Realization of VXLAN Gateway-Based Data Center Network Virtualization

Junji, Kinoshita; Maeda, Kazuhiro; Yabusaki, Hitoshi; Akune, Ken; Komoda, Norihisa

doi:10.1109/iiai-aai.2016.121

Cited by 2 publications

(2 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, overlay network architecture, which is a type of virtualization technology mode superimposed on the network architecture, emerges as a current requirement. Its typical technical implementation includes VXLAN (Virtual eXtensible LAN) and NVGRE (Network Virtualization using Generic Routing Encapsulation) [10,11]. The VXLAN protocol greatly increases the number of VLANs and realizes cross-regional two-layer interconnection.…”

Section: Related Workmentioning

confidence: 99%

Dynamic Control Method for Tenants’ Sensitive Information Flow Based on Virtual Boundary Recognition

Lu¹,

Cao²,

Du³

2020

IEEE Access

View full text Add to dashboard Cite

In the cloud environment, owing to the large-scale sharing of the upper application instance and the underlying virtual machine resources, the tenants' information flow boundary in the shared virtual machine is fuzzy and difficult to identify. In addition, protection of tenant information flow between processes is inadequate, resulting in the leakage of sensitive information of tenants. Therefore, a dynamic control method for tenants' sensitive information flow based on virtual boundary recognition is proposed. By analyzing the behavior and operation log of tenants, the behavior feature vectors of tenants are constructed, and an automatic recognition algorithm of tenant virtual boundary based on the dynamic spiking neural network is designed. This algorithm can realize dynamic identification of the tenant virtual security boundary when the application service demand changes dynamically. Further, combined with the concept of centralized and decentralized information flow control, a dynamic control method of sensitive information flow is established. The security label is formally defined by using the lattice structure, and the control rules of tenants' information flow and the rules of tenant label encryption-declassification are designed. Thus, the independent, dynamic and secure control of tenants' information flow inside and outside the tenant virtual boundary. Finally, the detailed design of a dynamic security control application system for cloud tenants' sensitive information flow is provided. Experiments confirm that the proposed algorithm can identify the security boundary of tenants more accurately and efficiently than the traditional spiking neural network classification methods. Further, the security and effectiveness of the method is verified by the intransitive noninterference theory and the experiment of information flow control.

show abstract

Section: Related Workmentioning

confidence: 99%

Dynamic Control Method for Tenants’ Sensitive Information Flow Based on Virtual Boundary Recognition

Lu¹,

Cao²,

Du³

2020

IEEE Access

View full text Add to dashboard Cite

show abstract

“…We proposed a new architecture [1] that connects silos using VXLAN [2] (Virtual Extensible LAN) gateways to solve problems and also avoid vendor lock-in. We discuss implementation and evaluate feasibility of our approach.…”

Section: Introductionmentioning

confidence: 99%

Implementation and Evaluation of VXLAN Gateway-based Data Center Network Virtualization

Junji¹,

Maeda²,

Yabusaki³

et al. 2016

SIC

Self Cite

View full text Add to dashboard Cite

To achieve platform-independent network virtualization among multiple service infrastructures in service providers' data centers, we propose hardware gateway-based data center network virtualization architecture where we place a gateway on each service infrastructure and inter-connect them using overlay network virtualization. By considering a type of VXLAN gateway for this architecture, integration method with server virtualization environment and management mechanism for virtual network among service infrastructures, we propose the implementation method of our proposed architecture. We evaluated and confirmed feasibility of the proposed architecture based on our prototype. We also confirmed that the proposed architecture does not have any performance issue on our network throughput measurement evaluation.

show abstract

Realization of VXLAN Gateway-Based Data Center Network Virtualization

Cited by 2 publications

References 7 publications

Dynamic Control Method for Tenants’ Sensitive Information Flow Based on Virtual Boundary Recognition

Dynamic Control Method for Tenants’ Sensitive Information Flow Based on Virtual Boundary Recognition

Implementation and Evaluation of VXLAN Gateway-based Data Center Network Virtualization

Contact Info

Product

Resources

About