EAGLE:一种内核态及用户态中基于遥测数据图的网络遥测方案  

EAGLE:A Network Telemetry Mechanism Based on Telemetry Data Graph in Kernel and User Mode

作　　者：肖肇斌 崔允贺 陈意 申国伟[1,2,3] 郭春 钱清[4] XIAO Zhaobin;CUI Yunhe;CHEN Yi;SHEN Guowei;GUO Chun;QIAN Qing(School of Computer Science and Technology,Guizhou University,Guiyang 550025,China;State Key Laboratory of Public Big Data,Guiyang 550025,China;Engineering Research Center for Text Computing and Cognitive Intelligence,Ministry of Education,Guiyang 550025,China;School of Information,Guizhou University of Finance and Economics,Guiyang 550025,China Abstract)

机构地区：[1]贵州大学计算机科学与技术学院,贵阳550025 [2]省部共建公共大数据国家重点实验室,贵阳550025 [3]文本计算与认知智能教育部工程研究中心,贵阳550025 [4]贵州财经大学信息学院,贵阳550025

出　　处：《计算机科学》2024年第2期311-321,共11页Computer Science

基　　金：国家自然科学基金青年科学基金(62102111);贵州省科技计划项目([2020]1Y267);贵州大学引进人才项目([2019]52)。

摘　　要：网络遥测是一种新型的网络测量技术,具有实时性强、准确性高、开销低的特点。现有网络遥测技术存在无法收集多粒度网络数据、无法有效存储大量原始网络数据、无法快速提取及生成网络遥测信息、无法利用内核态及用户态特性设计网络遥测方案等问题。为此,提出了一种融合内核态及用户态的、基于遥测数据图和同步控制块的多粒度、可扩展、覆盖全网的网络遥测机制(a nEtwork telemetry mechAnism based on telemetry data Graph in kerneL and usEr mode,EAGLE)。EAGLE设计了一种能够收集多粒度数据且数据平面上灵活可控的网络遥测数据包结构,用于获取上层应用所需的数据。此外,为快速存储、查询、统计、聚合网络状态数据,实现网络遥测数据包所需遥测数据的快速提取与生成,EAGLE提出了一种基于遥测数据图及同步控制块的网络遥测信息生成方法。在此基础上,为了最大化网络遥测机制中网络遥测数据包的处理效率,EAGLE提出了融合内核态及用户态特性的网络遥测信息嵌入架构。在Open vSwitch上实现了EAGLE方案并进行了测试,测试结果表明,EAGLE能够收集多粒度数据并快速提取与生成遥测数据,且仅增加极少量的处理时延及资源占用率。Network telemetry is a new type of network measurement technology,which has the characteristics of strong real-time performance,high accuracy and low overhead.Existing network telemetry technologies have problems such as being unable to collect multi-granularity network data,unable to effectively store a large amount of original network data,unable to quickly extract and generate network telemetry information,and unable to design network telemetry solutions using kernel-mode and user-mode features.In order to solve the above problems,this paper proposes a multi-granularity,scalable,and network-wide network tele-metry mechanism EAGLE,which integrates kernel mode and user mode,and is based on telemetry data graphs and synchronization control blocks.EAGLE has designed a flexible and controllable network telemetry packet structure on the data plane that can collect multi-granularity data,and is used to obtain the data required by upper-layer applications.In addition,in order to quickly store,query,count,and aggregate network status data,and realize the rapid extraction and generation of telemetry data required by network telemetry packets,EAGLE proposes a network telemetry information generation method based on telemetry data graphs and synchronization control blocks.On this basis,in order to maximize the processing efficiency of network telemetry packets in the network telemetry mecha-nism,EAGLE proposes a network telemetry information embedding architecture that integrates the characteristics of kernel state and user state.Finally,this paper implements and tests the EAGLE scheme on Open vSwitch.The test results show that EAGLE can collect multi-granularity data and quickly extract and generate telemetry data with only a little increase in processing time and resource usage.

关 键 词：网络遥测 遥测效率 可编程数据平面 遥测数据图 内核空间 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]