首页|基于SRv6技术的云网安全服务链自动编排方法

基于SRv6技术的云网安全服务链自动编排方法

扫码查看
为提高云网数据中心的资源利用率、节约通信开销,基于SRv6(Segment Route IPv6)技术设计一种云网安全服务链自动编排方法.本文方法辅助并引导网络数据包沿着指定路径通过云网,确定报文的具体转发路径,减少对服务节点的依赖;建立最小化总带宽的目标函数,结合多种约束条件,满足自动编排的安全性;定义本地行为报文,架构安全服务链自动编排框架,建立安全服务策略,解决策略冲突和网络流调度问题,达到服务链的安全编排.实验结果表明,本文方法能有效地实现云网服务链自动编排,减少CPU平均总带宽消耗,提升用户的请求成功率,降低云网中边缘设备的负载,节省通信开销.
Automatic Arrangement Method of Cloud Network Security Service Chain Based on SRv6 Technology
To improve the resource utilization rate of cloud network data centers and save communication costs,a cloud network security service chain automatic orchestration method is designed based on SRv6(Segment Route IPv6)technology.The method assists and guides network data packets to pass through the cloud network along the specified path,determines the specific for-warding path of the message,and reduces dependence on service nodes;establishes an objective function to minimize the total bandwidth,combines with various constraints to meet the security requirements of automatic orchestration;defines local behav-ior message,constructs automatic arrangement framework of security service chain,establishes security service policy,solves policy conflict and flow network scheduling problem,and achieves security arrangement of service chain.Experimental results show that the proposed method can effectively implement the automatic scheduling of cloud service chain,reduce the average to-tal bandwidth consumption of CPU,improve the success rate of user requests,reduce the load of edge device in the cloud,and save communication costs.

SRv6 technologycloud network securitysecurity service chainautomatic arrangementscheduling optimization

王宏杰、徐胜超、杨波、毛明扬、蒋金陵

展开 >

广州华商学院数据科学学院,广东 广州 511300

SRv6技术 云网安全 安全服务链 自动编排 调度优化

国家自然科学基金面上项目广东省华商学院校内科研导师制项目

617722212023HSDS30

2024

计算机与现代化
江西省计算机学会 江西省计算技术研究所

计算机与现代化

CSTPCD
影响因子:0.472
ISSN:1006-2475
年,卷(期):2024.(1)
  • 1