SliM: Enabling efficient, seamless NFV state migration

Nobach, Leonhard; Rimac, Ivica; Hilt, Volker; Hausheer, David

doi:10.1109/icnp.2016.7784459

Cited by 16 publications

(8 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Various software tools and libraries used for the prototypical implementation are: (i) MetaMask 2 , (ii) Web3.js 3 , (iii) aes256 4 , (iv) eciesjs 5 , and (v) ipfs-http-client 6 . Next, we discuss various steps involved in the implementation.…”

Section: Methodsmentioning

confidence: 99%

B-VNF: Blockchain-enhanced Architecture for VNF Orchestration in MEC-5G Networks

Mishra

Kalla

Shukla

et al. 2020

2020 IEEE 3rd 5G World Forum (5GWF)

View full text Add to dashboard Cite

The roll-out of 5G technology will nurture the realization of broadband, ultra-reliable, and zero latency services. Network Function Virtualization (NFV) and Multi-Access Edge Computing (MEC) are among the key enablers for 5G. The synergy between NFV and MEC allows migration of Virtual Network Functions (VNF) from cloud to the edge of the network thereby adding agility to the softwarized 5G networks. The overall orchestration of VNF includes, but is not limited to, processing VNF requests, selecting appropriate VNF, migrating VNF from cloud to MEC, instantiating migrated VNF at MEC, settling payment according to a VNF's usage, maintaining VNF's reputation, etc. The orchestration is not foolproof and raises doubts about its trustworthiness. To address all the existing issues in a unified manner, we leverage Blockchain technology as yet another enabling technology for MEC-enabled 5G. Thus, we propose a Blockchain-enhanced architecture for secure VNF orchestration such that issues like authenticity, integrity, confidentiality, reputation, payment transfer, and many more are resolved. To furnish a Proof-of-Concept (PoC), we develop a prototypical DApp (Decentralized Application) using Ethereum Blockchain and Suricata as an exemplar VNF. Further, we discuss the strong resiliency of the proposed architecture against numerous well-known attacks.

show abstract

Section: Methodsmentioning

confidence: 99%

B-VNF: Blockchain-enhanced Architecture for VNF Orchestration in MEC-5G Networks

Mishra

Kalla

Shukla

et al. 2020

2020 IEEE 3rd 5G World Forum (5GWF)

View full text Add to dashboard Cite

show abstract

“…In addition, this approach cannot move and merge states from multiple NF instances, so it cannot realize fast and elastic scale-in. Some research work [25], [44], [50], [71] has proposed to mitigate and replicate internal NF states, allowing us to maintain correct NF behaviors during NF scaling. Split/Merge [56] proposes a state consistency approach by suspending current traffic, caching them in a controller, and sending the packets after migration.…”

Section: State Migrationmentioning

confidence: 99%

S-Blocks: Lightweight and Trusted Virtual Security Function With SGX

Wang

Hao

et al. 2022

IEEE Trans. Cloud Comput.

View full text Add to dashboard Cite

Despite the advantages of scalability and flexibility, Security Function Virtualization (SFV) raises concerns about its own security. To enhance the security of SFV, a promising approach is to run critical components of off-the-shelf security software inside Software Guard Extensions (SGX) enclaves. This idea, however, is hardly practical due to the difficulty of detaching components from the monolithic security function and the unacceptable cost of executing them inside enclaves. In this paper, we propose S-Blocks, an architecture to modularize virtual security functions (VSFs) and protect crucial modules with SGX in an efficient manner. S-Blocks decomposes VSFs into trusted and untrusted modules and provides dedicated APIs systematically. Only crucial VSF modules are hardened with enclaves. Furthermore, aiming at addressing state consistency and secure migration issues of security function scaling, we design a fine-grained state synchronization and migration mechanism to ensure loss-free, order-preserving, and state security for VSFs. To demonstrate the effectiveness of our approach, we prototype S-Blocks using Fast-Click on a real Skylake platform and implement three critical types of virtual security functions based on the S-Blocks architecture. Our evaluation results show that S-Blocks only imposes a manageable performance overhead, and low latency and resource consumption when protecting VSFs.

show abstract

“…Peuster and Karl [10] proposed E-State, a management framework that automatically handles the migration of the state of the VNF. The framework shares logically the VNF state by creating distributed state memory.…”

Section: B Vnf Migrationmentioning

confidence: 99%

On Optimizing Backup Sharing Through Efficient VNF Migration

Aidi

Zhani

Elkhatib

2019

2019 IEEE Conference on Network Softwarization (NetSoft)

View full text Add to dashboard Cite

With the emergence of software defined networking and network function virtualization technologies, network services are expected to be offered as service function chains made out from virtual network functions that are connected to steer and process the incoming traffic. In this context, achieving the survivability of these chains against failures is a key challenge to ensure high availability and continuity of the services. A promising solution proposed in the literature is to provision backups for the virtual network functions that could be shared among multiple service chains. These backups are used in case of a failure to take over the failed functions and ensure service continuity. In this paper, we propose two solutions to efficiently place and provision the shared backups in order to ensure the survivability of the service chains against single node failures. The originality of these solutions is that they leverage the migration of virtual network functions to minimize the resources consumed by the backups. Simulation results show that, compared to existing solutions, the proposed schemes leveraging migration are able to reduce by up to 20% the amount of resources allocated for the shared backups while ensuring the survivability of the service chains .

show abstract

SliM: Enabling efficient, seamless NFV state migration

Cited by 16 publications

References 5 publications

B-VNF: Blockchain-enhanced Architecture for VNF Orchestration in MEC-5G Networks

B-VNF: Blockchain-enhanced Architecture for VNF Orchestration in MEC-5G Networks

S-Blocks: Lightweight and Trusted Virtual Security Function With SGX

On Optimizing Backup Sharing Through Efficient VNF Migration

Contact Info

Product

Resources

About