面向SDN的动态网络策略部署与实现

doi:10.11959/j.issn.1000-0801.2016273

摘要/Abstract

摘要：

软件定义网络（SDN）为未来网络业务的管理要求提供了一种新的解决方案。以动态服务功能链作为服务功能编排模式、以高级网络编程语言作为服务功能部署工具，并结合虚拟网络映射设计了业务到策略、从控制器到网络节点的部署方案。基于SDN三层结构，提出动态策略管理系统。动态策略管理系统可以根据反馈的网络状态信息调整网络策略，并对同一节点上的网络策略进行冲突检测，根据不同的冲突类型选择组合方式，有效避免了网络策略冲突，实现网络服务的自适应部署。最后，通过实验验证了动态策略管理系统从业务到策略的完整部署过程。

关键词: SDN, 高级网络编程语言, 服务功能链, 网络策略, 业务部署

Abstract:

Software defined networking（SDN）provides a new solution for management requirements of the future network. Based on dynamic service function chain as the creation model of service function, advanced network programming language as a service deployment tools, and combined with virtual network mapping theory, a deployment scheme which could take services to policies, and take controllers to network nodes was designed. Based on the three-layer structure of the SDN, a dynamic policy management system was proposed. It can implement self-adaption deployment of network service, which based on the feedback information of the network state. Besides, it can detect network policy conflicts on the network note and choose different ways of combination to avoid policy conflicts. Finally, the complete deployment process of the dynamic policy management system was verified through some experiments.

Key words: SDN, advanced network programming language, service function chain, network policy, service deployment

董黎刚,何博翰,徐倜杰,费硕成,王伟明. 面向SDN的动态网络策略部署与实现[J]. 电信科学, 2016, 32(10): 137-149.

Ligang DONG,Bohan HE,Tijie XU,Shuocheng FEI,Weiming WANG. Deployment and implementation of dynamic network policy in SDN[J]. Telecommunications Science, 2016, 32(10): 137-149.

图/表 18

图1

图2

图3

图4

图5

图6

图7

表1

表2

图8

图9

图10

图11

图12

图13

图14

图15

图16

参考文献 17

[1]	郑毅，华一强，何晓峰 . SDN 的特征、发展现状及趋势[J]. 电信科学， 2013,29(9):102-107. ZHENG Y , HUA Y Q , HE X F . Characteristics, development and future of SDN[J]. Telecommunications Science, 2013,29(9):102-107.
[2]	OpenFlow Switch Consortium. OpenFlow version 1.5.0 switch specification[S]. 2015.
[3]	CHOWDHURY N M M K , BOUTABA R . A survey of network virtualization[J]. Computer Networks, 2010,54(5): 862-876.
[4]	GUO C J , SUN W , HUANG Y , et al. A framework for native multi-tenancy application development and management[C]// IEEE International Conference on E-Commerce Technology, andEnterprise Computing, E-Commerce, and E-Services, IEEE Computer Society, July 23-26,2007, Tokyo, Japan. New Jersey:IEEE Press, 2007: 551-558.
[5]	MONSANTO C , FOSTER N , HARRISON R , et al. A compiler and run-time system for network programming languages[J]. ACM SIGPLAN Notices, 2012,47(1): 217-230.
[6]	REICH J , MONSANTO C , FOSTER N , et al. Modular SDN programming with Pyretic[J]. USENIX; login, 2013,38(5): 128-134.
[7]	KIM H , REICH J , GUPTA A , et al. Kinetic: verifiable dynamic network control[C]// 12th USENIX Symposium on Networked Systems Design and Implementation（NSDI 15）, May 4-6,2015, Berkeley, CA, USA. New Jersey:IEEE Press, 2015: 59-72.
[8]	HALPERN J , PIGNATARO C . Service function chaining（SFC） architecture[EB/OL]. (2015-11-10)[2016-06-30]. .
[9]	薛森，符刚 . SDN/NFV 的 Service Chaining 关键技术研究[J]. 邮电设计技术， 2015(2):1-6. XUE M , FU G . Research on key technologies of service chaining based on SDN/NFV[J]. Designing Techniques of Posts and Telecommunications, 2015(2):1-6.
[10]	JOHN W , PENTIKOUSIS K . AGAPIOU G, et al. Research directions in network service chaining[C]// 2013 IEEE SDN for Future Networks and Services（SDN4FNS）, Nov 11-13,2013, Trento, Italy. New Jersey:IEEE Press, 2013: 1-7.
[11]	QUINN P , ELZUR U . Network Service Header[EB/OL]. (2016-05-26)[2016-06-30]. .
[12]	GUICHARD J , SMITH M , KUMAR S , et al. Network service header （NSH）context header allocation（Data Center）[EB/OL]. (2016-02-16)[2016-06-30]. .
[13]	DHODY D , BOUCADAIR M . PCEP Extensions for Service Function Chaining（SFC）[EB/OL]. (2016-03-07)[2016-06-30]. .
[14]	BOUCADAIR M . Service function chaining（SFC）control plane components＆requirements[EB/OL]. (2016-5-2)[2016-06-30]. .
[15]	SZYRKOWIEC T , MUNOZ R , VILALTA R , et al. Demonstration of SDN based optical network virtualization and multidomain service orchestration[C]// 2014 Third European Workshop on Software Defined Networks（EWSDN）, Sep 1-3,2014, Budapest,Hungary. New Jersey:IEEE Press, 2014: 137-138.
[16]	CANINI M , KUZNETSOV P , LEVIN D , et al. Software transactional networking: concurrent and consistent policy composition[C]// The Second ACM SIGCOMM Workshop on HotTopics in Software Defined Networking, Aug 12-16,2013, Hong Kong, China. New York:ACM Press, 2013: 1-6.
[17]	QUINN P , NADEAU T . Problem statement for service function chaining[EB/OL]. (2015-04-12)[2016-06-30]. .

序号	条件	动作	组合类型	处理方式	实例
1	无交集	一致	无冲突	合并
2		不一致	无冲突	分类并行
3	有交集	一致	无冲突	合并	同实例1
4		不一致，至少一方的动作为分组丢失	强冲突	排他
5				串行
6		动作为不同目的的转发	弱冲突	排他	同实例4
7				串行	同实例5
8				复制并行

含义	流表项	策略条件或动作
目标地址	dl_dst	Dstaddr
源地址	dl_src	SrcAddr
目标端口	tp_dst	Dstport
源端口	tp_src	Srcport
服务类型	nw_tos	tos
数据分组类型	dl_type	ethtype
协议类型	nw_proto	protocol
所在VLAN编号	dl_vlan	vlan_id
VLAN优先级	dl_vlan_pcp	vlan_pcp
转发动作	output	fwd