SYNC: Synergistic Network Policy Management for Cloud Data Centres

SYNC：云数据中心的协同网络策略管理

基本信息

批准号：
EP/P004407/1
负责人：
Fung Po Tso
金额：
$ 12.84万
依托单位：
Liverpool John Moores University
依托单位国家：
英国
项目类别：
Research Grant
财政年份：
2017
资助国家：
英国
起止时间：
2017 至无数据
项目状态：
已结题

来源：
https://gtr.ukri.org/projects?ref=EP%2FP004407%2F1
关键词：
SYNC Synergistic Network Policy Management

项目摘要

All computer networks, including cloud data centre networks, are governed by high-level policies derived from network-wide requirements, such as "file servers should only be accessible by internal IP (Internet Protocol) addresses". Upon deployment, an individual policy is realised as a composition (or chain) of network packets processing rules that will be placed in a specified sequence of network function boxes within the network.Traditionally, implementing network policy is an error-prone manual configuration process. Emerging technologies such as Software-Defined Networking (SDN) and Network Function Virtualisation (NFV) have largely eliminated the need of manual configuration through software automation. Nevertheless, the use of SDN and NFV have resulted in greater number of independent network nodes that dynamically generate and implement policy rules respectively, making correct policy implementation a hard problem to solve. Worse still, this problem is amplified by the dynamic virtual machine (VM) consolidation in cloud data centre since migrating VMs means that the "specified sequence" must also be updated across the network. Imperfect policy implementation will lead to policy violation that attributes to 78% of data centre downtime, which costs $5,600(£3,758) per minute. This demonstrates the necessity of synergistic placement of network policy rules and application VMs, as captured in the SYNC project hypothesis: Infrastructural configuration and utilisation as well as application performance of cloud data centres is largely dictated by the placement of network policy rules and application virtual machines. This is in contrast to the existing approaches which either only consider static rules placement, or perform dynamic placement without taking into account the application VMs.In this project, we propose the development of SYNC, a synergistic network policy management framework that will lever synergy amongst a) policy rules, b) applications and c) underlying temporal network state for achieving network-wide performance optimisation. In order to realise SYNC, the following research and development tasks will take place: i). The high-level network policy expressions will be decomposed into minimum set of network-wide consistent chains of rules, which are in turn implemented in network function boxes at different network locations, e.g. middleboxes, network switches, and end hosts. ii). The underlying network state will be exploited to (re)arrange application virtual machines and rules so that the network-wide impact of pairwise traffic patterns is minimised. The key challenge in this innovation will be the scale of the underlying infrastructure, which can have up to a million VMs and millions of rules. We will construct appropriate models and efficient algorithms, combined with SDN and NFV overcome this challenge. We intend to publish research outcome in prestigious journals and conferences, provide open-access to the research data, and commercialise our intellectual property.

所有计算机网络，包括云数据中心网络，都受到源自网络范围要求的高级策略的管理，例如“文件服务器只能通过内部 IP（互联网协议）地址访问”。在部署时，会制定单独的策略。实现为网络数据包处理规则的组合（或链），这些规则将位于网络内指定的网络功能盒序列中。传统上，实施网络策略是一个容易出错的手动配置过程，例如软件定义网络。（SDN）网络功能虚拟化（NFV）通过软件自动化很大程度上消除了手动配置的需要。然而，SDN和NFV的使用导致了更多的独立网络节点分别动态生成和实施策略规则，使得正确的策略实施成为可能。更糟糕的是，云数据中心中的动态虚拟机（VM）整合会放大这个问题，因为迁移虚拟机意味着“指定顺序”也必须在网络上更新。不完善的策略实施将导致策略的失败。违反属性高达 78% 的数据中心停机时间，每分钟成本为 5,600 美元（3,758 英镑）这表明了协同部署网络策略规则和应用程序虚拟机的必要性，如 SYNC 项目假设中所述：基础设施配置和利用率以及应用程序性能。云数据中心的部署很大程度上取决于网络策略规则和应用程序虚拟机的放置，这与现有方法形成对比，现有方法要么只考虑静态规则放置，要么执行动态放置而不考虑。在这个项目中，我们建议开发 SYNC，这是一个协同网络策略管理框架，它将利用 a) 策略规则、b) 应用程序和 c) 底层临时网络状态之间的协同作用，以实现网络范围的性能优化。为了实现SYNC，将进行以下研究和开发任务：i）高级网络策略表达式将被分解为网络范围一致的规则链的最小集合，这些规则链依次在网络功能盒中实现。在不同的网络位置，例如中间盒、网络交换机和终端主机 ii) 将利用底层网络状态来（重新）安排应用程序虚拟机和规则，从而最大限度地减少成对流量模式的网络范围影响。这项创新的挑战将是底层基础设施的规模，它可以拥有多达一百万个虚拟机和数百万条规则，我们将构建适当的模型和高效的算法，结合SDN和NFV克服这一挑战。在享有盛誉的期刊和会议，提供研究数据的开放获取，并将我们的知识产权商业化。

项目成果

期刊论文数量（10）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

Synergistic Policy and Virtual Machine Consolidation for Mobile Edge Computing

移动边缘计算的协同策略和虚拟机整合

DOI：
发表时间：
2017
期刊：
影响因子：
0
作者：
Genez T A L
通讯作者：
Genez T A L

Latency-aware joint virtual machine and policy consolidation for mobile edge computing

DOI：
10.1109/ccnc.2018.8319204
发表时间：
2018
期刊：
2018 15th IEEE Annual Consumer Communications & Networking Conference (CCNC)
影响因子：
0
作者：
T. Genez;Fung Po Tso;Lin Cui
通讯作者：
T. Genez;Fung Po Tso;Lin Cui

Modelling Low Power Compute Clusters for Cloud Simulation

为云仿真低功耗计算集群建模