NFV场景下基于协议和目的端口的负载均衡策略  

Load Balancing Strategy Based on Protocol and Destination Port in NFV Scenario

作　　者：张人杰 李頔[2] 王方[3] 刘慧 ZHANG Renjie;LI Di;WANG Fang;LIU Hui(Hunan Post and Telecommunication College,Changsha,Hunan,China 410015;Hunan Agricultural University,Changsha,Hunan,China 410128;Department of Transportation of Hunan Province,Changsha,Hunan,China 410029)

机构地区：[1]湖南邮电职业技术学院,湖南长沙410015 [2]湖南农业大学,湖南长沙410128 [3]湖南省交通运输厅,湖南长沙410029

出　　处：《湖南邮电职业技术学院学报》2024年第3期1-7,共7页Journal of Hunan Post and Telecommunication College

基　　金：2022年教育部高等学校科学研究发展中心产学研创新项目“数字化转型下高校零信任网络安全管理体系研究”(项目编号:2022MU089)。

摘　　要：网络功能虚拟化(NFV)技术为网络安全设施的灵活性和可扩展性提供了创新解决方案。以Snort作为研究核心,深入分析其快速模式匹配器的实现机制,并基于此提出了一种创新的负载均衡策略。该策略通过优化流量处理机制,以较小的内存占用实现高效的流量检测,显著减少了硬件资源需求。通过实验验证,该策略在NFV环境中相较于传统五元组哈希策略实现了超过50%的性能提升。Network function virtualization(NFV)technology provides innovative solutions for the flexibility and scalability of network security facilities.Taking Snort as the research core,this paper deeply analyzes the implementation mechanism of its fast pattern matching machine and proposes an innovative load balancing strategy based on it.This strategy optimizes the traffic processing mechanism to achieve efficient traffic detection with minimal memory usage,significantly reducing the demand for hardware resources.Through experimental verification,it has been found that in the NFV environment,the performance improvement exceeds 50%compared to the traditional five-tuple hash strategy.

关 键 词：网络功能虚拟化 负载均衡 快速模式匹配器 

分 类 号：TP393.01[自动化与计算机技术—计算机应用技术] TN929.5[自动化与计算机技术—计算机科学与技术]