KR102019927B1 - Apparatus and method for network function virtualization - Google Patents

Abstract

According to an embodiment of the present invention, provided is a network function virtualization management apparatus. The network function virtualization management apparatus includes: a virtual network functions manager (VNFM) including a monitoring driver receiving an event from an agent, and a policy action component receiving the event from the monitoring driver, and transmitting a request for changing a forwarding channel from a virtualization network function in an active state to a virtualization network function in a standby state in accordance with a management plugin; and a network function virtualization orchestrator (NFVO) including a policy handler changing the forwarding channel by calling a service function chain plugin (SFC-plugin) in accordance with the request for changing the forwarding channel, and a feedback component transmitting feedback information about the changed forwarding channel to the virtual network functions manager and a network function virtualization infrastructure. Therefore, the network function virtualization management apparatus is capable of providing high-fusibility by updating a service function chain channel.

Description

APAPATUS AND METHOD FOR NETWORK FUNCTION VIRTUALIZATION

One embodiment of the present invention relates to a network function virtualization operating apparatus and method.

Network Functions Virtualization (NFV) system is a technology that controls and manages network functions by virtualizing them. In particular, Service Function Chaining (SFC) technology, which orders and connects and executes virtualization network functions (VNF), enables the automation and customization of major network services. I am attracting attention. Service function chain technology is being developed under the name of virtualization network function forwarding graph at ETSI NFV ISG, and standardization of detailed function structure and protocol is underway at IETF SFC WG.

Service function chains allow network operators to dynamically create new service functions (SFs) in a virtualized environment, reducing the complexity of setting up service functions. The service function chain is an ordered set of service functions, and service functions are classified into stateful SFs and stateless SFs. Here, stateful SF refers to SF that operates only with state information, and stateless SF refers to SF that can operate without state information.

The fault recovery mechanisms for current service functions have different characteristics. However, if these mechanisms are applied to both stateful and stateless service functions in the actual construction network, resource waste becomes severe, resulting in inefficient network management.

The technical problem to be achieved by the present invention is the network function virtualization operation that can provide high availability by updating the service function chain path to the virtualization network function waiting for the failed virtualization network function using the active and standby virtual network function. An apparatus and method are provided.

According to an embodiment of the present invention, a monitoring driver that receives an event from an agent, receives the event from the monitoring driver, and stands by in a virtualization network function in an active state according to a management plugin. A Virtual Network Functions Manager (VNFM) including a policy action component that sends a forwarding path change request to a virtualized network function in state; And a policy handler for changing a forwarding path by calling a service function chain plug-in (SFC-plugin) API according to the forwarding path change request, and providing feedback information on the changed forwarding path to the virtualization network function manager and the network function virtualization infrastructure. A network function virtualization operating apparatus including a network function virtualization orchestrator (NFVO) including a feedback component for transmitting to a network.

The event may include at least one of a virtualization network function hostdown event and a network failure event.

The policy action component may transmit a forwarding path change request from the active virtualization network function to which the at least one of the virtualization network function hostdown event and the network failure event occurs to the standby backup virtualization network function.

The event may be changed by user setting.

The policy action component may transmit a forwarding path change request to the backup virtualization function according to a preset priority.

The policy action component may send a forwarding path change request with the secure backup virtualization network prioritizing over the insecure backup virtualization network.

The policy handler may encrypt the forwarding path change request to the insecure backup virtualization network.

According to an embodiment of the present invention, a monitoring driver receives an event from an agent; A policy action component receiving the event from the monitoring driver and sending a forwarding path change request from an active virtualization network function to an idle virtualization network function according to a management plug-in; A policy handler changing a forwarding path by calling a service function chain plug-in API according to the forwarding path change request; And transmitting, by a feedback component, feedback information on the changed forwarding path to the virtualization network function manager and the network function virtualization infrastructure.

The network function virtualization operating apparatus and method of the present invention may provide high availability by updating a service function chain path to a virtualized network function that is waiting for a failed virtualized network function using an active and standby virtualized network function.

1 is a conceptual diagram of a network function virtualization operating apparatus according to an embodiment of the present invention,
2 is a configuration block diagram of a network function virtualization operating apparatus according to an embodiment of the present invention;
3 is a view for explaining the operation of the network function virtualization operating apparatus according to an embodiment of the present invention,
4 and 5 illustrate a programming language for implementing a network function virtualization operating apparatus according to an embodiment of the present invention.
6 is a flowchart of a network function virtualization operating method according to an embodiment of the present invention.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated and described in the drawings. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

Terms including ordinal numbers, such as second and first, may be used to describe various components, but the components are not limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the second component may be referred to as the first component, and similarly, the first component may also be referred to as the second component. The term and / or includes a combination of a plurality of related items or any item of a plurality of related items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art, and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments will be described in detail with reference to the accompanying drawings, and the same or corresponding components will be given the same reference numerals regardless of the reference numerals, and redundant description thereof will be omitted.

1 is a conceptual diagram of a network function virtualization operating apparatus according to an embodiment of the present invention, FIG. 2 is a block diagram of a network function virtualization operating apparatus according to an embodiment of the present invention, and FIG. 3 is according to an embodiment of the present invention. A diagram for describing an operation of a network function virtualization operating device.

1 to 3, the network function virtualization operating apparatus 1 according to an embodiment of the present invention is a network function virtualization coordinator (NFVO) 100 for coordinating overall operations, and a virtualization network function. Virtualization Network Function Manager (VNFM) (200) to manage, Network Function Virtualization Infrastructure (NFVI) (300), Virtualization Infrastructure Manager (VIM) to manage virtualization infrastructure Manager 400 and a plurality of virtualization network functions (VFNs) 10 may be configured.

At least one instance of the virtualization network function may exist in the virtualization network function 10, and an element manager (EM) (not shown) corresponding to each of them may exist. On the network function virtualization infrastructure 300, there may be real physical hardware, a virtualization layer for virtualizing real physical hardware resources, and virtualization resources virtualized by the virtualization layer.

The network function virtualization operating apparatus 1 may include a network function virtualization coordinator 100 and a network function manager 200 for managing and coordinating the components.

The network function virtualization operating apparatus 1 may manage virtual resources (computing resources, network resources, storage resources) and orchestrate the virtual resources. Therefore, it is possible to confirm the availability of virtual resources for the network service composed of a plurality of virtualization network functions 10, and to be in charge of the actual distribution thereof, and the order of distribution and related information between the virtualization network functions for the successful start of the service. It can be configured to deliver to various network function virtualization infrastructure (300).

The virtualization network function manager 200 may perform lifecycle management of the virtualization network functions 10 between the virtualization network functions 10 and the network function virtualization coordinator 100 that manages virtual resources and services. . In particular, the virtualization network function manager 200 manages an association between virtual resources and the virtualization network functions 10 in a cloud environment, and immediately responds to an event or a state change occurring therebetween. Function to maintain and optimize the continuity of the services provided.

The network function virtualization infrastructure 300 includes hardware and software elements composed of an environment in which the virtualization network function 10 can be performed, and an open source based OpenStack, CloudStack, etc. have. Each network function virtualization infrastructure 300 may provide a unique application program interface.

The network function virtualization infrastructure 300 may be divided into three areas, a compute domain (including storage), a hypervisor domain, and an infrastructure network domain. Virtual computing and virtual storage belonging to the hypervisor domain refer to virtual resources allocated to virtual machines based on physical resources, and the virtualization layer refers to hypervisors such as KVM and XEN.

Computing hardware and storage hardware belonging to a computer domain refer to physical hardware resources, and a virtual network belonging to an infrastructure network domain refers to a virtual network assigned to a virtual machine. network hardware) refers to physical network devices. The network function virtualization infrastructure 300 has a virtualization infrastructure manager 400 and a reference point Nf-Vi, and has a VNF and a Vn-Nf reference architecture.

In a network function virtualization environment, virtualized network function instances can be installed or removed from time to time as needed. In this case, the virtualization network function instance may be installed / modified / deleted through the virtualization network function manager 200 provided for each vendor.

Traffic introduced into the network function virtualization operating apparatus 1 may be classified using a virtual port assigned to a virtual machine implementing the virtualization network function 10. Therefore, a filter of the service function chain can be generated by creating a flow rule that uses the MAC address of the virtual port assigned to the virtual machine implementing the target type-virtualization network function as the destination MAC address.

Meanwhile, the virtualization network functions 10 constituting the service function chain may be implemented as a virtual machine, or may be implemented in the form of a flow rule using SDN.

According to an embodiment of the present invention, the virtualized network function manager 200 may be configured to include a monitoring driver 210 and policy actions 220.

The monitoring driver 210 may receive an event from an agent (not shown). The event may include, for example, at least one of a virtualized network function hostdown event and a network failure event. In addition, the monitoring driver 210 may receive monitoring information from the agent. The monitoring information may include monitoring information on resources and internal monitoring information of the virtual machine.

The policy action component 220 receives an event from the monitoring driver 210 and changes a forwarding path from an active virtual network function to a standby virtual network function according to a management plugin. The request can be sent. For example, policy action component 220 may send a ping to the virtualized network function to check the function. The policy action component checks the status of the virtualized network function through the ping transmission method in the event of host down or network problem.If the virtualized network function is down or there is a problem with the network, the active virtualization A forwarding path change request can be sent from the network function to the standby virtualization network function.

The policy action component 220 may transmit a forwarding path change request from the active virtualization network function to which the at least one of the virtualization network function hostdown event and the network failure event occurs to the standby backup virtualization network function. The policy action component 220 may transmit a forwarding path change request to the backup virtualization network function when the virtualization network function is not available due to at least one of the virtualization network function host down and the network failure.

At this time, the event may be changed by user setting. That is, the event condition for the policy action component 220 to send the forwarding path change request may be changed by user setting.

The policy action component 220 may send a forwarding path change request to the backup virtualization network function according to a preset priority. The policy action component 220 may select a backup virtualization network function for changing to an active state according to a priority set by a user setting, and transmit a forwarding alert change request accordingly. The policy action component 220 may transmit a forwarding path change request to change the backup virtualization network function of the first priority to an active state when an event occurs in the active virtualization network function and thus the forwarding path needs to be changed. . The policy action component 220 activates the second priority backup virtualization network function when an event occurs in the active virtualization network function and the first priority backup virtualization network function to change the siding path. A forwarding path change request can be sent to change.

The policy action component 220 may send a forwarding path change request with the secure backup virtualization network prioritizing over the insecure backup virtualization network. The policy action component 220 may first transmit a forwarding path change request for changing the security backup virtualization network to an active state when an event occurs in an active virtualization network function to change the forwarding path. The policy action component 220 may transmit a forwarding path change request for changing the non-secure backup virtualization network to an active state in a descending order when an event occurs in the secure backup virtualization network.

In addition, the policy action component 220 may receive the monitoring information from the monitoring driver 210 and transmit a forwarding path change request from the active virtualization network function to the standby virtualization network function according to the management plug-in. The policy action component 220 determines whether an event occurs according to various conditions, such as when the resource of the virtual machine exceeds a preset ratio according to the monitoring information and the efficiency is low, or when it is determined that a problem has occurred inside the virtual machine. In response to the determination result, the forwarding path change request may be transmitted from the active virtualization network function to the standby virtualization network function.

Network function virtualization coordinator 100 according to an embodiment of the present invention is a network function virtualization coordinator plug-in (NFVO plugin) 110, policy handler (policy-handler) 120, feedback component (130) and database (database) 140 may be configured to include.

The policy handler 120 may change the forwarding path by calling the service function chain plug-in API according to the forwarding path change request. The policy handler 120 may change the forwarding path by calling the service function chain plug-in API from the network function virtualization coordinator plug-in 110.

The policy handler 120 may read the virtualization network function forwarding graph descriptor and receive a policy event from the virtualization network function manager 200. You can also define handler actions to run. The policy handler 120 may call the service function chain plug-in API to update the path to process the path update for the virtualization network function delivery graph.

The policy handler 120 may encrypt the forwarding path change request to the insecure backup virtualization network. Secure virtualization network functionality means that virtualization network functionality is trusted by the service provider. The insecure backup virtualization network feature does not allow the service provider to perform encryption, so it uses encryption algorithms such as the Advanced Encryption Standard (AES), which is the Data Encryption Standard (DES), or the public key cryptosystem RSA. In other words, the security virtualization network function is a method of providing security by a service provider, and the non-secure backup virtualization network function is a method of establishing encryption by an operating system or an administrator. Therefore, when the virtualization network function is insecure, the metadata context of the network service header (NSH) is encrypted.

The feedback component 130 may send feedback information about the changed forwarding path to the virtualization network function manager 200 and the network function virtualization infrastructure 300.

The feedback component 130 may call an API from the network function virtualization coordinator plug-in 110 to process the path update from the active virtualization network function to the standby virtualization network function.

The database 140 stores information on each virtualization network function in the virtualization network function forwarding graph. This can include the name of the backup virtualization network function, the priority of the backup virtualization network function in the event of a failure of the active virtualization network function, event judgment conditions, etc. It can track and manage the information of the active virtualization network function and the standby virtualization network function. Can be.

4 and 5 illustrate a programming language for implementing a network function virtualization operating apparatus according to an embodiment of the present invention. The programming language of FIGS. 4 and 5 may refer to some sort of detail and condition that you specify to create a virtualized network function. The user fills out the details and conditions of FIGS. 4 and 5 to create a virtualized network function and passes it to the virtualized network function manager. The virtualization network function manager reads the file to create the virtualization network function and set the policy.

Referring to FIG. 4, a method of applying a policy for changing a forwarding path in a virtualization network function descriptor created for creating a virtualization network function is illustrated. The descriptor file describing the configuration of the virtualization network function allows you to set recovery policies such as Respawn and Recovery for monitoring issues when creating the virtualization network function. Respawn provides forwarding path changes for network services at the virtualization network functional level, and Recovery is intended to support forwarding path changes for the service function chain.

Referring to FIG. 5, the details of the virtualized network function forwarding graph in the Tacker project providing a network function virtualization coordinator and a virtualized network function manager are shown. This is a template for the network service to which the forwarding path change is applied. In that template, the service function chain connects the VNF1 and VNF2 generated based on the specifications defined in VNFD1 and VNFD2. In addition, for high availability, the backup VNF includes three parameters. If an active VNF1 goes down, the corresponding backup VNF1 replaces the previously active VNF1. If the VNF of VNFD-backup1 is not available, it is created in VNFD-backup2 and replaces the existing VNF1. This is determined by priority.

6 is a flowchart of a network function virtualization operating method according to an embodiment of the present invention.

Referring to FIG. 6, when an event occurs, the monitoring driver receives an event from an agent (S601 ˜ 602).

Next, a policy action component receives the event from the monitoring driver and sends a forwarding path change request from the active virtualization network function to the standby virtualization network function according to the management plug-in. At this time, the policy action component transmits a forwarding path change request from the active virtualization network function to which the at least one of the virtualization network function hostdown event and the network failure event occurs to the standby backup virtualization network function. Alternatively, the policy action component transmits a forwarding path change request with the security backup virtualization network as a priority over the non-security backup virtualization network (S603).

Next, the policy handler changes the forwarding path by calling a service function chain plug-in API according to the forwarding path change request (S604).

Next, a feedback component transmits feedback information on the changed forwarding path to the virtualization network function manager and the network function virtualization infrastructure (S605).

The term '~ part' used in the present embodiment refers to software or a hardware component such as a field-programmable gate array (FPGA) or an ASIC, and '~ part' performs certain roles. However, '~' is not meant to be limited to software or hardware. '~ Portion' may be configured to be in an addressable storage medium or may be configured to play one or more processors. Thus, as an example, '~' means components such as software components, object-oriented software components, class components, and task components, and processes, functions, properties, procedures, and the like. Subroutines, segments of program code, drivers, firmware, microcode, circuits, data, databases, data structures, tables, arrays, and variables. The functionality provided within the components and the 'parts' may be combined into a smaller number of components and the 'parts' or further separated into additional components and the 'parts'. In addition, the components and '~' may be implemented to play one or more CPUs in the device or secure multimedia card.

Although described above with reference to a preferred embodiment of the present invention, those skilled in the art will be variously modified and changed within the scope of the invention without departing from the spirit and scope of the invention described in the claims below I can understand that you can.

100: network function virtualization coordinator
200: virtualization network function manager
300: network function virtualization infrastructure
400: virtualization infrastructure manager

Claims (10)

A monitoring driver that receives an event from an agent, and forwarding the event from the monitoring driver to an active virtualized network function according to a management plugin to a standby virtualized network function. A Virtual Network Functions manager (VNFM) including a policy action component for sending a route change request; And
A policy handler for changing a forwarding path by calling a service function chain plug-in API according to the forwarding path change request, and transmitting feedback information on the changed forwarding path to the virtualization network function manager and the network function virtualization infrastructure. Network Function Virtualization Orchestrator (NFVO), which includes a feedback component for
The policy action component transmits a forwarding path change request to the backup virtualization network function according to a preset priority, but sets the secure backup virtualization network function as a priority over the insecure backup virtualization network function. Send a change request,
And the policy handler performs encryption when a forwarding path change request to the insecure backup virtualization network function is performed.
The method of claim 1,
And the event comprises at least one of a virtualization network function hostdown event and a network failure event.
The method of claim 2,
The policy action component is configured to transmit a forwarding path change request from an active virtualization network function in which at least one of the virtualization network function hostdown event and the network failure event occurs to a standby backup virtualization network function. .
The method of claim 1,
And the event is changed by a user setting.
The method of claim 1,
The secure backup virtualization network function is a method in which security is provided by a service provider, and the non-secure backup virtualization network function is a method for establishing encryption by an operating system or an administrator.
The method of claim 1,
And the policy handler encrypts a metadata context of a network service header (NSH) when a forwarding path change request to the insecure backup virtualization network function is requested.
The method of claim 6,
And the policy handler performs encryption when a forwarding path change request to the insecure backup virtualization network function is performed.
The monitoring driver receiving an event from an agent;
A policy action component receiving the event from the monitoring driver and sending a forwarding path change request from an active virtualization network function to an idle virtualization network function according to a management plug-in;
A policy handler changing a forwarding path by calling a service function chain plug-in API according to the forwarding path change request; And
The feedback component sending feedback information about the changed forwarding path to the virtualization network function manager and the network function virtualization infrastructure,
The forwarding path change request may include transmitting a forwarding path change request to a backup virtualization network function according to a preset priority, and insecure backup virtualization of a secure backup virtualization network function. Transmitting a forwarding path change request by setting a priority over a network function, and the policy handler performing an encryption upon a forwarding path change request to the non-secure backup virtualized network function. .
The method of claim 8,
Sending a forwarding path change request may include:
And transmitting a forwarding path change request from an active virtualization network function to a standby backup virtualization network function in which at least one of a hostdown event and a network failure event of the virtualization network function occurs.
The method of claim 8,
The secure backup virtualization network function is a method in which security is provided by a service provider, and the non-secure backup virtualization network function is a method in which an operating system or an administrator establishes encryption.

Images