面向SDN/NFV环境的网络功能策略验证

Verification on policies for network functions in SDN/NFV-based environment

SDN与NFV技术带来了网络管理的灵活性与便捷性,但SDN的动态转发策略可能导致网络功能策略失效,同时不同网络功能的策略可能互相影响,引起冲突问题。为了在基于SDN/NFV的云网络中对网络功能的策略进行验证,分析了网络功能与SDN设备之间、跨网络功能之间的策略冲突,建立了统一策略表达进行策略解析,设计策略验证方案、框架并进行原型实现,检验不同场景下的虚拟网络功能策略的正确性,并与现有策略冲突验证方案对比,用实验进行了有效性与性能分析。

Although the newly introduced SDN and NFV technologies bring flexibility and convenience in network management,the dynamic forwarding policies introduced by SDN may cause invalidation in the network function policies,and the policies in different network functions may also cause conflicts due to their own behaviors.In order to verify the policies in SDN/NFV-based cloud network,the verification on policies between the network function and the SDN device,as well as across the network functions were considered.A unified policy expression for analysis was summa-rized,and policy verification scheme,framework and prototype implementation were proposed to verify the correctness of polices in different scenarios,then experiments were conducted to justify the effectiveness and performance.