- Conference Article
1
- 10.1109/cloudnet.2012.6483672
Strong virtual network authentication using EAP-TLS smart-cards
- Nov 01, 2012
- Fouad Amine Guenane + 1 more +1
International audience
With the expansion of cloud computing, virtual network (VN) migration becomes the very perspective technology for saving energy, ensuring Service Level Agreements or improving the survivability of virtual networks in cloud networks. At present, the majority of research on the VN migration, however, are for saving energy or improving resource utilizations, and few of them for the entire virtual network migration for guaranteeing QoS or improving the survivability of virtual networks. Since the regional failure, network maintenance or QoS violation, the service provider generally needs to migrate the VN for guaranteeing the QoS or improving the survivability of virtual networks. In the paper, we research the live migration problem of the virtual network to optimize the virtual network migration performance. To efficient migrate virtual network, we present an effective VN migration method, VNM. To control the cost of migration or migration traffic, based on the VNM algorithm, we present an effective VN migration method with migration traffic control, VNM-MTC. We use two networks as substrate networks to simulate the performances of our presented algorithms. From the experiment, we can see that the total VN reconfiguration cost, total VN redeployment cost, total VN migration cost and blocking ratio of our presented algorithms are better than that of the contrast algorithm.
Strong virtual network authentication using EAP-TLS smart-cards
International audience
Power-Efficient Provisioning for Online Virtual Network Requests in Cloud-Based Data Centers
A cloud computing paradigm enables users to access services, applications, and infrastructure resources by using thin clients anywhere and at any time. In this paradigm, multiple users can share cloud infrastructure resources. The application or service requests from a user can be abstracted as a virtual network (VN) request and can be submitted to the cloud-based data centers. How to map a VN onto the cloud infrastructure network is a challenging issue in cloud resource provisioning. Thus, efficient mapping techniques that intelligently use the resources of cloud infrastructure are important and necessary. Current research on VN mapping and design focuses on resource-efficient VN mapping or cost-efficient VN mapping. However, there is another important issue in cloud-based data centers that we must pay attention to, i.e., the amount of power or energy that is consumed by a data center. The power consumption in data centers can be a significant percentage of the total power consumption, and it not only leads to a higher data center operating cost but also contributes to carbon emissions and the greenhouse effect. In this paper, we propose a power-efficient resource provisioning technique in cloud-based data centers while complying with service level agreements. We first model a power-efficient VN provisioning problem as a mathematical optimization problem, with the objective of minimizing the power consumption by employing mixed-integer programming. We then propose a heuristic algorithm to efficiently solve this model since this optimization problem is NP-hard. We validate and evaluate our framework and algorithm by conducting extensive simulations on different cloud infrastructure networks under various scenarios. The simulation results show that our approach performs well.
Read moreTowards Promoting Backup-Sharing in Survivable Virtual Network Design
In a virtualized infrastructure where multiple virtual networks (or tenants) are running atop the same physical network (e.g., a data center network), a single facility node (e.g., a server) failure can bring down multiple virtual machines, disconnecting their corresponding services and leading to millions of dollars in penalty cost. To overcome losses, tenants or virtual networks can be augmented with a dedicated set of backup nodes and links provisioned with enough backup resources to assume any single facility node failure. This approach is commonly referred to as Survivable Virtual Network (SVN) design. The achievable reliability guarantee of the resultant SVN could come at the expense of lowering the substrate network utilization efficiency, and subsequently its admissibility, since the provisioned backup resources are reserved and remain idle until failures occur. Backup-sharing can replace the dedicated survivability scheme to circumvent the inconvenience of idle resources and reduce the footprints of backup resources. Indeed the problem of SVN design with backup-sharing has recurred multiple times in the literature. In most of the existing work, designing an SVN is bounded to a fixed number of backup nodes; further backup-sharing is only explored and optimized during the embedding phase. This renders the existing redesign techniques agnostic to the backup resource sharing in the substrate network, and highly dependent on the efficiency of the adopted mapping approach. In this paper, we diverge from this dogmatic approach, and introduce ProRed, a novel prognostic redesign technique that promotes the backup resource sharing at the virtual network level, prior to the embedding phase. Our numerical results prove that this redesign technique achieves lower-cost mapping solutions and greatly enhances the achievable backup sharing, boosting the overall network's admissibility.
Read morePR-VNE: Preventive reliable virtual network embedding algorithm in cloud's network
In this paper, we propose a new preventive reliable virtual network embedding algorithm denoted by PR-VNE within the Cloud's backbone network. The proposal does not allocate any backup resources and takes into consideration the ageing of the hardware backbone network. The main objective is to maximise the number of hosted virtual networks while minimising the rate of crashed virtual networks impacted by physical (i.e., routers or links) failures. The problem is a multi-objective non-linear optimisation and classified as NP-hard. To overcome its complexity, PR-VNE is based on the artificial bee colony metaheuristic. Moreover, it makes use of a multi commodity flow algorithm in order to maximise the load balancing of bandwidth usage within the physical network. Based on extensive simulations, the performance obtained is better than the related strategies found in literature in terms of reject and blackout rates of virtual networks.
Read moreResilience options for provisioning anycast cloud services with virtual optical networks
Optical networks are crucial to support increasingly demanding cloud services. Delivering the requested quality of services (in particular latency) is key to successfully provisioning end-to-end services in clouds. Therefore, as for traditional optical network services, it is of utter importance to guarantee that clouds are resilient to any failure of either network infrastructure (links and/or nodes) or data centers. A crucial concept in establishing cloud services is that of network virtualization: the physical infrastructure is logically partitioned in separate virtual networks. To guarantee end-to-end resilience for cloud services in such a set-up, we need to simultaneously route the services and map the virtual network, in such a way that an alternate routing in case of physical resource failures is always available. Note that combined control of the network and data center resources is exploited, and the anycast routing concept applies: we can choose the data center to provide server resources requested by the customer to optimize resource usage and/or resiliency. This paper investigates the design of scalable optimization models to perform the virtual network mapping resiliently. We compare various resilience options, and analyze their compromise between bandwidth requirements and resiliency quality.
Read moreProposal of Virtual Network Configuration Acquisition Function for Data Center Operations and Management System
Virtualization technologies have been widely deployed in data centers to improve the system utilization. However, they cause increased workload for operators to clarify the structure of virtual networks in data centers. To reduce the operation time, this paper provides the virtual-network management system which automates the integration of the configurations of the virtual networks. The proposed system collects the configurations from server virtualization platforms and VLAN-supported switches, and integrates these configurations according to the newly developed XML-based management information model for virtual-network configurations. The preliminary evaluations show that the proposed system helps to reduce the time to collect and update the configurations by about 40 percent. This result implies that the proposed system is effective for improving the configuration management process for virtual networks in data centers.
Read moreCoMap: An efficient virtual network re-mapping strategy based on coalitional matching theory
CoMap: An efficient virtual network re-mapping strategy based on coalitional matching theory
Virtual Network Provisioning over Mixed-Fixed/Flexible-Grid Optical Infrastructures
With the emergence of cloud services based on data centers, demands for bandwidth-intensive applications have increased dramatically, and application services have transferred to a more diversified direction. Management as well as capacity of the backbone network needs further development to catch up with rapidly evolved application demands. Optical network virtualization can facilitate the sharing of physical infrastructure among multiple network applications. Virtual Network Embedding (VNE), the main implementation of network virtualization, determines how to map a virtual network request onto physical substrate. To expand the network capacity, flexible-grid elastic optical networks have been considered as a promising supporting technology for the future infrastructure of the next-generation Internet. However, due to the expense of key enabling equipment for flexible grid optical networks, the brown-field migration from a fixed grid to a flexible grid gave birth to the co-existing fixed/flexible grid. Based on the co-existing fixed/flexible grid optical networks, we investigate the problem of Virtual Optical Network (VON) provisioning, and present a flexible-grid-aware virtual network embedding algorithm to map the virtual networks onto the substrate network. In addition, the performance of the algorithm was evaluated under four different network scenarios. Simulation results show that the proposed algorithm can achieve better performance in all four scenarios.
Read moreGreen virtual network embedding with supervised self-organizing map
Green virtual network embedding with supervised self-organizing map
Scheduling Virtual Network Reconfigurations in Parallel in Hybrid Optical/Electrical Datacenter Networks
A hybrid optical/electrical datacenter network (HOE-DCN) integrates the benefits of electrical packet switching (EPS) and optical circuit switching (OCS) for better architectural scalability. Meanwhile, as each network service usually involves multiple virtual machines (VMs) that form a virtual network (VNT), how to reconfigure the VNTs in an HOE-DCN to adapt to the dynamic network environment becomes an interesting and important problem to tackle. In this work, we optimize the procedure of VNT reconfigurations that remap VNTs to given virtual network embedding (VNE) schemes, <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">i.e.</i> , scheduling the required VM migrations and optical cross-connect (OXC) reconfiguration properly such that the overall VNT reconfiguration latency can be minimized. We first assume that all the VM migrations should be scheduled before the OXC reconfiguration to minimize service interruptions, and formulate a mixed integer linear programming (MILP) model to solve the scheduling problem exactly. Then, with the same assumption, we propose a time-efficient heuristic to schedule parallel VM migrations in batches such that the bandwidth competition can be significantly relieved. Finally, we divide the OXC reconfiguration into several progressive steps, and design a joint scheduling algorithm to arrange VM migrations together with the OXC reconfiguration steps.
Read moreИСПОЛЬЗОВАНИЕ ТЕХНОЛОГИИ ВИРТУАЛЬНЫХ ЧАСТНЫХ СЕТЕЙ VPN (VIRTUAL PRIVATE NETWORK) ДЛЯ ПЕРЕДАЧИ СИГНАЛОВ В КОРПОРАТИВНЫХ СЕТЯХ
This paper discusses some modes of signal transmission for corporate systems using the technology of virtual private networks VPN. A very important property of tunnels is the ability to differentiate different types of traffic and assign them the necessary service priorities. In this work, research has been carried out and comparative characteristics of signal transmission modes using virtual networks have been obtained to identify the effectiveness of the network in various modes of organizing a virtual network, and to optimize a virtual network in order to identify an effective method for organizing a VPN. Also, the work analyzes the specifics of the work of corporate information systems and networks intended for their maintenance, showed that for building a corporate network it is advisable to use virtual private network (VPN) technology, which makes it possible to ensure the fulfillment of the basic requirements for the security and quality of customer service and applications and the current state and direction of development of VPN technology when creating new generation corporate networks, while highlighting the main tasks that need to be addressed when creating a network. Some features of setting up an IPSec VPN server for corporate networks are considered.
Read moreSVirt: A Substrate-agnostic SDN Virtualization Architecture for Multi-tenant Cloud
Data center operators are accepting software defined networking (SDN) to manage their networks, but it remains challenging how to provide desirable virtual SDN services to tenants in a public cloud. We design SVirt, which enables highly flexible virtual SDN in a multi-tenant cloud by a substrate-agnostic SDN virtualization architecture. By redesigning the physical switch's processing pipeline with a late-binding key extractor, SVirt supports virtual SDN switches with different processing pipelines simultaneously on a physical switch. In the control plane, SVirt enables many-to-one and one-to-many mapping when allocating the physical resource for a virtual network, which embraces arbitrary topology and TCAM resource demanded by a virtual network. In the data plane, SVirt explicitly carries the forwarding context information in the packets, overcoming the context-loss problem in a virtual SDN network. We develop a NetFPGA prototype of SVirt switch. Evaluations based on event-driven simulations and prototype-based experiments demonstrate that, compared with traditional approaches, SVirt significantly enhances the cloud's capability to accept various virtual SDN requests and improves the network's throughput.
Read moreAvailability-Aware Survivable Virtual Network Embedding in Optical Datacenter Networks
In this work, we study the availability-aware survivable virtual network embedding (A-SVNE) problem in optical interdatacenter networks that use wavelength-division multiplexing. With A-SVNE, we try to satisfy the availability requirement of each virtual component (i.e., a virtual link or a virtual node) in a virtual network. We first analyze the availability of a virtual component based on the availabilities of the substrate link(s) and node(s). Then, we formulate an integer linear programming model for the A-SVNE problem and propose several time-efficient heuristics. Specifically, we design two node mapping strategies: one is sequential selection using efficient weights defined by the availability information, while the other uses auxiliary graphs to transform the problem into a classical problem in graph theory, i.e., the maximum-weight maximum clique. Finally, we use extensive simulations to compare the proposed A-SVNE algorithms with existing ones in terms of the blocking probability, availability gap, and penalty due to service-level agreement violations, and the results indicate that our algorithms perform better.
Read moreA survey on foundation for future generation internet through network virtualization
In earlier days there were standalone systems that did all the processing. As time passed on, there was a tremendous increase in data getting generated which ultimately led to large processing. Moreover the systems and applications also got distributed to cope up with the increase in data processing with one reason being the downfall in the prices of the electronic devices. Today is the period of cloud which is felt as the successor of grid. Cloud computing is a model of computing where the IT resources need of the customers is satisfied. The true advantage of cloud usage is felt only when the services that are requested by the end users are made available without interrupt. This in turn requires a good network. So as the machines got virtualized to utilize the maximum processing power, the network was also thought to be made virtualized. This could lead to a new era of converging cloud computing and networking by means of Service Oriented Architecture which is basically integrating different kind of services. In this paper we present a survey of different systems that support network virtualization. Also we bring out the challenges in a detailed manner that is faced while making convergence of cloud and network services. We also propose a theoretical model that lays a foundation for future generation internet. This is an empirical model where the results are probabilistic which is mainly due to the unpredictable nature of the network. By means of network virtualization, the composite cloud-network service is presented to the end user and the user by making use of some heuristic search algorithm, can select the service which offers the desired QoS.
Read moreABLA: Application-Based Load-Balanced Approach for Adaptive Mapping of Datacenter Networks
Cloud-based services are growing more rapidly than ever, and so does the management challenge on their providers’ side. Cloud-based datacenter networks are built with nodes of huge processing power, connected by high bandwidth capacities to carry their interior traffic requirements. However, such cloud networks still have limits that are imposed not necessarily by their physical components, but by the schemes of resource management being deployed. Traditionally, for an institute to provide services, it needs to have its own datacenter facility that interconnects its servers through a topology that matches its desired administrative policies and scaling objectives. With the theme of cloud-based IaaS, such datacenter topologies can be created virtually over the cloud. Nowadays, a significant part of those institutes who provide us with our daily services have their infrastructures hosted over cloud ones. Therefore, resources of such cloud networks need to be efficiently utilized, in order to keep their performance and hosting prices competitive. A typical datacenter network mainly consists of server nodes and network links. Besides the resources of the server nodes, the network bandwidth resources are considered a crucial key determinant for the whole datacenter performance. Indeed, a server without sufficient bandwidth capacities is almost useless. Proposals in the literature present schemes for resource utilization on either side of the problem at a time: the nodes or the links. Working in isolation can never deliver efficient mapping solutions. ABLA is an Application-Based, and Load balancing Approach for adaptive mapping proposal. ABLA’s methodology tackles both sides of the datacenter, the nodes and links. It starts by (1) breaking down the node’s resource requirement for the requested applications to be hosted over the virtual server machines besides (2) reading the topological connectivity and bandwidth requirements for each virtual node to all other nodes in the virtual datacenter topology. Compared to other models in the literature, the simulation results show that our proposed ABLA model provides for complete mapping services via load-balanced hosting networks. This allows for competitive hosting prices, with higher performance and service satisfaction rates.
Read more