Enhancing dynamic cloud-based services using network virtualization

Hao, Fang; Lakshman, T. V.; Mukherjee, Sarit; Song, Haoyu

doi:10.1145/1672308.1672322

Cited by 73 publications

(34 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We assume that the service request patterns change over time, e.g., due to commuting users, due to timezone effects, or due to unexpected events in sports or politics, rendering it worthwhile to migrate the service to different locations. For instance, it can make sense to transfer a service from China to Europe at night, to improve the access to the service both in terms of latency as well as cost (e.g., due to roaming) [18].…”

Section: Introductionmentioning

confidence: 99%

The Wide-Area Virtual Service Migration Problem: A Competitive Analysis Approach

Bieńkowski

Feldmann

Grassler

et al. 2014

IEEE/ACM Trans. Networking

View full text Add to dashboard Cite

Abstract-Today's trend towards network virtualization and software-defined networking enables flexible new distributed systems where resources can be dynamically allocated and migrated to locations where they are most useful. This article proposes a competitive analysis approach to design and reason about online algorithms that find a good tradeoff between the benefits and costs of a migratable service. A competitive online algorithm provides worst-case performance guarantees under any demand dynamics, and without any information or statistical assumptions on the demand in the future. This is attractive especially in scenarios where the demand is hard to predict and can be subject to unexpected events.As a case study, we describe a service (e.g., an SAP server or a gaming application) that uses network virtualization to improve the Quality-of-Service (QoS) experienced by thin client applications running on mobile devices. By decoupling the service from the underlying resource infrastructure, it can be migrated closer to the current client locations while taking into account migration costs. We identify the major cost factors in such a system, and formalize the wide-area service migration problem. Our main contribution are a randomized and a deterministic online algorithm that achieve a competitive ratio of O(log n) in a simplified scenario, where n is the size of the substrate network. This is almost optimal. We complement our worst-case analysis with simulations in different specific scenarios, and also sketch a migration demonstrator.

show abstract

Section: Introductionmentioning

confidence: 99%

The Wide-Area Virtual Service Migration Problem: A Competitive Analysis Approach

Bieńkowski

Feldmann

Grassler

et al. 2014

IEEE/ACM Trans. Networking

View full text Add to dashboard Cite

show abstract

“…6. Early research on data center networks investigated architectural construction, operation and scalability of DCs [6], [7], [8], [9], [10], [11]. Joint VM placement and routing for data center traffic engineering was addressed by [12].…”

Section: B Energy Consumptionmentioning

confidence: 99%

Dynamic Virtual Network Traffic Engineering with Energy Efficiency in Multi-location Data Center Networks

Maswood

Develder

Madeira

et al. 2016

2016 28th International Teletraffic Congress (ITC 28)

View full text Add to dashboard Cite

Abstract-For cloud enterprise customers that require services on demand, data centers must allocate and partition data center resources in a dynamic fashion. We consider the problem in which a request from an enterprise customer is mapped to a virtual network (VN) that is allocated requiring both bandwidth and compute resources by connecting it from an entry point of the datacenter to one or more servers, should this data center be selected from multiple geographically distributed data centers. We present a dynamic traffic engineering framework, for which we develop an optimization model based on a mixed-integer linear programming (MILP) formulation that a data center operator can use at each review point to optimally assign VN customers. Through a series of studies, we then present results on how different VN customers are treated in terms of request acceptance when each VN class has a different resource requirement. We found that a VN class with a low resource requirement has a low blocking even in heavy traffic, while the VN class with a high resource requirement faces a high service denial. On the other hand, cost for the VN with the highest resource requirement is not always the highest in the heavy traffic because of the significantly high service denial faced by this VN class.

show abstract

“…Ping is used here as virtualization products do not expose TMT and DT themselves (Salfner et al 2011). Similar approach was used in Fang Hao"s study to estimate DT (Hao et al 2009). The ping requests were directed to the target VM from remote VM after every 0.5 second and 0.01 second intervals (I).…”

Section: Experiments Designmentioning

confidence: 99%

“…The machine has firewall policy that allows the ICMP packet transmission. The firewall log files are analyzed to calculate TMT and DT (Salfner et al 2011;Hao et al 2009). UT for VF is measured as no other metric to measure uptime for VF is exposed by VF vendor or Cloud provider (Salfner et al 2011).…”

Section: Problem Definitionmentioning

confidence: 99%

Virtual firewalling for migrating virtual machines in cloud computing

Anwar

2013

2013 5th International Conference on Information and Communication Technologies

View full text Add to dashboard Cite

Context. Cloud Computing (CC) uses virtualization to provide computing resources on demand viaInternet. Small and large organizations benefit from CC because of reduced operating costs and increase in business agility. The migrating Virtual Machine (VM) is vulnerable from attacks such as fake migration initiations, service interruptions, manipulation of data or other network attacks. During live migration any security lax in VM firewall policy can put the VM data, OS and the applications on it at risk. A malicious VM can pose threat to other VMs in its host and consequently for VMs in LAN. Hardware firewalls only protect VM before and after migration. Plus, they are blind to virtual traffic. Hence, virtual firewalls (VFs) are used to secure VMs. Mostly; they are deployed at Virtual Machine Monitor-level (VMM) under Cloud provider"s control. Source VMM-level VF provides security to VM before the migration incurs and the destination VMM-level VF starts securing VM after migration is completed. It thus, becomes possible for attacker to use the intermediate migrating window to launch attacks on VM. Considering the potential of VFs there should be a great value in using open source VFs at VM-level for protecting VMs during migration, thereby, reducing the attacker"s slot to gain access to VM. It would enable hardened security for overall VM migration.Objectives. The aim is to investigate VM-level firewalling using open source firewall as a complementary security layer to VMM-level firewalling, to secure migrating VM in the CC domain. The first objective is to identify how virtual firewalls secure migrating VM in CC and to propose VMlevel open-source virtual firewalling for protecting VM during migration. Later the VF is implemented to validate and evaluate its intactness or activeness during migration in real Cloud data center.Methods. In the literary review 9 electronic libraries are used, which include IEEE Xplore, ACM Digital Library, SCOPUS, Engineering Village and Web of Knowledge. Studies are selected after querying libraries for 2 key terms "virtual machine" and "migration" (along with other variations/synonyms), in the abstract. Relevant papers on the subject are read and analyzed. Finally, the information gaps are identified. Using a lacuna the experimental solution is designed. To test the potential of VF at VM-level for migrating VM"s security the experimental validation is performed using stratification samples of firewall rules. The VF evaluation is done using continuous ICMP echo packet transmission. The packets are analyzed to determine firewall behavior during migration. To evaluate the validity, the VM migration is performed 8 times in City Network data center.Results. The literary review identified the widespread use of VMM-level firewalling for migrating VM"s security in CC. The VM-level VFs were not researched nor evaluated for intactness during migration. The experiment performed at City Network demonstrated that the VM-level VF secures VM during migration (on average) for 96% of migrati...

show abstract

Enhancing dynamic cloud-based services using network virtualization

Cited by 73 publications

References 13 publications

The Wide-Area Virtual Service Migration Problem: A Competitive Analysis Approach

The Wide-Area Virtual Service Migration Problem: A Competitive Analysis Approach

Dynamic Virtual Network Traffic Engineering with Energy Efficiency in Multi-location Data Center Networks

Virtual firewalling for migrating virtual machines in cloud computing

Contact Info

Product

Resources

About