基于OpenFlow的服务链研究与设计

发布时间：2019-06-12 19:46

【摘要】：服务链一词指的是,流量需要按照特定的业务逻辑有次序地经过特定的服务节点,如防火墙和服务均衡器等等。在传统网络的服务链实现中,灵活性较差,自动化的程度较低,网络功能虚拟化(Network Function Virtualization,NFV)和软件定义网络(Software Defined-Networking,SDN)两类技术的出现可以有效地解决上述问题。目前,业界对于基于SDN/NFV的服务链有很多的实现。本文首先对现有的基于SDN/NFV的服务链设计方案,包括学术界研究、商用产品、IETF标准以及开源项目,进行了全面、深入的介绍与分析。然后,文章梳理出了服务链实现中整体架构与关键技术,包括模块与接口设计、服务节点插入、流量分类与引导、性能与高可用等多个方面。这一工作为课题后半部分的方案创新设计提供了理论上的基础。以数据中心的场景为依托,本课题设计了一套新型的服务链实现方案。方案利用了 MAC地址中冗余的比特位,基于OpenFlow灵活的流量处理能力,对MAC地址进行了重新的编码,有效地支持了服务链的基础和扩展功能。相比于IETF提出的服务链专用的NSH封装,本方案可以避免由于新包头封装所造成的计算资源和网络资源的开销,并能够较好地兼容现有的以太网交换机,降低服务链系统的总体拥有成本。
[Abstract]:The word service chain refers to the need for traffic to pass through specific service nodes in order according to specific business logic, such as firewalls, service equalizers, and so on. In the traditional network service chain implementation, the flexibility is poor, the automation degree is low, the network function virtualization (Network Function Virtualization,NFV) and the software definition network (Software Defined-Networking,SDN) two kinds of technologies can effectively solve the above problems. At present, the industry has a lot of implementation for SDN/NFV-based service chain. In this paper, the existing SDN/NFV-based service chain design schemes, including academic research, commercial products, IETF standards and open source projects, are comprehensively and deeply introduced and analyzed. Then, the paper combs out the overall architecture and key technologies in the implementation of the service chain, including module and interface design, service node insertion, traffic classification and guidance, performance and high availability. This work provides a theoretical basis for the innovative design of the second half of the project. Based on the scene of data center, a new service chain implementation scheme is designed in this paper. The scheme makes use of the redundant bits in MAC address, and reencodes the MAC address based on the flexible traffic processing ability of OpenFlow, which effectively supports the basic and extended functions of the service chain. Compared with the special NSH encapsulation of service chain proposed by IETF, this scheme can avoid the overhead of computing resources and network resources caused by new packet header encapsulation, and can be better compatible with existing Ethernet switches and reduce the overall cost of ownership of service chain system.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.0

【相似文献】