Container-based network function virtualization for software-defined networks

Cziva, Richard; Jouët, Simon; White, Kyle J. S.; Pezaros, Dimitrios P.

doi:10.1109/iscc.2015.7405550

Cited by 41 publications

(28 citation statements)

References 10 publications

(7 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Glasgow Network Functions (GNF) 2 [12], [9], [4] is a container-based NFV platform designed for next generation networks. It exploits lightweight, container vNFs deployed as close to the users as possible by using a programmable network edge.…”

Section: Glasgow Network Functionsmentioning

confidence: 99%

Container Network Functions: Bringing NFV to the Network Edge

2017

Self Cite

View full text Add to dashboard Cite

Abstract-In order to cope with the increasing network utilization driven by new mobile clients, and to satisfy demand for new network services and performance guarantees, telecommunication service providers (TSPs or telcos) are exploiting virtualization over their network by implementing network services in Virtual Machines (VMs), decoupled from legacy hardwareaccelerated appliances. This effort, known as Network Function Virtualization (NFV) reduces OPEX and provides new business opportunities.At the same time, next generation mobile, enterprise, and Internet of Things (IoT) networks are introducing the concept of computing capabilities being pushed at the network edge, in close proximity of the users. However, the heavy footprint of today's NFV platforms prevents them from operating at the network edge. In this article, we identify the opportunities of virtualization at the network edge and present Glasgow Network Functions (GNF), a container-based NFV platform that runs and orchestrates lightweight container vNFs, saving core network utilization and providing lower latency. Finally, we demonstrate three useful examples of the platform: IoT DDoS remediation, on-demand troubleshooting for telco networks, and supporting roaming of network functions.

show abstract

Section: Glasgow Network Functionsmentioning

confidence: 99%

Container Network Functions: Bringing NFV to the Network Edge

2017

Self Cite

View full text Add to dashboard Cite

show abstract

“…OpenFlow [4] is the first and most widely used SDN implementation NFV [2] is a transformation in the delivery of network functions from bespoke, specialised hardware, to network functions in software which can run on a range of commodity hardware which can be migrated to, or instantiated at, various locations within the network topology, on demand. This paper builds on our prior SDN+NFV work designed for efficient enterprise networks, Glasgow Network Functions (GNF) [1], tailoring it to meet the needs of UAS ConOps with a suite of specific NFs, modified migration and routing configuration.…”

Section: Related Workmentioning

confidence: 99%

“…Numerous UAS offer migration functionality including the Viking 400. With the FAA transitioning to an IP-based infrastructure through NextGen 1 , and a similar modernisation program taking place in Europe through SESAR 2 , the opportunities to embed state-of-the-art networking infrastructure support for the emerging UAS needs are currently ideal. Present safety regulation ensures early UAV activities take place in areas above low population density outwith controlled airspace.…”

Section: Introductionmentioning

confidence: 99%

A programmable SDN+NFV-based architecture for UAV telemetry monitoring

White

Denney²,

Knudson³

et al. 2017

2017 14th IEEE Annual Consumer Communications &Amp; Networking Conference (CCNC)

Self Cite

View full text Add to dashboard Cite

Abstract-The explosive growth in the worldwide use of Unmanned Aerial Vehicles (UAVs) has raised a critical concern with respect to the adequate management of their ad hoc network configuration as required by their mobility management process. As UAVs migrate among ground control stations, associated network services, routing and operational control must also rapidly migrate to ensure a seamless transition. In this paper, we present a novel, lightweight and modular architecture which supports high mobility and situational-awareness through the application of Software Defined Networking (SDN) and Network Function Virtualization (NFV) principles on top of the UAV infrastructure. By combining SDN+NFV programmability we can achieve a robust migration of UAV-related network services, such as network monitoring and anomaly detection as well as smooth UAV migration that confronts high mobility requirements. The proposed container-based monitoring and anomaly detection Network Functions (NFs) as employed within our architecture can be tuned to specific UAV types providing operators better insight during live, high-mobility deployments. We evaluate our architecture against telemetry from over 80 flights from a scientific research UAV infrastructure showing our ability to tune and detect emerging challenges.

show abstract

“…This approach makes it significantly easier to produce a Distributed IDS that adapts to the architecture of specific data centres. Moreover, the functionality provided by bolts and spouts can be deployed directly on network infrastructure or collocated with some network devices by leveraging NFV [13], [14], [15] which gives Storm the potential to bridge the gap between the Hadoop based systems and the requirements of the current high speed networks. …”

Section: Related Workmentioning

confidence: 99%

Distributed network anomaly detection on an event processing framework

Pamukchiev

Jouët

Pezaros

2017

2017 14th IEEE Annual Consumer Communications &Amp; Networking Conference (CCNC)

Self Cite

View full text Add to dashboard Cite

Abstract-Network Intrusion Detection Systems (NIDS) are an integral part of modern data centres to ensure high availability and compliance with Service Level Agreements (SLAs). Currently, NIDS are deployed on high-performance, high-cost middleboxes that are responsible for monitoring a limited section of the network. The fast increasing size and aggregate throughput of modern data centre networks have come to challenge the current approach to anomaly detection to satisfy the fast growing compute demand.In this paper, we propose a novel approach to distributed intrusion detection systems based on the architecture of recently proposed event processing frameworks. We have designed and implemented a prototype system using Apache Storm to show the benefits of the proposed approach as well as the architectural differences with traditional systems. Our system distributes modules across the available devices within the network fabric and uses a centralised controller for orchestration, management and correlation. Following the Software Defined Networking (SDN) paradigm, the controller maintains a complete view of the network but distributes the processing logic for quick event processing while performing complex event correlation centrally. We have evaluated the proposed system using publicly available data centre traces and demonstrated that the system can scale with the network topology while providing high performance and minimal impact on packet latency.

show abstract

Container-based network function virtualization for software-defined networks

Cited by 41 publications

References 10 publications

Container Network Functions: Bringing NFV to the Network Edge

Container Network Functions: Bringing NFV to the Network Edge

A programmable SDN+NFV-based architecture for UAV telemetry monitoring

Distributed network anomaly detection on an event processing framework

Contact Info

Product

Resources

About