面向Middlebox的网络资源消耗优化机制的研究

发布时间：2018-01-05 18:07

本文关键词：面向Middlebox的网络资源消耗优化机制的研究　出处：《南京大学》2016年硕士论文　论文类型：学位论文

【摘要】：发展至今,Middlebox在网络中无处不在。它们在网络中各履其职,常见的Middlebox有防火墙、入侵检测／防御系统、负载均衡、宽带接入和广域网优化等。这些Middlebox通常基于昂贵的专有硬件进行部署,不仅需要专业人员维护管理,而且严重影响了设备的更新换代,导致网络运营成本增加。因此网络功能虚拟化(NFV)的概念被提出来,其主要思想在于将底层专有硬件与网络功能软件实体进行解耦,达到提升功能扩展灵活性,降低成本的目的。近几年随着云计算的发展,NFV有部署在云平台上的趋势,这种虚拟化部署为Middlebox扩展提升了灵活性,并使得Middlebox能够得到快速调整。与此同时,Middlebox的异构性、高负载性和云部署的多路特性的结合为网络带来了复杂的资源调度问题,使得CPU资源成为NFV性能的瓶颈之一。也就是说,当网络流量过大时,CPU会出现过载。所以在网络功能虚拟化环境下,减少网络资源消耗(尤其CPU的消耗)的需求越来越显著。目前,已有的工作主要从数据流调度算法的优化和Middbox的重新部署这两方面进行研究,但这些方法不具有根据网络流量变化而实时调整资源分配的动态性,难以满足在工业中灵活部署的需求。结合已有的工作总结,本文提出了一种新的解决方案,通过监测网络流量的变化,动态调整某个Middlebox的功能特性,从而达到降低网络资源消耗的目的。我们基于Click平台将宽带接入服务器、负载均衡、入侵防御系统这三个Middlebox在我们的方案框架下进行部署和实现。实验结果表明,在网络流量过大时,本文提出的方案使得CPU的使用率相对于未采取该方案的系统降低了21.9%,且网络吞吐量提高了23.5%,这说明我们的方案很大程度上防止了CPU使用过载和网络拥塞情况的发生。
[Abstract]:Today, Middlebox is everywhere in the network in the network. They each perform its duty, the common Middlebox firewall, intrusion detection and defense system, load balancing, broadband access and WAN optimization. These Middlebox are expensive proprietary hardware based on the deployment, not only need a professional maintenance and management, but also seriously affected the equipment the update, lead to increased operating costs. So the network network functions Virtualization (NFV) concept is proposed, the main idea is that the underlying proprietary hardware and the network function of software entities are decoupled, to enhance the function of expansion flexibility, reduce costs. In recent years, with the development of cloud computing, NFV has deployed in the cloud platform trend, this virtualization deployment for Middlebox expansion to enhance the flexibility, and makes Middlebox can be quickly adjusted. At the same time, the ISO Middlebox The combination of high load, and the characteristics of multiple cloud deployment brings the resource scheduling problem of complex network, the CPU resources become a bottleneck of the performance of NFV. That is to say, when the network traffic is too large, CPU will be overloaded. So the network function virtualization environment, reduce the consumption of cyber source (in particular, CPU) consumption demand is more and more significant. At present, the main work of optimization and Middbox scheduling algorithm of data from the redeployment of these two aspects of research, but these methods do not have according to the changes of network traffic and real-time dynamic adjustment of resource allocation, it is difficult to meet the demand of flexible deployment in industry. With the summary of previous work, this paper proposes a new solution by changing network traffic monitoring, dynamic adjustment of functional properties of a Middlebox, so as to reduce the consumption of the cyber source. We will be based on the platform of Click broadband access server, load balancing, intrusion prevention system of the three Middlebox in the framework of our scheme for deployment and implementation. The experimental results show that the network traffic is too large, the proposed scheme makes use of CPU rate relative to the non production system of the scheme is reduced by 21.9%, and the network the throughput is increased by 23.5%, which shows that our scheme largely prevent the use of CPU overload and network congestion occurs.

【学位授予单位】：南京大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.06

【相似文献】