《计算机应用研究》|Application Research of Computers

安全服务链中虚拟网络功能分配与调度算法研究

Research on algorithm of VNF allocation and scheduling problems in security service chainHuang Rui, Zhang Hongqi (Information Engineering University, Zhengzhou 450001, China)

免费全文下载 (已被下载 次)  
获取PDF全文
作者 黄睿,张红旗
机构 信息工程大学,郑州 450001
统计 摘要被查看 次,已被下载
文章编号 1001-3695(2019)03-049-0890-06
DOI 10.19734/j.issn.1001-3695.2017.09.0949
摘要 安全服务链中的虚拟网络功能(virtual network function,VNF)将传统网络安全功能与硬件设备解耦,使得服务功能的部署更具动态性和可扩展性。然而VNF向节点的合理分配以及节点上VNF的高效调度问题仍亟待解决。为此,基于软件定义网络(software defined network,SDN)和网络功能虚拟化(network function virtuali-zation,NFV)环境,提出基于优化算法的解决方案。对资源分配与调度问题进行举例并形式化定义问题的优化目标,提出基于贪心算法的资源分配方案和基于混合蜂群算法的资源调度方案,统一协调解决VNF的资源分配与调度问题。仿真实验验证,所提算法的时间复杂性和在总资源成本及总服务收益方面的提升,对比混合蜂群算法和传统蜂群算法,结果显示前者具有更快的收敛速度。
关键词 安全服务链;虚拟网络功能;软件定义网络;网络功能虚拟化;贪心算法;混合蜂群算法
基金项目 国家“863”计划资助项目(2012AA012704)
郑州市科技领军人才项目(131PLJRC644)
本文URL http://www.arocmag.com/article/01-2019-03-049.html
英文标题 Research on algorithm of VNF allocation and scheduling problems in security service chainHuang Rui, Zhang Hongqi (Information Engineering University, Zhengzhou 450001, China)
作者英文名 Huang Rui, Zhang Hongqi
机构英文名 InformationEngineeringUniversity,Zhengzhou450001,China
英文摘要 The virtual network function in the security service chain decouples the traditional network security functions from the hardware devices, making the deployment of service functions more dynamic and extensible. However, the rational allocation of the VNF to the node and the efficient scheduling of the VNF on the node still need to be solved urgently. To this end, this paper presented a solution using optimization algorithm based on the software defined network and network function virtua-lization environment. First, it made an example of resource allocation and scheduling problem and formalized the objective. Then, this paper proposed a resource allocation scheme based on greedy algorithm and a resource scheduling scheme based on hybrid bee colony algorithm to solve the problem coordinately. Finally, it designed the simulation experiment to verify the time complexity and the improvement of total resource cost and total service income of the proposed algorithm. Meanwhile, it compared the hybrid bee colony algorithm with the traditional bee colony algorithm. The results indicate that the former has better convergence rate.
英文关键词 security service chain; virtual network function(VNF); software defined network(SADN); network function virtualization(NFV); greedy algorithm; hybrid bee colony algorithm
参考文献 查看稿件参考文献
  [1] 黄韬, 刘江, 霍如, 等. 未来网络体系架构研究综述[J] . 通信学报, 2014, 35(8):184-197. (Huang Tao, Liu Jiang, Huo Ru, et al. Survey of research on future network architectures[J] . Journal on Communications, 2014, 35(8):184-197. )
[2] 兰巨龙, 程东年, 胡宇翔. 可重构信息通信基础网络体系研究[J] . 通信学报, 2014, 35(1):128-139. (Lan Julong, Cheng Dongnian, Hu Yuxiang. Research on reconfigurable information communication basal network architecture[J] . Journal on Communications, 2014, 35(1):128-139. )
[3] McKeown N, Anderson T, Balakrishnan H, et al. OpenFlow:enabling innovation in campus networks[J] . ACM SIGCOMM Computer Communication Review, 2008, 38(2):69-74.
[4] 左青云, 陈鸣, 赵广松, 等. 基于OpenFlow的SDN技术研究[J] . 软件学报, 2013, 24(5):1078-1097. (Zuo Qingyun, Chen Ming, Zhao Guangsong, et al. Research on OpenFlow-based SDN technologies[J] . Journal of Software, 2013, 24(5):1078-1097. )
[5] 熊钢, 胡宇翔, 段通, 等. 一种软件定义网络的安全服务链动态组合机制[J] . 电子与信息学报, 2016, 38(5):1234-1241. (Xiong Gang, Hu Yuxiang, Duan Tong, et al. A dynamic composition mechanism for the security service chain oriented software defined networking[J] . Journal of Electronics & Information Technology, 2016, 38(5):1234-1241. )
[6] Liu Jiaqiang, Li Yong, Wang Huandong, et al. Leveraging software-defined networking for security policy enforcement[J] . Information Sciences, 2016, 327(1):288-299.
[7] Clayman S, Maini E, Galis A, et al. The dynamic placement of virtual network functions[C] //Proc of the 12th IEEE Network Operations and Management Symposium. New York:ACM Press, 2014:617-624.
[8] Mijumbi R, Serrat J, Gorricho J L, et al. Network function virtualization:state-of-the-art and research challenges[J] . IEEE Communications Surveys & Tutorials, 2016, 18(1):236-262.
[9] Herrera J G, Botero J F. Resource allocation in NFV:a comprehensive survey[J] . IEEE Trans on Network & Service Management, 2017, 13(3):518-532.
[10] Riera J F, Hesselbach X, Escalona E, et al. On the complex scheduling formulation of virtual network functions over optical networks[C] //Proc of the 10th IEEE International Conference on Transparent Optical Networks. Piscataway, NJ:IEEE Press, 2014:210-217.
[11] Riera J F, Escalona E, Batalle J, et al. Virtual network function scheduling:concept and challenges[C] //Proc of the 9th IEEE International Conference on Smart Communications in Network Technologies. Piscataway, NJ:IEEE Press, 2014:105-116.
[12] Mijumbi R, Serrat J, Gorricho J L, et al. Design and evaluation of algorithms for mapping and scheduling of virtual network functions[C] //Proc of the 1st IEEE Conference on Network Softwarization. Piscataway, NJ:IEEE Press, 2015:211-219.
[13] Fischer A, Botero J F, Beck M T, et al. Virtual network embedding:a survey[J] . IEEE Communications Surveys & Tutorials, 2013, 15(4):1888-1906.
[14] Rabbani M G, Esteves R P, Podlesny M, et al. On tackling virtual data center embedding problem[C] //Proc of IFIP/IEEE International Symposium on Integrated Network Management. Piscataway, NJ:IEEE Press, 2013:177-184.
[15] Karaboga D. An idea based on honey bee swarm for numerical optimization[EB/OL] . (2009-10-05)[2016-03-21] . http://dx. doi. org/10. 2139/ssrn. 20090014.
[16] Chong C S, Low M Y H, Sivakumar A I, et al. Using a bee colony algorithm for neighborhood search in Job-Shop scheduling problems[C] //Proc of the 9th European Conference on Modelling & Simulation:Simulations in United Europe. New York:ACM Press, 2008:1207-1218.
[17] Wong Lipei, Puan C Y, Low M Y H, et al. Bee colony optimization algorithm with big valley landscape exploitation for Job-Shop scheduling problems[C] //Proc of the 40th Conference on Winter Simulation Winter Simulation Conference. New York:ACM Press, 2008:2050-2058.
[18] Teodorovic D, Lucic P, Markovic G, et al. Bee colony optimization:principles and applications[C] //Proc of the 10th IEEE Seminar on Neural Network Applications in Electrical Engineering. New York:ACM Press, 2007:151-156.
收稿日期 2017/9/20
修回日期 2017/10/26
页码 890-895
中图分类号 TP393;TP301.6
文献标志码 A