Critical Mapping Feedback (CCMF), to efficiently address this problem. Through comprehensive simulations, we demonstrate that the CCMF algorithm is efficient in terms of the bandwidth consumption in various scenarios, and can achieve a bandwidth consumption that is close to the minimum obtained by ILP.
The mass popularization of telecommunication services has led to a heavily loaded Signaling System No. 7 (SS7) network. SS7 was originally well protected because the communication networks were controlled by trusted s...
详细信息
ISBN:
(纸本)9781538635643
The mass popularization of telecommunication services has led to a heavily loaded Signaling System No. 7 (SS7) network. SS7 was originally well protected because the communication networks were controlled by trusted state-owned telecom operators. Switching to the IP technology and deregulation has made it fairly easy for third parties to gain access to the once protected SS7 network. For many vendors, Signaling Transfer Points (STPs) have already evolved from TDM (Time Division Multiplexing) proprietary hardware to an IP proprietary hardware solution. So the next step is moving to a virtualized solution such as network function virtualization (NFV). The intersection of SS7 and NFV has also introduced several new security challenges. In this work, we present the vulnerabilities of SS7 messages to cyber-attacks in a virtualized environment. A network simulation model under SS7 attack is developed. In order to mitigate these attacks machine learning techniques are applied to the gathered network traffic.
The high reconfiguration time of virtualised networks led to the definition of allocation procedures based on the prediction of the processing resources required. We propose an Artificial Intelligence-based resource a...
详细信息
ISBN:
(纸本)9781665423830
The high reconfiguration time of virtualised networks led to the definition of allocation procedures based on the prediction of the processing resources required. We propose an Artificial Intelligence-based resource allocation procedure in which the use of processing resources is monitored and the resources to be allocated are accordingly predicted. We evaluate the impact on the costs of the proposed allocation procedure and show that the cost increase is limited with respect to the case of exact knowledge of the needed processing resources.
By allowing networkfunctions to be virtualized and run on commodity hardware, NFV enables new properties (e.g., elastic scaling), and new service models for Service Providers, Enterprises, and Telecommunication Servi...
详细信息
ISBN:
(纸本)9783901882760
By allowing networkfunctions to be virtualized and run on commodity hardware, NFV enables new properties (e.g., elastic scaling), and new service models for Service Providers, Enterprises, and Telecommunication Service Providers. However, for NFV to be offered as a service, several research problems still need to be addressed. In this paper, we focus and propose a new service chaining algorithm. Existing solutions suffer two main limitations: First, existing proposals often rely on mixed Integer Linear Programming to optimize VM allocation and network management, but our experiments show that such approach is too slow taking hours to find a solution. Second, although existing proposals have considered the VM placement and network configuration jointly, they frequently assume the network configuration cannot be changed. Instead, we believe that both computing and network resources should be able to be updated concurrently for increased flexibility and to satisfy SLA and Qos requirements. As such, we formulate and propose a Genetic Algorithm based approach to solve the VM allocation and network management problem. We built an experimental NFV platform, and run a set of experiments. The results show that our proposed GA approach can compute configurations to to three orders of magnitude faster than traditional solutions.
Software Defined networks (SDN) and network function virtualization (NFV) are the two emerging paradigms in networking. The control plane is physically separated from the forwarding plane and logically centralized in ...
详细信息
ISBN:
(纸本)9781351124140;9780815357605
Software Defined networks (SDN) and network function virtualization (NFV) are the two emerging paradigms in networking. The control plane is physically separated from the forwarding plane and logically centralized in the SDN architecture. SDN overcomes many limitations in traditional network infrastructures by separating the network's control plane from the routers and switches. With the decoupling of control plane and data plane, the entire network is controlled by a centralized controller and network switches become simple forwarding devices. NFV is the initiation to give a virtualized platform to the network which is presently carried out by proprietary hardware. The NFV concept was introduced to increase the feasibility and scalability of networks. This paper mainly focuses on the research opportunities and challenges in the control plane and data plane in SDN and NFV.
virtualization environments offer interesting advantages for Industrial Control Systems (ICS), including being a tool to manage cybersecurity of such systems and a backup tool to control or optimize system behavior. N...
详细信息
ISBN:
(纸本)9781728195414
virtualization environments offer interesting advantages for Industrial Control Systems (ICS), including being a tool to manage cybersecurity of such systems and a backup tool to control or optimize system behavior. Nevertheless, such virtual environments will likely be shared by different parties that have different access control requirements. In this paper, we discuss architecture and capabilities of virtualized ICS, and provide an analysis of an access control framework for ICS systems. We also present a language to define access control policies for virtualized ICS and developed an open source proof of concept implemented in OpenStack.
In the network function virtualization (NFV) architecture, network Service Chaining (NSC) is consisted in a certain order of network elements so that it can provide flexible network services to users. Due to the compl...
详细信息
ISBN:
(纸本)9781479980062
In the network function virtualization (NFV) architecture, network Service Chaining (NSC) is consisted in a certain order of network elements so that it can provide flexible network services to users. Due to the complexity of network infrastructure, creating a service chain requires high operation cost especially in carrier-grade network service providers and supporting stringent QoS requirements is also a challenge. Although several vendors provide various solutions for the NSC, there is only few information and the detailed algorithm or implementation logic is hidden. This paper presents an NSC algorithm in NFV that assures QoS from the perspective of service providers. In order to formulate NSC path selection problem, we apply the NP complete genetic algorithm. The evaluation results show that the proposed algorithm minimizes the operation cost of service providers by approximately 10.6% while the requested QoS targets is not violated.
The economies of scale afforded by cloud computing has been a driving force behind the rapid development and deployment of new cloud-based network applications and services. With the massive growth of IoT devices, we ...
详细信息
ISBN:
(纸本)9781538611012
The economies of scale afforded by cloud computing has been a driving force behind the rapid development and deployment of new cloud-based network applications and services. With the massive growth of IoT devices, we expect a sharp rise in the volume of traffic seen going to and coming from cloud datacenters, which will continue to grow over the next several years. network function virtualization (NFV) is a recent concept which promises to grant network operators the required flexibility to quickly develop and provision new networkfunctions and services in the cloud. As NFV is agnostic to the computing resource, we foresee scenarios where unconventional resources such as FPGAs and GPUs will be of benefit. To this end, we present an architecture based on Software-Defined Infrastructure (SDI) which offers an abstracted control and management interface over virtualized heterogeneous resources in the cloud. Through a unified set of APIs, this architecture enables both application developers and network operators to dynamically deploy and manage new services in the cloud alongside the underlying network that interconnects them, all in a fully software-defined manner. We demonstrate and evaluate an implementation of our NFV-enablement architecture using the SAVI testbed, a multi-tier and SDN-enabled cloud containing virtualized heterogeneous compute resources.
In network function virtualization (NFV), the customer may request a set of virtual networkfunctions (VNFs) that the customer traffic will go through. To accommodate such requests, the service providers have to embed...
详细信息
ISBN:
(纸本)9781728181042
In network function virtualization (NFV), the customer may request a set of virtual networkfunctions (VNFs) that the customer traffic will go through. To accommodate such requests, the service providers have to embed the requested VNFs onto the substrate network (SN) to form an actual traffic forwarding path called service function path (SFP). In the elastic optical network (EON), how to protect the running network services against VNF failures becomes an attractive research focus. Most existing work concentrates on the protection or restoration of the physical node or fiber link failures in the SN. Few research attention has been paid to the failure of the virtual machines running a VNF. In this paper, we study how to protect VNFs when a VNF failure occurs in an EON. We define a new VNF failure protection cover (VFPC) problem and mathematically formulate VFPC. We propose a protection cover list based VNF protection (PCL-VP) algorithm against any single VNF failure while satisfying the latency requirement. Extensive simulations and analysis show the effectiveness of the proposed algorithm.
networkfunctions (NFs) in edge clouds are required to provide scalability, fault tolerance, and mobility support. They all require maintaining NF states (i.e., processing results), e.g., for recovery, especially for ...
详细信息
ISBN:
(纸本)9798350327939;9798350327946
networkfunctions (NFs) in edge clouds are required to provide scalability, fault tolerance, and mobility support. They all require maintaining NF states (i.e., processing results), e.g., for recovery, especially for stateful NFs like firewalls. Even though current solutions provide an alternative to storing states in memory, their design can support only a single requirement, either fault tolerance or scaling. Advocating the versatility, we propose StateOS - an operating system of NF states for user-defined programs supporting different requirements. Additionally, we propose a state transfer scheme, namely Divide-and-Conquer (DAC), to accelerate StateOS. The combination of DAC and StateOS demonstrates its efficiency for all three scenarios: scaling, fault tolerance, and service function chain acceleration.
暂无评论