FlowVisor: A Network Virtualization Layer
FlowVisor: A Network Virtualization Layer
复制标题
DOI：
--
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
Rob Sherwood;Glen Gibb;Kok-Kiong Yap;G. Appenzeller;M. Casado;N. McKeown;G. Parulkar
中科院分区：
文献类型：
--
作者：
Rob Sherwood;Glen Gibb;Kok-Kiong Yap;G. Appenzeller;M. Casado;N. McKeown;G. Parulkar
网络虚拟化一直是网络研究界的目标。有了它，多个隔离的逻辑网络，每个网络都有可能不同的寻址和转发机制，可以共享相同的物理基础设施。通常，这是通过利用软件的灵活性（例如[20，23]）或通过在（通常是专用的）硬件中复制组件来实现的[19]。在本文中，我们提出了一种新的方法来交换机虚拟化，其中相同的硬件转发平面可以共享多个逻辑网络，每个不同的转发逻辑。我们使用这种交换机级虚拟化来构建一个研究平台，该平台允许多个网络实验与生产流量并行运行，同时仍然提供隔离和硬件转发速度。我们还表明，这种方法是与商品交换芯片组兼容，不需要使用可编程硬件，如FPGA或网络处理器。我们在自己的生产网络上构建和部署这个虚拟化平台，并通过在校园网络中同时运行五个实验来演示其在实践中的使用。此外，我们量化我们的方法的开销和评估虚拟切片之间的隔离的完整性。
Network virtualization has long been a goal of of the network research community. With it, multiple isolated logical networks each with potentially different addressing and forwarding mechanisms can share the same physical infrastructure. Typically this is achieved by taking advantage of the flexibility of software (e.g. [20, 23]) or by duplicating components in (often specialized) hardware[19]. In this paper we present a new approach to switch virtualization in which the same hardware forwarding plane can be shared among multiple logical networks, each with distinct forwarding logic. We use this switch-level virtualization to build a research platform which allows multiple network experiments to run side-by-side with production traffic while still providing isolation and hardware forwarding speeds. We also show that this approach is compatible with commodity switching chipsets and does not require the use of programmable hardware such as FPGAs or network processors. We build and deploy this virtualization platform on our own production network and demonstrate its use in practice by running five experiments simultaneously within a campus network. Further, we quantify the overhead of our approach and evaluate the completeness of the isolation between virtual slices.