臺灣博碩士論文加值系統

現今網路環境因資訊安全考量，必須佈署各式各樣的服務功能 (Service Function，SF)設備穿插在網路架構中，來進行相關的管 控措施，而這些 SF node 的佈署位置將影響 SF 即時性所發揮的效 益，因此本篇論文提出一個基於軟體定義網路服務功能鏈的機制，來 達到可依需求配置路徑的成果；再者，SF node 卻也往往是整體網 路服務效能的瓶頸所在，我們也提出了服務旁路機制來提高服務可用 率，根據實驗結果佐證所我們所設計的服務架構優於現有機制。

Due to the security considerations of a network environment, a variety of service function (SF) devices must be deployed in the network architecture. The deployment locations will affect the effectiveness of the SF nodes. This thesis proposes a Service Function Chain mechanism that utilizes software-defined network techniques to configure the path of a flow dynamically according to the demand of the service functions. Furthermore, we also implement a bypass mechanism to increase the availability of network services when some SF nodes are malfunctioned. The experimental result show that our design is superior to the existing mechanisms.

摘要 II
Abstract III
誌謝 IV
目錄 V
圖目錄 VII
表目錄 IX
第1章 Introduction 2
1.1 Motivation 2
1.2 Objective 5
1.3 Synopsis 5
第2章 Background 6
2.1 Software-defined Network 6
2.2 OpenFlow 7
2.2.1 Flow Table 7
2.2.2 Group table 9
2.3 Service Function Chain 10
2.4 Network Service Header 11
第3章 Related Work 12
3.1 An extended SDN architecture for network function virtualization with a case study on intrusion prevention 12
3.2 Policy-based Routing(PBR) / Filter-based forwarding (FBF) 13
3.3 Bypass Switch 14
第4章 An SDN-based Service Function Chaining and Bypassing Mechanism 15
4.1 SDN-SFC Overview 15
4.2 SDN-SFC Design Concept 16
4.3 Design of SDN-SFC 19
4.4 SDN-SFC Control Plane Workflow 20
4.5 SDN-SFC Data Plane Workflow 21
第5章 Evaluation 22
5.1 Environment 22
5.2 Impact of SDN Header Tagging 23
5.3 Impact of SF Node Loads 25
5.4 Response Time of Nth Action in Group Table 27
5.5 Comparison between Hardware Bypassing and SDN-enabled Bypassing－Packet Loss 29
5.6 Comparison between Hardware Bypassing and SDN-enabled Bypassing － Recovery Time 32
5.7 Impact of Number of SF node in SFC 35
5.8 Impact of Dynamic SFC on Campus Network 37
第6章 Conclusion and Future Work 40
6.1 Conclusion 40
6.2 Future Work 40
參考文獻 41

[1] ONF, “Software-Defined Networking (SDN) Definition”, https://www.opennetworking.org/sdn-definition/
[2] ONF, “L4-L7 Service Function Chaining Solution Architecture”, https://www.opennetworking.org/wp-content/uploads/2014/10/L4-L7_Service_Function_Chaining_Solution_Architecture.pdf
[3] IETF, “Service Function Chaining (SFC) Architecture”, https://www.rfc-editor.org/rfc/pdfrfc/rfc7665.txt.pdf
[4] IETF, “ Network Service Header (NSH)”, https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
[5] Ying-Dar Lin, Po-Ching Lin, Chih-Hung Yeh, Yao-Chun Wang, and Yuan-Cheng Lai , “An extended SDN architecture for network function virtualization with a case study on intrusion prevention”, IEEE Network, June 2015