基于软件定义的安全功能服务链部署方法  

SFC deployment algorithm for software defined security

作　　者：唐寅 何嘉[1] TANG Yin;HE Jia(School of Computer Science and Technology,Chengdu University of Information Technology,Chengdu 610225,China)

机构地区：[1]成都信息工程大学计算机学院,四川成都610225

出　　处：《计算机工程与设计》2021年第11期3052-3058,共7页Computer Engineering and Design

摘　　要：为减少传统安全设备实现安全功能灵活性差、部署成本高等弊端,深入研究软件定义网络(SDN)、网络功能虚拟化(NFV)和基于软件定义的安全服务部署技术,建立安全服务链部署模型,提出一种启发式算法。从节点的安全功能需求、物理资源需求,以及节点之间的网络资源需求和传输时延等方面综合评估部署安全功能服务链的资源需求,优先部署资源需求较大的安全功能服务链,避免资源能力成为瓶颈。实验结果表明,该算法可有效提升部署成功率。To reduce the poor flexibility and high cost of security function deployment caused by traditional security devices,the technologies of SDN(software defined networking),NFV(network function virtualization)and the deployment of secure functions based on software defined security were studied.The model of deployment of secure function service chains was constructed.By comprehensively evaluating the demands of each service chain,including the security function demands and physical resource demands from nodes in the chain,as well as the network resource demands and latency between them,a heuristic algorithm was proposed to deploy service chain with larger demand in a higher priority.The bottleneck of resource capacity was avoided in this way.Experimental results show that the proposed methodology can effectively improve the success rate of deployment.

关 键 词：软件定义网络 网络功能虚拟化 软件定义安全 安全功能服务链 服务链部署 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]