NeTS: Small: Collaborative Research: Enabling Network Agility Through Virtualized Infrastructure Migration

虚拟基础设施正变得越来越司空见惯，因此管理好它的能力非常重要。云计算建立在虚拟计算基础设施之上。软件定义网络是虚拟数据网络。虚拟计算和通信的结合构成了提供定制基础设施的下一波创新浪潮。该项目通过规划和管理从一组支持物理基础结构到另一组支持物理基础结构的虚拟网络结构和相关计算的迁移，解决使此类虚拟基础设施更可靠的方法。VN迁移的触发因素包括攻击、大规模故障、性能崩溃或降级，或者需要增加或减少资源分配以满足用户和降低功耗的服务需求变化。这种适应网络动态的能力称为VI迁移(VIM)。为上述应用程序部署VIM面临许多挑战。首先，不同的网络敏捷性目标可能需要不同的VIM模型和技术。例如，迁移主动防御以击败侦察的触发器需要基于时间，而对于电源管理，触发器将是网络负载无法更改的信号。其次，VN迁移可能需要提前计划(例如，在主动防御的情况下)，但在某些情况下，它们无法提前计划，需要实时部署(例如，响应故障)。第三，虽然现有的大多数理论只允许在系统稳定到静态时对网络运行的正确性进行一次推理，但研究在连续运动下支持按构造正确的迁移策略的形式化框架是一个主要的研究任务。为了应对这些挑战，该项目将开发一个VIM架构，该架构设计为在GENI和PlanetLab虚拟化技术的背景下工作，但可以用作其他工业系统的基础。该体系结构由两个主要组件组成：策略合成器模块和迁移机制模块。策略合成器模块的输入使用VI的模型，迁移机制模块直接与衬底交互以实现所需的迁移。VIM是一种在云基础设施中进行能源控制的强大技术，有效的VIM管理工具有望显著节省IT能源消耗。除了这项工作对商业和网络安全的潜在影响外，私营部门还确定了促进妇女和少数群体参与的当地和外联活动。这项工作的实验和评估方面将作为项目要素纳入研究生课程。

Virtualized infrastructure is becoming increasingly routine, and so the ability to manage it well is important. Cloud computing is built on virtualized computing infrastructure. Software Defined Networks are virtualized data networks. The combination of virtualized computing and communications constitutes the next wave of innovation in provisioning bespoke infrastructure. This project addresses ways of making such virtualized infrastructure more reliable, by planning and managing the migration of the virtual network structure and associated computation from one set of supporting physical infrastruture to another. Triggers for VN migration include attacks, massive failures, performance collapse or degradation, or changes in the service demands that require an increase or decrease in resource allocation in order to both satisfy users and reduce power consumption. This ability to adapt to network dynamics is referred to as VI migration (VIM). There are many challenges in deploying VIM for the applications above. First, different network agility objectives might require different VIM models and techniques. For example, the trigger to migrate for proactive defense to defeat reconnaissance would need to be time based , whereas, for power management the trigger would be significant change of network traffic load. Second, VN migrations may need to be planned in advance (for example, in the case of proactive defense) but in some cases they cannot be planned in advance and need to be deployed in real time (in response to faults, for example). Third, although most existing theories permit reasoning about correctness of network operation only once as the system stabilizes to a static state, investigating formal frameworks that support migration strategies that are correct-by-construction under continuous movement is a prime research task. To address these challenges this project will develop a VIM architecture that is designed to work in the context of the GENI and PlanetLab virtualization technologies, but which could be used as the basis for other industrial systems. The architecture consists of two main components: a Strategy Synthesizer block and a Migration Mechanism block. The inputs to the Strategy Synthesizer block uses models of the VI and the Migration Mechanism block interacts directly with the substrate to implement the desired migration. VIM is a powerful technique for energy control in Cloud infrastructure and effective tools for managing VIM are expected to facilitate significant savings in IT energy consumption. In addition to the potential commercial and network security impacts of the work, the PIs have identified local and outreach activities that further the participation of women and minorities. The experimental and evaluation aspects of the work will be incorporated as project elements in graduate courses.