An efficient data exchange mechanism for chained network functions

摘要

AbstractThanks to the increasing success of virtualization technologies and processing capabilities of computing devices, the deployment of virtual network functions is evolving towards a unified approach aiming at concentrating a huge amount of such functions within a limited number of commodity servers. To keep pace with this trend, a key issue to address is the definition of a secure and efficient way to move data between the different virtualized environments hosting the functions and a centralized component that builds the function chains within a single server. This paper proposes an efficient algorithm that realizes this vision and that, by exploiting the peculiarities of this application domain, is more efficient than classical solutions. The algorithm that manages the data exchanges is validated by performing a formal verification of its main safety and security properties, and an extensive functional and performance evaluation is presented.Highlights•In NFV, almost all the packets provided to a VNF will eventually exit from such a VNF.•Algorithms to move packets based on producer/consumer are not well suited for NFV.•An efficient algorithm that exploits the peculiarities of the NFV domain is proposed.•The algorithm ensures traffic isolation between VNFs deployed on a server.•Security and safety properties are verified through formal verification techniques.