LTSS： Load-Adaptive Traffic Steering and Forwarding for Security Services in Multi-Tenant Cloud Datacenters  

作　　者：Xue-Kai Du Zhi-Hui Lu Qiang Duan Jie Wu Cheng-Rong Wu 

机构地区：[1]School of Computer Science, Fudan University, Shanghai 200433, China [2]Information Sciences and Technology Department, the Pennsylvania State University Abington College Abington, PA 19001, U.S.A.

出　　处：《Journal of Computer Science & Technology》2017年第6期1265-1278,共14页计算机科学技术学报（英文版）

基　　金：The work is supported by the National Natural Science Foundation of China under Grant Nos. 61572137 and 61728202, and Shanghai Innovation Action Project under Grant No. 16DZ1100200.

摘　　要：Currently, different kinds of security devices are deployed in the cloud datacenter environment and tenants may choose their desired security services such as firewall and IDS （intrusion detection system）. At the same time, tenants in cloud computing datacenters are dynamic and have different requirements. Therefore, security device deployment in cloud datacenters is very complex and may lead to inefficient resource utilization. In this paper, we study this problem in a software-defined network （SDN） based multi-tenant cloud datacenter environment. We propose a load-adaptive traffic steering and packet forwarding scheme called LTSS to solve the problem. Our scheme combines SDN controller with TagOper plug-in to determine the traffic paths with the minimum load for tenants and allows tenants to get their desired security services in SDN-based datacenter networks. We also build a prototype system for LTSS to verify its functionality and evaluate performance of our design.Currently, different kinds of security devices are deployed in the cloud datacenter environment and tenants may choose their desired security services such as firewall and IDS （intrusion detection system）. At the same time, tenants in cloud computing datacenters are dynamic and have different requirements. Therefore, security device deployment in cloud datacenters is very complex and may lead to inefficient resource utilization. In this paper, we study this problem in a software-defined network （SDN） based multi-tenant cloud datacenter environment. We propose a load-adaptive traffic steering and packet forwarding scheme called LTSS to solve the problem. Our scheme combines SDN controller with TagOper plug-in to determine the traffic paths with the minimum load for tenants and allows tenants to get their desired security services in SDN-based datacenter networks. We also build a prototype system for LTSS to verify its functionality and evaluate performance of our design.

关 键 词：cloud datacenter software-defined network security service network security virtualization network function virtualization traffic steering 

分 类 号：TP0[自动化与计算机技术]