一种基于多级流表的中间件服务链的部署方法

doi:10.11959/j.issn.1000-0801.2015205

摘要/Abstract

摘要：

为了解决服务链部署中的路径循环和源地址绑定问题，首先，提出一种新的服务链部署方法，该方法利用OpenFlow多级流表标识服务链及服务顺序，从而使数据分组按照需求的服务顺序正确处理；其次，提出服务链部署算法以实现服务路径到流表规则的映射；最后基于NetFPGA-10G完成了原型系统实现。仿真结果表明，该部署方法具备可行性，并降低了流表数量和时间开销。

关键词: 软件定义网络, 中间件, 服务链, 多级流表

Abstract:

Aiming at the path cycle and source address binding problem in middlebox service chain deployment，a service chain deployment approach by combining the OpenFlow mechanism and NetFPGA was proposed.First of all，the OpenFlow multi-flow table was used for marking service chains and labeling service sequences so that data packets could be processed correctly according to desired service order；secondly，the service chain deployment algorithm was designed to achieve the mapping relationship between the service path and flow table rules；thirdly，a prototype system was implemented based on the hardware platforms of NetFPGA-10G.Finally，experimental results show that the proposed method have the advantage of feasibility and outperforms compared methods in the aspect of the flow table number and time overhead.

Key words: software defined networking, middlebox, service chain, multi-flow table

刘释然,兰巨龙,胡宇翔,段通. 一种基于多级流表的中间件服务链的部署方法[J]. 电信科学, 2015, 31(8): 19-29.

Shiran Liu,Julong Lan,Yuxiang Hu,Tong Duan. A Deployment Method of Middlebox Service Chain Based on Multi-Flow Table[J]. Telecommunications Science, 2015, 31(8): 19-29.

图/表 14

图1

表1

表2

图2

图3

表3

表4

图4

图5

表5

图6

表6

图7

图8

参考文献 18

1	Boucadair M ， Jacquenet C ， Parker R ，et al. Service Function Chaining： Framework ＆Architecture. Internet-Draft draftboucadair-sfc-framework-00，IETF Secretariat， 2013
2	Srisuresh P ， Kuthan J ， Rosenberg J ，et al. Middlebox Communication Architecture and Framework. RFC3303， 2002
3	Joseph D A ， Tavakoli A ， Stoica I . A policy-aware switching layer fordata centers. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Chicago，USA， 2008
4	Gill P ， Jain N ， Nagappan N . Understanding network failures in data centers： measurement，analysis，and implications. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Toronto，Canada， 2011
5	Sekar V ， Ratnasamy S ， Reiter M ，et al. The middlebox manifesto： enabling innovation in middleboxdeployment. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Toronto，Canada， 2011
6	Sherry J ， Hasan S ， Scott C ，et al. Making middleboxes someone else’s problem： networkprocessing as a cloud service. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Helsinki，Finland， 2012
7	Gember A ， Krishnamurthy A ， John S S ，et al. Stratos：A Network-Aware Orchestration Layer for Virtual Middleboxes inClouds. TechReport， 2014
8	Qazi Z A ， Tu C C ， Chiang L ，et al. SIMPLE-fying middlebox policy enforcement using SDN. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Hong Kong，China， 2013
9	Zhang Y ， Behe N ， Beliveau L ，et al. StEERING：asoftware-defined networking for inline service chaining. Proceedings ofthe 21st IEEE International Conference on Network Protocols（ICNP 2013）， Gottingen，Germany， 2013
10	Seyed K F ， Chiang L ， Sekar V . Enforcing network-wide policies in the presence of dynamic middlebox actions using flow tags. Proceedings of Networked System Design and Implementation， Seattle，USA， 2014
11	Halpern J ， Pignataro C . Service Function Chaining（SFC） Architecture. Internet-Draft draft-ietf-sfc-architecture-07，IETF Secretariat， 2015
12	Quinn P ， Nadeau T . Service Function Chaining Problem Statement. Internet-Draft draft-ietf-sfc-problem-statement-13，IETF Secretariat， 2015
13	OpenFlow1.1.OpenFlowswitch specification 1.1.0. ， 2011
14	OpenFlow1.0，OpenFlowswitch specification 1.0.0. ， 2009
15	Sekar V ， Egi N ， Ratnasamy S ，et al. Design and implementation of a consolidated middlebox architecture. Proceedings of Networked System Design and Implementation， San Jose，USA， 2012
16	NetFPGA-10G project. ， 2014
17	OpenFlow1.3，OpenFlowswitch specification 1.3.0. ， 2012
18	Ryu controller project. ， 2014

IngressPort	Fwd
src₁	S₃
S₃	FW
FW	S₃

IngressPort	Fwd
S₃	IDS
IDS	S₃
S₃	下一跳

IngressPort	元数据	指令
S₁	0101	metadata：0101→0100；Fwd：IDS₁
IDS₁	0100	metadata：0100→0000；Fwd：S₁
S₁	0000	Fwd：下一跳

IngressPort	标签	元数据	指令
S₁	1	0101	metadata：0101→0100；Fwd：IDS₁
IDS₁	1	0100	metadata：0100→0000；Fwd：S₁
S₁	1	0000	Fwd：下一跳
S₁	2	0101	Fwd：下一跳

符号	含义
SR	服务路径
S	交换机节点
M	中间件节点
S_m-S_i-S_n	该序列表示SR中3个相连的交换机，如图1中S₁-S₃-S₂
S_i-M_k-S_i	该序列中表示SR与中间件M_k相连的交换机S_i与M_k构成的序列
Modify（M）	集合Modify（M）表示该网络中所有会修改数据分组头的中间件的类型的集合，由管理员定义
basic_table	基本转发表
SC_table	服务链转发表
M（SR）	SR中所有中间件节点
map（M（SR））	SR上中间件到服务顺序编码的映射，由管理员定义