基于SDN的网络虚拟化平台及其隔离性研究

doi:10.11959/j.issn.1000-0801.2016234

Abstract

Abstract:

The rapid development of cloud computing has recently prompted extensive application of visualization in enterprise-level environments.In addition to server and storage virtualization,network virtualization attracts more and more attention with the application of SDN and OpenFlow.Therewith,software-defined network platforms designed for network virtualization were presented.Firstly,the objectives of the SDN based network virtualization platform were analyzed.Subsequently,the system architectures and principles of four typical network virtualization platforms based on SDN were compared.At last,the safety and isolation mechanism provided by the network virtualization platforms were investigated.

Key words: softwaredefinednetworking, networkvirtualization, OpenFlow

Kai ZHANG,Xiaofeng QIU,Xinning ZHU. Research on SDN based network virtualization platform and its isolation[J]. Telecommunications Science, 2016, 32(9): 125-131.

Figures/Tables 10

References 7

[1]	陶松 . 基于 SDN 的网络虚拟化安全研究[J]. 电脑知识与技术, 2015,11(5): 23-25. TAO S . On security of SDN-based network virtualization[J]. Computer Knowledge and Technology, 2015,11(5): 23-25.
[2]	BLENK A , BASTA A , KELLERER W . HyperFlex:an SDN virtualization architecture with flexible hypervisor function allocation[C]// IEEE International Symposium on Integrated Network Management,May 11-15,2015,Ottawa,Canada. New Jersey:IEEE Press, 2015: 397-405.
[3]	SHERWOOD R , GIBB G , YAP K K ,et al. FlowVisor:a network virtualization layer[EB/OL].(2009-01-29)[2016-05-20]. .
[4]	COSTA V T , COSTA L H M K . Vulnerabilities and solutions for isolation in FlowVisor-based virtual network environments[J]. Journal of Internet Services ＆Applications, 2015,6(1): 1-9.
[5]	ROBERTO D C,MATTEOG , ROBERTO R , et al . VeRTIGO:network virtualization and beyond[C]// 2012 European Workshop on Software Defined Networking,October 25-26,2012,Darmstadt,Germany. New York:ACM Press, 2012: 24-29.
[6]	DRUTSKOY D , KELLER E , REXFORD J . Scalable network virtualization in software-defined networks[J]. IEEE Internet Computing, 2013,17(2): 20-27.
[7]	ALI A , MARC D L , AYAKA K ,et al. OpenVirteX:make your virtual SDNs programmable[C]// ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking,August 22-24,2014,Chicago,IL,USA. New York:ACM Press, 2014: 25-30.

Metrics

Recommended 0

No Suggested Reading articles found!

对比项	FlowVisor	VeRTIGO	FlowN	OpenVirteX
虚拟化方式	基于虚拟管理器	基于虚拟管理器	基于容器	基于虚拟管理器
支持数据隔离	否	否	是	是
支持自定义拓扑	否	是	是	是
使用数据库技术存储映射	否	是	是	否
网络状态可恢复	否	否	否	是
映射模块可分离	否	否	否	是

虚拟化平台	地址空间隔离策略
FlowN	实现了从虚拟地址到物理地址的映射。为了区分不同租户的数据，边缘交换机封装收到的数据分组，并增加一个额外的分组头，用于标识该数据属于哪个虚拟网络，该封装过程和增加的额外分组头信息对控制器和上层应用而言是透明的
OpenVirteX	租户能够为其终端主机分配地址空间，不同的租户在同一物理网络中存在 IP地址块的重叠。为区分不同虚拟网络的主机，OVX生成了全局标识的租户ID，这个ID来自地址空间中的某一个字段。因此，根据这一字段的值，可以对数据所属的虚拟网络进行隔离

虚拟化平台	隔离性能	拓扑隔离策略
FlowVisor	①	在LLDP过程中，捕获底层交换机上发给控制器的分组到达消息，并且记录发送该消息的交换机和端口等信息，以此获得各虚拟网络的全局视图
VeRTIGO	①②	利用映射算法，实现虚拟拓扑与物理拓扑的解耦
FlowN	①②	原理同VeRTIGO
OpenVirteX	①②	原理同VeRTIGO

交换机CPU的隔离性威胁主要来源	威胁原理
新网络流的建立	当网络中有数据分组到达交换机并且没有匹配到任何流表项时，新流建立消息就会被发送至控制器，这个过程消耗了交换机的CPU资源。如果网络中新流建立过于频繁，会使交换机频繁发送新流建立消息到控制器，可能导致CPU资源的耗尽
处理控制器的请求	OpenFlow控制器向交换机发送的请求，如配置流表、询问状态信息等都会消耗 CPU资源
内部状态保持	交换机在维护内部的计数器、处理事件、更新计数器时，消耗CPU资源

[1]	Dongshan WANG,Yue MA,Yan LI,Jian GAO,Zhibin YIN. Coordinated and unified control technology of IP and optical transport network for power services [J]. Telecommunications Science, 2019, 35(3): 116-121.
[2]	Zhifeng LIU,Xia YIN,Zhiliang WANG,Xingang SHI,Yiqiang HUA,Xiaohong HUANG,Liang WEI,Jiangyuan YAO,Han ZHANG,Man ZENG,Zijun SU,Shuai LIU. Design and construction of hierarchical and cross-regional SDN verification and demonstration system [J]. Telecommunications Science, 2018, 34(11): 21-30.
[3]	Fan YANG,Siyu YAN,Tao HUANG. Programming extention technology of open vSwitch [J]. Telecommunications Science, 2017, 33(5): 21-28.
[4]	Chuanhuang LI,Cheng CHENG,Xiaoyong YUAN,Lijie CEN,Weiming WANG. Policy conflict detection in software defined network by using deep learning [J]. Telecommunications Science, 2017, 33(11): 27-36.
[5]	Shidong LIU,Pan WANG. Multi-domain optical network virtual technology based on SDN [J]. Telecommunications Science, 2016, 32(4): 109-113.
[6]	Hong TANG,Huahong ZHU,Weihua CAO,Jie ZOU. Route optimization method for BGP based on SDN in large-scale IP network [J]. Telecommunications Science, 2016, 32(3): 14-19.
[7]	IAOZiyu X. A review of the latest research on SDN technology optimization [J]. Telecommunications Science, 2015, 31(Z1): 132-139.
[8]	Zifu Fan,Chunling Wu,Jinhong Wang. Requirements Analysis of Data Center Network Routing Algorithm Based on SDN Architecture [J]. Telecommunications Science, 2015, 31(2): 36-45.
[9]	Yongbing Fan,Zhilan Huang. SDN Technology and Industry Analysis and Strategy Recommendations for Telecom Operator [J]. Telecommunications Science, 2015, 31(10): 151-157.
[10]	Ruiquan Jing,Chengliang Zhang. Prototype Development and Demonstration of Hierarchical Software-Defined Optical Network [J]. Telecommunications Science, 2015, 31(10): 180-185.
[11]	Zhonghua Chen,Chengbin Shen,Jianping Zhang. Discussion on tbe Key Problems in tbe Application of SDN Tecbnology in Telecommunication Network [J]. Telecommunications Science, 2014, 30(9): 133-138.
[12]	Hongguang Guan,Yizhen Yang,Wanli Ren,Zhijie Han,Yimu Ji,Yanfei Sun. Research and Application of Network Virtualization Technology Based on OpenFlow [J]. Telecommunications Science, 2014, 30(1): 96-102.
[13]	Yi Zheng,Yiqiang Hua,Xiaofeng He. Characteristics, Development and Future of SDN [J]. Telecommunications Science, 2013, 29(9): 102-107.
[14]	Yongqing Zhu,Huanan Chen,Hong Tang. Research on Realization of MSE Equipment Based on OpenFlow Protocol [J]. Telecommunications Science, 2013, 29(12): 134-138.

Research on SDN based network virtualization platform and its isolation

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 10

References 7

Related Articles 14

Metrics

Recommended 0