Scalable network resource management for large scale Virtual Private Networks

摘要

A VPN (Virtual Private Network) is a private data network that uses a non-private data network to carry traffic between remote sites. There is currently significant interest in the deployment of VPN service across IP backbone facilities. In this study, we focus on designing a scalable IP-based VPN architecture and applying the distributed scheme to efficiently manage the VPN network resource. Specifically, our technologies include the following: (1) We present a scalable VPN architecture. In terms of the VPN maintenance cost and average end-to-end delay measured by average tunnel lengths, the different virtual network topologies are evaluated. (2) We take the distributed approach to solve the VPN bandwidth allocation problem. Several heuristic algorithms to select 'better' route are proposed to improve the successful VPN request rate with certain QoS (quality of service) requirement. We conduct extensive performance evaluations on different systems and algorithms. The evaluation shows that in terms of admission probabilities, the distributed VPN bandwidth allocation protocol based on local status information and partial of network information can perform well, which is close to theoretical optimal result. We note that the optimal solution has the single failure and scalability issues for the large VPN deployment.