EvoTrace:基于非线性数据包遥测和批处理的轻量级带内网络遥测方法  

EvoTrace:A Lightweight In-band Network Telemetry Method Based on Nonlinear Embedding and Batch Processing

作　　者：王攀祥 崔允贺 申国伟 郭春[1,2,3] 陈意 钱清 WANG Panxiang;CUI Yunhe;SHEN Guowei;GUO Chun;CHEN Yi;QIAN Qing(Engineering Research Center of Text Computing&Cognitive Intelligence,Ministry of Education,College of Computer Science&Technology,Guizhou University,Guiyang 550025,China;State Key Laboratory of Public Big Data,College of Computer Science&Technology,Guizhou University,Guiyang 550025,China;Provincial Key Laboratory of Software Engineering and Information Security,Guizhou University,Guiyang 550025,China;School of Information,Guizhou University of Finance and Economics,Guiyang 550025,China)

机构地区：[1]贵州大学计算机科学与技术学院文本计算与认知智能教育部工程研究中心,贵阳550025 [2]贵州大学计算机科学与技术学院公共大数据国家重点实验室,贵阳550025 [3]贵州省软件工程与信息安全特色重点实验室,贵阳550025 [4]贵州财经大学信息学院,贵阳550025

出　　处：《计算机科学》2025年第5期291-298,共8页Computer Science

基　　金：国家自然科学基金(62102111);贵州省科技计划项目(黔科合基础-ZK[2022]重点011);贵州省高等学校大数据安全与网络安全创新团队(黔教技[2023]052)。

摘　　要：带内网络遥测(In-band Network Telemetry,INT)使数据包能够携带网络状态信息,具有较高的测量准确性和精度。然而,这种提升是以增加数据平面开销为代价的。遥测信息的嵌入会导致数据平面的网络开销过大。同时,现有的遥测方法通常对大流的数据包进行大量的测量,忽略了对中小流数据包的测量。为了克服上述问题,提出了一个轻量级的INT方法——EvoTrace。EvoTrace设计了一种非线性数据包遥测方法,根据网络流的属性监测不同流的数据包。此外,EvoTrace还采用元数据批处理的方式对遥测元数据进行聚合,以减少网络带宽占用和遥测数据包的数量。在OpenvSwitch(OVS)上实现了EvoTrace并进行了测试,实验结果表明,与现有方法相比,EvoTrace在提高网络流监测覆盖率的同时,节省了40%以上的INT带宽占用。In-band network telemetry(INT)enables packets to carry network state information,achieving high monitoring accuracy and precision.However,this advancement comes at the cost of increased data plane overhead.The embedding of telemetry information results in excessive network overhead within the data plane.Meanwhile,existing telemetry methods usually measure large number of packets from large flows,fails in measuring packets from small and medium flows.To address these issues,this paper proposes a lightweight INT method-EvoTrace.EvoTrace introduces a nonlinear packet telemetry method that monitors packets from different flows according to the attributes of network flows.Additionally,EvoTrace also employs a metadata batching method to aggregate the telemetry metadata,for reducing network bandwidth occupancy and the number of telemetry packets.EvoTrace is implemented on OpenvSwitch(OVS)and tested,experimental results demonstrate that,compared with the existing methods,EvoTrace achieves larger network flow monitoring coverage while saves more than 40%of INT bandwidth occupancy.

关 键 词：网络遥测 可编程数据平面 带内网络遥测 网络测量 软件定义网络 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]