安全服务链中虚拟网络功能分配与调度算法研究

Research on algorithm of VNF allocation and scheduling problems in security service chain

安全服务链中的虚拟网络功能(virtual network function,VNF)将传统网络安全功能与硬件设备解耦,使得服务功能的部署更具动态性和可扩展性。然而VNF向节点的合理分配以及节点上VNF的高效调度问题仍亟待解决。为此,基于软件定义网络(software defined network,SDN)和网络功能虚拟化(network function virtuali-zation,NFV)环境,提出基于优化算法的解决方案。对资源分配与调度问题进行举例并形式化定义问题的优化目标,提出基于贪心算法的资源分配方案和基于混合蜂群算法的资源调度方案,统一协调解决VNF的资源分配与调度问题。仿真实验验证,所提算法的时间复杂性和在总资源成本及总服务收益方面的提升,对比混合蜂群算法和传统蜂群算法,结果显示前者具有更快的收敛速度。

The virtual network function in the security service chain decouples the traditional network security functions from the hardware devices,making the deployment of service functions more dynamic and extensible.However,the rational allocation of the VNF to the node and the efficient scheduling of the VNF on the node still need to be solved urgently.To this end,this paper presented a solution using optimization algorithm based on the software defined network and network function virtualization environment.First,it made an example of resource allocation and scheduling problem and formalized the objective.Then,this paper proposed a resource allocation scheme based on greedy algorithm and a resource scheduling scheme based on hybrid bee colony algorithm to solve the problem coordinately.Finally,it designed the simulation experiment to verify the time complexity and the improvement of total resource cost and total service income of the proposed algorithm.Meanwhile,it compared the hybrid bee colony algorithm with the traditional bee colony algorithm.The results indicate that the former has better convergence rate.