KR20190066743A - Software defined networking based network virtualization system, apparatus, and method supporting multiple protocols - Google Patents

Abstract

A software defined network-based network virtualization system comprises: a physical network layer including at least one physical network device; a network virtualization device providing at least one virtual network requested by using the at least one physical network device; and a virtual network control layer for controlling the at least one virtual network. Also, the network virtualization device may include: a controller interface including at least two or more agents for each protocol for communicating with a plurality of user SDN controllers using different protocols existing in the virtual network control layer; and at least two or more encoders/decoders for each protocol for communicating with at least one physical network device of the physical network layer.

Description

TECHNICAL FIELD [0001] The present invention relates to a network virtualization apparatus, and more particularly, to a network virtualization system and a network virtualization apparatus capable of supporting multi-

The present invention relates to network virtualization technology, and more particularly, to a network virtualization system and a network virtualization method that do not depend on a specific protocol supported by a physical network device but support various protocols.

Network virtualization technology is drawing attention as a technology for implementing future network technologies including cloud computing, WAN and 5G mobile networks. Network virtualization technology refers to a technique of creating a virtual network environment independent of each user on a public physical network infrastructure. Network virtualization technology can share the physical network resources, so it can greatly reduce the cost and improve the efficiency compared to building a new network for each user and optimize various networks according to the purpose Lt; / RTI >

The concept of network virtualization is not a completely new technology. In the past, technologies such as VLAN (Virtual Local Area Network) and VPN (Virtual Private Network) have been used to separate and operate each user's traffic in the physical network, Virtualization. However, there is a limit to accommodate increasingly complicated users' requirements. In recent years, network virtualization based on Software Defined Networking (SDN) has overcome the problems of existing network virtualization technology, Topology, and policy control functions are being actively promoted globally.

Software-defined networking allows networking itself to be programmable in terms of operating the network by breaking away from the traditional vendor-oriented networking approach and providing advantages such as agility, elasticity, and flexibility based on this. have. In particular, OpenFlow is one of the most popular protocols for implementing a software-defined networking paradigm. Until recently, network virtualization technology has been developed that can create, operate, and manage virtual networks using OpenFlow.

However, existing SDN-based network virtualization technologies have problems in terms of performance including scalability. In particular, the SDN network virtualization technologies that are currently being disclosed are designed to be centered on OpenFlow, which has a limitation in supporting various SDN protocols that are attracting attention.

SUMMARY OF THE INVENTION An object of the present invention is to provide a network virtualization system that supports various protocols without depending on protocols of physical network devices.

It is another object of the present invention to provide a method of operating a network virtualization apparatus that supports various protocols without depending on protocols of physical network devices.

According to an aspect of the present invention, there is provided a physical network system including: a physical network layer including at least one physical network device; A network virtualization device for providing at least one virtual network requested using the at least one physical network device; And a virtual network control layer controlling the at least one virtual network. Here, the network virtualization apparatus may include a controller interface including at least two or more protocol-specific agents for communicating with a plurality of user SDN controllers using heterogeneous protocols existing in the virtual network control layer, And at least two protocol-specific encoders / decoders for communicating with one physical network device.

The at least two or more protocol-specific agents may include at least two or more of an OpenFlow protocol agent, a P4 protocol agent, and a NetConfig / Yang protocol agent.

The at least two protocol-specific encoders / decoders may include at least two of an OpenFlow protocol encoder / decoder, a P4 protocol encoder / decoder, and a NetConfig / Yang protocol encoder / decoder.

The network virtualization apparatus comprising: a network abstraction unit for abstraction of resource details depending on a protocol of the physical network layer; And a network virtualization system that creates the requested at least one virtual network on the physical network layer through mapping between resources of the at least one physical network device of the physical network layer and the requested at least one virtual network May be further included.

The resource details abstracted and provided by the network abstraction unit may include at least one of a network device, a link, a topology, an event, a path, and flows. .

The network virtualization unit may manage an access control list (ACL) for managing information on a virtual network accessible by the user SDN controller present in the virtual network control layer.

The network virtualization apparatus may use a common network information model commonly applied to the heterogeneous protocols to support heterogeneous protocols.

The network abstraction unit may abstract resource details depending on a protocol of a physical network layer using the public network information model, and the controller interface and the protocol transceiver unit may abstract the network control layer and the network control layer using the public network information model. And can transmit and receive messages to and from the physical network layer.

According to another aspect of the present invention, there is provided a method for managing a virtual network, comprising the steps of: (a) receiving at least one virtual network creation request; (B) monitoring, by monitoring the idle resources of the physical network layer including at least one physical network device, whether the requested at least one virtual network can be generated, in response to the virtual network creation request; And a protocol for creating at least one virtual network requested to at least one physical network device of the physical network layer when it is possible to generate the requested at least one virtual network as a result of the determination of the idle resources of the physical network layer (C) generating and transmitting at least one virtual network to a network-based virtual network based on the software-defined network-based virtual network. In the step (a), the network virtualization apparatus requests the at least one virtual network creation request from the user SDN controller using heterogeneous protocols in the virtual network control layer using at least two or more protocol-specific agents And at least one physical network device in the physical network layer and at least two or more protocol-specific encoders / decoders in the step (c) to generate and transmit the protocol message .

The at least two or more protocol-specific agents may include at least two or more of an OpenFlow protocol agent, a P4 protocol agent, and a NetConfig / Yang protocol agent.

The at least two protocol-specific encoders / decoders may include at least two of an OpenFlow protocol encoder / decoder, a P4 protocol encoder / decoder, and a NetConfig / Yang protocol encoder / decoder.

The step (c) includes: (c-1) abstracting resource details depending on the protocol of the physical network layer; And creating the requested at least one virtual network on the physical network layer through mapping between resources of the at least one physical network device of the physical network layer and the requested at least one virtual network c-2).

Here, the resource details abstracted and provided by the step (c-1) include a network device, a link, a topology, an event, a path, and a flow ). ≪ / RTI >

In addition, the network virtualization apparatus may manage an access control list (ACL) for managing information on a virtual network accessible to each user SDN controller existing in the virtual network control layer.

In addition, the network virtualization apparatus may use a common network information model commonly applied to heterogeneous protocols to support heterogeneous protocols.

In this case, in the step (c-1), the resource details depending on the protocol of the physical network layer can be abstracted using the public network information model, and the at least two protocol- A star encoder / decoder may translate protocol messages to and from the network control layer and the physical network layer using the public network information model.

The main advantage of SDN-based virtual networks is that they can operate networks with flexibility and scalability by providing a programmable interface through SDN. In existing networks, the costs required to change the network infrastructure were substantial, but in SDN, it is easy to build agile network infrastructures based on user requirements. Thus, while SDN-based network virtualization helps users to quickly build the appropriate virtual network, the limitation is that the network devices that make up the physical network must support certain protocols (eg, OpenFlow) and depend on the characteristics of OpenFlow exist.

Therefore, when using the SDN-based virtual network system and method according to the embodiments of the present invention, the existing methods can solve the problem that it relies only on a specific protocol (e.g., OpenFlow) for network virtualization. Through this, it is possible to flexibly create a virtual network on a physical network composed of various types of network devices, and a virtual network can be created by utilizing a protocol that best suits user requirements.

As a result, the scalability problem of conventional SDN-based network virtualization technology can be solved through the present invention, and it is possible to create a virtual network that satisfies user requirements more finely by supporting multiprotocol having different characteristics .

FIG. 1 is a conceptual diagram for explaining a configuration of a network virtualization system according to an embodiment of the present invention. FIG. 2 is a conceptual diagram illustrating a concept of providing a virtual network on a physical network layer through a network virtualization system according to an embodiment of the present invention. Fig.
3 is a block diagram illustrating a network virtualization apparatus according to an embodiment of the present invention in more detail.
4 is a conceptual diagram for explaining a public network information model according to an embodiment of the present invention.
5 is a flowchart illustrating an operation method of a network virtualization apparatus according to an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

The terms first, second, A, B, etc. may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

The existing SDN-based network virtualization technology can be divided into an overlay method and a slice method. First, overlay virtualization is mainly used in the data center. It uses the tunneling protocol such as VxLAN and NVGRE to separate the traffic of each virtual network rather than directly using the physical network . Next, sliced virtualization allocates a portion of the physical resources of the SDN network devices dedicated to the virtual network, and applies the virtual network policy directly to provide network virtualization.

As mentioned earlier, network virtualization technology using OpenFlow, which is one of SDN's core protocols, has already been developed. However, there is a tendency to depend on OpenFlow specification. Recently, P4, NetConf / Yang, and so on.

Thus, the technology proposed in the present invention provides a system and method for developing and supporting network virtualization technology that is not dependent on a specific protocol. Through the network virtualization technology that supports the multiprotocol that is proposed in the present invention, it is possible to create a virtual network for satisfying various user requirements by utilizing various protocols as well as OpenFlow. Can be utilized.

FIG. 1 is a conceptual diagram for explaining a configuration of a network virtualization system according to an embodiment of the present invention. FIG. 2 is a conceptual diagram illustrating a concept of providing a virtual network on a physical network layer through a network virtualization system according to an embodiment of the present invention. Fig.

Referring to FIG. 1, a network virtualization system 100 according to an exemplary embodiment of the present invention includes a physical network layer 110 for providing physical resources through at least one physical network device, A network virtualization apparatus 120 for creating and managing a virtual network, and a virtual network control layer 130 for operating each virtual network.

The physical network layer 110 may include the network devices 111 and 112 that support the OpenFlow protocol or the network devices 113 and 114 that support the P4 protocol that is another SDN protocol, A network device 115 that supports the NetConf / Yang protocol, and the like. Alternatively, a network device that simultaneously supports at least two of the above-described protocols may be deployed in the physical network layer 110. Through the physical network devices 111 to 115, the physical network layer 110 provides a certain amount of resources to the per-user virtual network according to the requirements of the user. Although only five network devices 111 to 115 exist on the physical network layer 110 for the sake of convenience of description in FIGS. 1 and 2, the number of the network devices constituting the physical network layer ~ Thousands) can be configured in various ways.

On the other hand, the network virtualization apparatus 120 can determine how to create and allocate a virtual network that can satisfy a user requirement on a given physical network 110. The network virtualization apparatus 120 may include a controller interface 121, a network virtualization unit 122, a network abstraction unit 123, and a protocol transmission / reception unit 124. The controller interface 121, the network virtualization unit 122, the network abstraction unit 123, and the protocol transmission / reception unit 124 are connected to a common network information model Lt; RTI ID = 0.0 > 125 < / RTI > The public network information model will be described later.

The protocol transmitting and receiving unit 124 is a southbound interface for interworking with the physical network devices 111 to 113 constituting the physical network layer 110. The protocol transmitting and receiving unit 124 is a component that allows the network virtualization apparatus 120 to directly communicate with the network devices 111 to 113 of the physical network layer 110. The protocol transmitting and receiving unit 124 includes network devices 111 to 113, Receive and process messages to provide a virtualized network environment to a particular user SDN controller (e. G., 131) present in the virtual network control layer 130.

Next, the network abstraction unit 123, which is an upper layer of the protocol transmission / reception unit 124, abstracts and provides details of basic physical network resources depending on protocols provided by the physical network layer 110. Here, the abstraction does not depend on a specific protocol but can independently represent various elements and attributes constituting the physical network. For example, at least one of a network device, a link, a topology, an event, a path, and flows constituting a network may be provided in an abstract form . The details of the abstracted network resource are utilized in another application service or a network virtualization unit 122 to be described later.

Next, the network virtualization unit 122 provides independent virtual networks to each user SDN controller (e.g., 131) of the virtual network control layer 130 by utilizing the abstracted network resources. At this time, communication to the user SDN controller 131 may be performed through the controller interface 121 of the network virtualization apparatus 120. [ The role of the network virtualization unit 122 is to create a virtual network by mapping virtual network resources using abstraction network resources. Meanwhile, the user SDN controllers 131 to 133 may support different protocols. For example, the user SDN controller 131 is an SDN controller that supports the OpenFlow protocol, the user SDN controller 132 is an SDN controller that supports the P4 protocol, and the user SDN controller 133 is an SDN controller that supports the NetConfig / Lt; / RTI >

Referring to FIG. 2, a virtual network may be implemented in a virtual topology via a virtual network device and a link. For example, virtual network # 1 201 may be provided by physical network devices 111, 112, 114 of physical network layer 110 by network virtualization device 120. In addition, the virtual network # 2 202 may be provided by the network virtualization apparatus 120 by the physical network devices 111, 113, and 115 of the physical network layer 110.

That is, the network virtualization unit 122 maps the generated virtual network resources and the physical network resources. Since each user requesting a virtual network has different user requirements, an embedding algorithm for efficiently mapping physical network resources and virtual network resources must be provided in order to support various strategies for satisfying them. Also, the generated virtual network can be operated independently of the different virtual networks. For this purpose, a specific virtual network should operate independently of the other virtual network without infringing the performance thereof, and only authorized user SDN controller 131 should be able to access its own virtual network. Therefore, the network virtualization unit 122 can independently manage different virtual networks by maintaining and managing an access control list (ACL).

3 is a block diagram illustrating a network virtualization apparatus according to an embodiment of the present invention in more detail.

3, the controller interface 121 includes a protocol specific agent for parsing and processing different protocol messages that can be interworked with the user SDN controllers 131 to 133 of the virtual network control layer 130, And may include agents 121-1 through 121-3. For example, an OpenFlow protocol agent 121-1, a P4 protocol agent 121-2, a NetConfig / Yang protocol agent 121-3, and the like. Through the controller interface 121, the user SDN controllers 131 to 133 can request the network virtualization apparatus 120 to create a virtual network meeting the user's requirements. At this time, the user SDN controllers 131 to 133 can utilize the SDN protocol to support for virtualization such as P4 and Netconf / Yang as well as the commonly used OpenFlow protocol. 121-1 to 121-3).

When the network virtualization apparatus 120 is requested to provide the virtual network creation or the virtual network service through the controller interface 121, the network virtualization apparatus 120 transmits the packet, the topology ), Behavior, address, and the like. At this time, the abstracted network resources are also used for the public network information model 125. According to user requirements, the network virtualization apparatus 120 can perform this virtualization function when a virtual network is created, changed and managed.

The network virtualization unit 122 implements a virtual network in an actual physical network through mapping between a physical network and a virtual network. The implemented virtual network occupies some of the resources of the physical network and provides it to be operated independently of other virtual networks.

Lastly, interworking with the physical network devices existing in the physical network layer 110 in order to actually construct the virtual network on the physical network can be realized by the protocol transmitting and receiving section 124. [ The protocol transmitting and receiving unit 124 may include an encoder / decoder 124-1 to 124-3 for each protocol to transmit and receive a plurality of protocols to and from the physical network device. When a series of functions for network virtualization needs to be applied through the public network information model 125, each encoder generates a specific protocol message for applying the function, and then transmits the message to the actual physical network device. Conversely, if a message utilizing a particular protocol is delivered from each network device, each decoder can parse and analyze it and forward it to the user SDN controller.

4 is a conceptual diagram for explaining a public network information model according to an embodiment of the present invention.

Basically, the network virtualization unit 123 and the network abstraction unit 122 abstract network resources in a form not dependent on a specific protocol and map the virtual network on the physical network using the abstracted network resources. In addition, since it is necessary to support various SDN protocols in the method of providing a virtual network according to the embodiment of the present invention, an information model for supporting a plurality of protocols (i.e., An information model that can be used in the future.

In order to satisfy this, the public network information model 125 proposed by the present invention is one of methods for generating and applying a specific protocol message to network resources having protocol-independent characteristics.

4, an example 210 of the public network information model 125 may include abstracted network resources such as packet, topology, behavior, address, etc. (i. E., Heterogeneous A resource element that can be commonly applied to a protocol of a network. As an example, the public network information model 210 of FIG. 4 defines actions that can be applied according to the abstracted network resources.

For example, actions such as forward, drop, and set fields can be defined in a behavior item for handling a specific traffic. In particular, the header of specific traffic packets can be modified through the field setting field 211, specifically, a VLAN field is set. When this is selected, it is possible to select which protocol to use for the network device constituting the actual physical network, and this can be done through a process of translating into a specific protocol message.

In this manner, it becomes possible to generate and manage a specific protocol message in order to apply general network behavior to the network through the public network information model 125. [ In particular, since the public network information model 125 includes all the general network behaviors and concepts, newly added protocols can be highly scalable because they can support the corresponding protocol messages by defining the standard or processing procedure .

5 is a flowchart illustrating an operation method of a network virtualization apparatus according to an embodiment of the present invention.

Referring to FIG. 5, the network virtualization apparatus 120 according to an embodiment of the present invention may be requested to create a new virtual network from a user (S510). When the user is requested to create a new virtual network, the network virtualization apparatus 120 may monitor the current physical network resources (S520). 5, the monitoring step S520 is performed after the step S510 of receiving the user's virtual network creation request. However, the monitoring step S520 may be performed at any time The idle resources of the physical network may be determined in advance, and upon receipt of the user's request to create a virtual network, the step S530 may be immediately performed.

Next, it may be determined whether the idle resource of the physical network identified by the physical network monitoring step (S520) is sufficient to generate the user's virtual network (S530). This is because the virtual network is generated by allocating a part of resources of the physical network, so that when the physical network itself does not have sufficient idle resources, the requirements of each virtual network may not be satisfied.

As a result of the determination in step S530, if it is difficult to create a virtual network satisfying the user's requirement, the network virtualization apparatus 120 may transmit a related error message to the user to notify the difficulty of creating the virtual network to the user ).

On the other hand, if it is determined through the physical network monitoring that the idle resources for creating a virtual network are sufficient, the network virtualization apparatus 120 may proceed to a process for creating a virtual network (S540 to S570). That is, in order to create a virtual network in a physical network environment constituted by network devices of this type, the virtual network device allocates resources of each physical network device and performs detailed settings to meet the requirements of the user.

First, the network virtualization apparatus 120 generates a protocol message supported by each network device through the protocol transmission / reception unit 124 for setting the network device of this type (S540), and may transmit the protocol message to each network device (S550 ). The network device that receives the message can allocate a part of each network resource to the corresponding virtual network.

In step S560, it is possible to determine whether an error has occurred in the above-described virtual network setting process. As a result of the determination, if an error occurs, the virtual network is not normally created, and the network virtualization apparatus 120 may generate an error message and transmit the error message to the user (S531). In contrast, after the network devices for the virtual network are completely set up, the network virtualization apparatus 120 may consider that the virtual network is normally created (S570). After this, the corresponding user SDN controller can manage the virtual network by connecting the newly created virtual network with the session.

The methods according to the present invention can be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer readable medium. The computer readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer readable medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software.

Examples of computer readable media include hardware devices that are specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate with at least one software module to perform the operations of the present invention, and vice versa.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

110: Physical network layer
120: Network Virtualization Device
130: Virtual network control layer
111 to 115: Network device
121: Controller interface
122: Network Virtualization
123: Network abstraction part
124: protocol transmission /
125: Public network information model
121-1 ~ 121-3: Protocol-specific agent
124-1 ~ 124-3: Protocol-specific encoder / decoder

Claims (18)

A software defined network-based network virtualization system,
A physical network layer including at least one physical network device;
A network virtualization device for providing at least one virtual network requested using the at least one physical network device; And
And a virtual network control layer for controlling the at least one virtual network,
Wherein the network virtualization apparatus comprises: a controller interface including at least two or more protocol-specific agents for communicating with a plurality of user SDN controllers using heterogeneous protocols present in the virtual network control layer; and at least one physical And at least two protocol-specific encoders / decoders for communicating with the network device.
Network virtualization systems. The method according to claim 1,
Wherein the at least two protocol-specific agents comprise at least two of an OpenFlow protocol agent, a P4 protocol agent, and a NetConfig / Yang protocol agent.
Network virtualization systems. The method according to claim 1,
Wherein the at least two protocol-specific encoder / decoder comprises at least two of an OpenFlow protocol encoder / decoder, a P4 protocol encoder / decoder, and a NetConfig / Yang protocol encoder /
Network virtualization systems. The method according to claim 1,
The network virtualization apparatus comprising:
A network abstraction unit for abstraction of resource details depending on a protocol of the physical network layer; And
A network virtualization unit that creates the requested at least one virtual network on the physical network layer through mapping between resources of the at least one physical network device of the physical network layer and the requested at least one virtual network, Further included,
Network virtualization systems. The method of claim 4,
The resource details abstracted and provided by the network abstraction unit may include at least one of a network device, a link, a topology, an event, a path, and flows. Including,
Network virtualization systems. The method of claim 4,
The network virtualization unit manages an access control list (ACL) for managing information on a virtual network accessible to each user SDN controller present in the virtual network control layer.
Network virtualization systems. The method of claim 4,
Wherein the network virtualization apparatus uses a public network information model commonly applied to heterogeneous protocols to support heterogeneous protocols,
Network virtualization systems. The method of claim 7,
Wherein the network abstraction unit abstracts resource details depending on a protocol of a physical network layer using the public network information model,
Network virtualization systems. The method of claim 7,
Wherein the controller interface and the protocol transceiver translate messages to and from the network control layer and the physical network layer using the public network information model,
Network virtualization systems. CLAIMS 1. A method of operating a network virtualization device that provides a software defined network-based virtual network,
(A) receiving at least one virtual network creation request;
(B) monitoring, by monitoring the idle resources of the physical network layer including at least one physical network device, whether the requested at least one virtual network can be generated, in response to the virtual network creation request; And
And generating a protocol message for creation of at least one virtual network requested by at least one physical network device of the physical network layer when it is possible to generate the requested at least one virtual network as a result of the determination of the idle resources of the physical network layer (C) generating and transmitting the at least one virtual network,
Wherein the network virtualization apparatus receives the at least one virtual network creation request using at least two or more protocol-specific agents from a user SDN controller using heterogeneous protocols existing in a virtual network control layer in step (a) Wherein the protocol message is generated and transmitted using at least one physical network device of the physical network layer and at least two or more protocol-specific encoders / decoders in step (c)
A method of operating a network virtualization device. The method of claim 10,
Wherein the at least two protocol-specific agents comprise at least two of an OpenFlow protocol agent, a P4 protocol agent, and a NetConfig / Yang protocol agent.
A method of operating a network virtualization device. The method of claim 10,
Wherein the at least two protocol-specific encoder / decoder comprises at least two of an OpenFlow protocol encoder / decoder, a P4 protocol encoder / decoder, and a NetConfig / Yang protocol encoder /
A method of operating a network virtualization device. The method of claim 10,
The step (c)
Abstracting (c-1) resource details that are dependent on the protocol of the physical network layer; And
Generating at least one requested virtual network on the physical network layer through mapping between resources of at least one physical network device of the physical network layer and the requested at least one virtual network; -2).
A method of operating a network virtualization device. 14. The method of claim 13,
The resource details abstracted and provided by the step (c-1) may include at least one of a network device, a link, a topology, an event, a path, and a flow Comprising at least one,
A method of operating a network virtualization device. 14. The method of claim 13,
Wherein the network virtualization apparatus manages an access control list (ACL) for managing information on a virtual network accessible by a user SDN controller present in the virtual network control layer,
A method of operating a network virtualization device. 14. The method of claim 13,
Wherein the network virtualization apparatus uses a public network information model commonly applied to heterogeneous protocols to support heterogeneous protocols,
A method of operating a network virtualization device. 18. The method of claim 16,
Wherein the step (c-1) abstracts resource details depending on a protocol of a physical network layer using the public network information model,
A method of operating a network virtualization device. 18. The method of claim 16,
Wherein the at least two protocol-specific agents and the at least two protocol-specific encoders / decoders convert the protocol messages exchanged with the network control layer and the physical network layer using the public network information model, )doing,
A method of operating a network virtualization device.

Images