NeTS: Small: Collaborative Research: Enabling Network Agility Through Virtualized Infrastructure Migration

虚拟化基础架构正变得越来越常规，因此良好的管理能力非常重要。 云计算建立在虚拟化计算基础设施之上。 软件定义网络是虚拟化数据网络。 虚拟化计算和通信的结合构成了供应定制基础设施的下一波创新。 该项目通过规划和管理虚拟网络结构和相关计算从一组支持物理基础设施到另一组支持物理基础设施的迁移，解决了使这种虚拟化基础设施更加可靠的方法。VN迁移的触发器包括攻击、大规模故障、性能崩溃或降级、或者需要增加或减少资源分配以便既满足用户又降低功耗的服务需求的变化。这种适应网络动态的能力被称为VI迁移（Vim）。在为上述应用程序部署Vim时存在许多挑战。首先，不同的网络敏捷性目标可能需要不同的Vim模型和技术。例如，用于主动防御以击败侦察的迁移的触发器将需要是基于时间的，而对于功率管理，触发器将是网络流量负载的显著变化。第二，VN迁移可能需要提前规划（例如，在主动防御的情况下），但在某些情况下，它们不能提前规划，并且需要在真实的时间内部署（例如，响应于故障）。第三，虽然大多数现有的理论允许推理网络操作的正确性，只有一次作为系统稳定到一个静态状态，调查正式的框架，支持迁移策略，是正确的建设下不断运动是一个主要的研究任务。为了应对这些挑战，该项目将开发一个Vim架构，该架构旨在在GENI和PlanetLab虚拟化技术的背景下工作，但也可以用作其他工业系统的基础。该架构由两个主要组件组成：策略合成器块和迁移机制块。策略合成器块的输入使用VI的模型，并且迁移机制块直接与基底交互以实现期望的迁移。Vim是一种强大的云基础设施能源控制技术，用于管理Vim的有效工具有望大幅节省IT能耗。 除了这项工作可能对商业和网络安全产生的影响外，PI还确定了促进妇女和少数群体参与的地方和外联活动。 这项工作的实验和评价方面将作为项目内容纳入研究生课程。

Virtualized infrastructure is becoming increasingly routine, and so the ability to manage it well is important. Cloud computing is built on virtualized computing infrastructure. Software Defined Networks are virtualized data networks. The combination of virtualized computing and communications constitutes the next wave of innovation in provisioning bespoke infrastructure. This project addresses ways of making such virtualized infrastructure more reliable, by planning and managing the migration of the virtual network structure and associated computation from one set of supporting physical infrastruture to another. Triggers for VN migration include attacks, massive failures, performance collapse or degradation, or changes in the service demands that require an increase or decrease in resource allocation in order to both satisfy users and reduce power consumption. This ability to adapt to network dynamics is referred to as VI migration (VIM). There are many challenges in deploying VIM for the applications above. First, different network agility objectives might require different VIM models and techniques. For example, the trigger to migrate for proactive defense to defeat reconnaissance would need to be time based , whereas, for power management the trigger would be significant change of network traffic load. Second, VN migrations may need to be planned in advance (for example, in the case of proactive defense) but in some cases they cannot be planned in advance and need to be deployed in real time (in response to faults, for example). Third, although most existing theories permit reasoning about correctness of network operation only once as the system stabilizes to a static state, investigating formal frameworks that support migration strategies that are correct-by-construction under continuous movement is a prime research task. To address these challenges this project will develop a VIM architecture that is designed to work in the context of the GENI and PlanetLab virtualization technologies, but which could be used as the basis for other industrial systems. The architecture consists of two main components: a Strategy Synthesizer block and a Migration Mechanism block. The inputs to the Strategy Synthesizer block uses models of the VI and the Migration Mechanism block interacts directly with the substrate to implement the desired migration. VIM is a powerful technique for energy control in Cloud infrastructure and effective tools for managing VIM are expected to facilitate significant savings in IT energy consumption. In addition to the potential commercial and network security impacts of the work, the PIs have identified local and outreach activities that further the participation of women and minorities. The experimental and evaluation aspects of the work will be incorporated as project elements in graduate courses.