一种虚拟化深度包检测部署机制.PDFVIP

Vo1. 44 No.8 第 44 卷第8 期 计算机科学 2017 年 8 月 COMPUTER SCIENCE Aug.2017 一种虚拟化深度包检测部署机制 汪学舜余少华戴锦友 (武汉邮电科学研究院 武汉 430074) 摘 要 网络功能虚拟化转变了网络架构和网络业务的部署。在网络功能虚拟化架构中，实现虚拟化深度包检测只 需在传输路径上进行一次扫描，但高效部署深度包检测功能引擎成为难题。将深度包检坝，]功能部署问题形式化为线 性规划问题以满足约束条件，并提出一种基于代价最小的贪婪算法和优化的贪婪算法来解决深度包检测功能部署问 题。该算法对部署代价和网络资源代价进行折衷，实现了最小化的部署代价。实验结果表明，所提算法能够实现深度 包检测功能部署并取得近似最优解。 关键词 深度包检测，部署，网络功能虚拟化，最小代价优化 中图法分类号 TP393 文献标识码 A 001 10. 11896/j. issn. 1002-137叉 2017.08.017 Virtualization Deep Packet Inspection Deployment Method WANG Xue-shun YU Shao-hua DAI Jin-you CWuhan Research Institute of Post and Telecommunication ,Wuhan 430074 ,China) Abstract Network function virtualization CNFV) changes the network architecture and the deployment of network services. Traffic is scanned only once in the virtual network architecture for the virtualization deep packet inspection CDPD ,but DPI deployment is a difficult problem. In this paper ,DPI engine deployment was formulated as linear pro gramming problem CILP) to satisfy some constraints. A greedy algorithm based on cost minimization and an optimal greedy algorithm were proposed to solve the function depoyment problem of deep paclet inspectio几 The proposed algo rithm comprornises the DPI deployment cost and network resource cost ,and minimizes the cost of deployment. Simula tion results show that the proposed scheme can achieve the approximate optimal solution of DPI deployment. Keywords Deep packet inspection ,Deployment ,Network function virtualization ,Cost minimization 引言