一种运营商网络安全功能虚拟化系统部署方法  

A Method of Deploying Virtualization System of Network Security Function for Carriers

作　　者：钟植任 关洪涛[1,2,3] 刘冉 姜海洋[1,2] 谢高岗[1,2] Zhong Zhiren;Guan Hongtao;Liu Ran;Jiang Haiyang;Xie Gaogang(Institute of Computing Technology, Chinese Academy of Sciences,Beijing 100190,China;Jiangsu Future Networks Innovation Institute,Nanjing 211111,China;Nanjing University of Posts and Telecommunications,Nanjing 210003,China)

机构地区：[1]中国科学院计算技术研究所,北京100190 [2]江苏省未来网络创新研究院,南京211111 [3]南京邮电大学,南京210003

出　　处：《信息通信技术》2017年第3期13-19,共7页Information and communications Technologies

摘　　要：在边缘网络部署专用设备实现网络安全防护的方法存在建设成本高、维护困难、功能受限等问题。网络功能虚拟化技术通过在骨干网络部署通用平台,可以实现传统专用安全设备的功能,有效降低建设与维护成本,提升安全防护能力。文章提出一种针对运营商的网络安全功能虚拟化系统部署方法,能够在不改变网络拓扑与主干网路由的条件下实现快速部署,为用户提供稳定可靠的定制化网络安全服务。该方法已在江苏某运营商网络试用并取得良好效果。There are many problems such as high construction cost,difficult to maintain,functional limitation and so on when achieving network security on the edge network by deploying dedicated equipment.The network function virtualization technology can realize the functionality of the traditional security equipment by deploying a general platform in the backbone network,which could effectively reduce the cost of construction and maintenance,and enhance the ability of security and protection.This paper proposes a rapid deployment method of network security functions virtualization system for operators without changing the network topology and backbone routing architecture,to provide users with stable and reliable customized network security services.This method has been tested on a carrier network in Jiangsu and it is proved to be effective.

关 键 词：网络安全 网络功能虚拟化 软件定义网络 网络地址转换 VXLAN 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]