期刊文献+

软件定义网络中DPI功能节点的部署研究 被引量:2

Research on deployment of DPI function nodes in SDN
下载PDF
导出
摘要 在软件定义网络(SDN)环境下,通过深度包检测(DPI)技术对网络流量进行分类识别。在应用层部署的DPI功能节点越多,网络流量分析的总处理时延就越小。但由于DPI节点的部署成本昂贵,因此需要优化部署方案。针对SDN中DPI节点部署问题,根据QoS处理时延,对DPI节点进行负载均衡,将该问题抽象为多商品流的线性规划问题,并设计基于成本的两阶段贪心算法加以解决。通过贪心策略为入口交换机选择低成本的DPI节点,并针对流处理过程进行负载均衡,进而通过搜素算法寻找最短路径用以降低时延。实验结果表明,该方法优化了DPI节点部署成本,提升了流量分析与检测的请求成功率。 In software defined network(SDN)environment,network traffic is classified and identified by the deep packet inspection(DPI) technology. The more DPI function nodes deployed in the application layer,the smaller the total processing delay of network traffic analysis. But due to the high cost of deploying DPI nodes,it is necessary to optimize the deployment plan. In allusion of the deployment problem of DPI function nodes in SDN environment,the load balancing is performed for DPI function nodes according to QoS processing delay,and the deployment problem of DPI function nodes can be abstracted into linear programming problem of multi-commodity flow. The cost-based two-stage greedy algorithm is proposed in this paper to solve the problem. The low-cost DPI nodes can be selected for the entry switch by the greedy strategy. The load balancing is adopted for the process of flow processing to find the shortest path by means of the search algorithm,so as to decrease the delay.The experimental results show that the method has optimized the cost of deploying the DPI nodes and improved the success rate of requesting flow analysis and detection.
作者 朱丹红 李洪 张栋 何振峰 ZHU Danhong;LI Hong;ZHANG Dong;HE Zhenfeng(College of Mathematics and Computer Science,Fuzhou University,Fuzhou 350116,China)
出处 《现代电子技术》 2021年第4期119-123,共5页 Modern Electronics Technique
基金 福建省自然科学基金(2018J01796) 教育部科技发展中心高校产学研创新基金项目(2018A01020)。
关键词 节点部署 软件定义网络 深度包检测 QoS时延 负载均衡 线性规划 node deployment software defined network deep packet inspection QoS delay load balancing linear programming
  • 相关文献

参考文献6

二级参考文献71

  • 1熊焰,陈欢欢,苗付友,王行甫.一种解决组合优化问题的量子遗传算法QGA[J].电子学报,2004,32(11):1855-1858. 被引量:50
  • 2Mckeown N, Anderson T, Balakrishnan H, Parulkar G, Peterson L, Rexford J, Shenker S, Turner J. OpenFlow: Enabling innovation in campus networks. ACM SIGCOMM Computer Communication Review, 2008,38(2):69-74. [doi: 10.1145/1355734. 1355746]. 被引量:1
  • 3Elliott C. GENI: Opening up new classes of experiments in global networking. IEEE Internet Computing, 2010,14(1):39-42. 被引量:1
  • 4Gavras A, Karila A, Fdida S, May M, Potts M. Future Internet research and experimentation: The FIRE initiative. ACM SIGCOMM Computer Communication Review, 2007,37(3):89-92. [doi: 10.114511273445.1273460]. 被引量:1
  • 5JGN2plus. 2012. http://www.jgn.nict.go.jp/english/index.html. 被引量:1
  • 6SOFIA. 2012. http://fi.ict.ac.cn/research/sofia_overview.htm. 被引量:1
  • 7Yang L, Dantu R, Anderson T, Gopal R. Forwarding and Control Element Separation (ForCES) Framework. RFC 3746, 2004. http://tools.ietf.org/html/rfc3746. 被引量:1
  • 8Greenberg A, Hjalmtysson G, Maltz DA, Myers A, Rexford J, Xie G, Yan H, Zhan J, Zhang H. A clean slate 4D approach to network control and management. ACM SIGCOMM Computer Communication Review, 2005,35(5):41-54. [doi: 10.1145/1096536. 1096541]. 被引量:1
  • 9Caesar M, Caldwell D, Feamster N, Rexford J, Shaikh A, Merwe J. Design and implementation of a routing control platform. In: Proc. of the 2rd USENIX Symp. on Networked Systems Design and Implementation (NSDI). Boston: USENIX Association, 2005. 15-28. 被引量:1
  • 10Casado M, Garfinkel T, Akella A, Freedman MJ, Boneh D, Mckeown N, Shenker S. SANE: A protection architecture for enterprise networks. In: Proc. of the 15th Conf. on USENIX Security Symp. Vancouver: USENIX Association, 2006. 137-151. 被引量:1

共引文献435

同被引文献13

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部