The Experts below are selected from a list of 102534 Experts worldwide ranked by ideXlab platform

Kate Keahey - One of the best experts on this subject based on the ideXlab platform.

  • Traffic sensitive live migration of virtual machines
    Future Generation Computer Systems, 2017
    Co-Authors: Umesh Deshpande, Kate Keahey
    Abstract:

    Abstract In this paper we address the problem of network contention between the migration Traffic and the Virtual Machine (VM) Application Traffic for the live migration of co-located Virtual Machines. When VMs are migrated with pre-copy, they run at the source host during the migration. Therefore the VM Applications with predominantly outbound Traffic contend with the outgoing migration Traffic at the source host. Similarly, during post-copy migration, the VMs run at the destination host. Therefore the VM Applications with predominantly inbound Traffic contend with the incoming migration Traffic at the destination host. Such contention increases the total migration time of the VMs and degrades the performance of the VM Application. Here, we propose a tra ffi c-sensitive live VM migration technique to reduce the contention of migration Traffic with the VM Application Traffic. It uses a combination of pre-copy and post-copy techniques for the migration of the co-located VMs (those located on the same source host), instead of relying on any single pre-determined technique for the migration of all the VMs. We base the selection of migration techniques on the VMs’ network Traffic profiles so that the direction of migration Traffic complements the direction of the most VM Application Traffic. We have implemented a prototype of Traffic-sensitive migration on the KVM/QEMU platform. In the evaluation, we compare Traffic-sensitive migration against the approaches that use only pre-copy or only post-copy for VM migration. We show that our approach minimizes the network contention for migration, thus reducing the total migration time and the Application degradation.

  • Traffic sensitive live migration of virtual machines
    IEEE ACM International Symposium Cluster Cloud and Grid Computing, 2015
    Co-Authors: Umesh Deshpande, Kate Keahey
    Abstract:

    In this paper we address the problem of network contention between the migration Traffic and the VM Application Traffic for the live migration of co-located Virtual Machines (VMs). When VMs are migrated with pre-copy, they run at the source host during the migration. Therefore the VM Applications with predominantly outbound Traffic contend with the outgoing migration Traffic at the source host. Similarly, during post-copy migration, the VMs run at the destination host. Therefore the VM Applications with predominantly inbound Traffic contend with the incoming migration Traffic at the destination host. Such a contention increases the total migration time of the VMs and degrades the performance of VM Application. Here, we propose Traffic-sensitive live VM migration technique to reduce the contention of migration Traffic with the VM Application Traffic. It uses a combination of pre-copy and post-copy techniques for the migration of the co-located VMs, instead of relying upon any single pre-determined technique for the migration of all the VMs. We base the selection of migration techniques on VMs' network Traffic profiles so that the direction of migration Traffic complements the direction of the most VM Application Traffic. We have implemented a prototype of Traffic-sensitive migration on the KVM/QEMU platform. In the evaluation, we compare Traffic-sensitive migration against the approaches that use only pre-copy or only post-copy for VM migration. We show that our approach minimizes the network contention for migration, thus reducing the total migration time and the Application degradation.

Umesh Deshpande - One of the best experts on this subject based on the ideXlab platform.

  • Traffic sensitive live migration of virtual machines
    Future Generation Computer Systems, 2017
    Co-Authors: Umesh Deshpande, Kate Keahey
    Abstract:

    Abstract In this paper we address the problem of network contention between the migration Traffic and the Virtual Machine (VM) Application Traffic for the live migration of co-located Virtual Machines. When VMs are migrated with pre-copy, they run at the source host during the migration. Therefore the VM Applications with predominantly outbound Traffic contend with the outgoing migration Traffic at the source host. Similarly, during post-copy migration, the VMs run at the destination host. Therefore the VM Applications with predominantly inbound Traffic contend with the incoming migration Traffic at the destination host. Such contention increases the total migration time of the VMs and degrades the performance of the VM Application. Here, we propose a tra ffi c-sensitive live VM migration technique to reduce the contention of migration Traffic with the VM Application Traffic. It uses a combination of pre-copy and post-copy techniques for the migration of the co-located VMs (those located on the same source host), instead of relying on any single pre-determined technique for the migration of all the VMs. We base the selection of migration techniques on the VMs’ network Traffic profiles so that the direction of migration Traffic complements the direction of the most VM Application Traffic. We have implemented a prototype of Traffic-sensitive migration on the KVM/QEMU platform. In the evaluation, we compare Traffic-sensitive migration against the approaches that use only pre-copy or only post-copy for VM migration. We show that our approach minimizes the network contention for migration, thus reducing the total migration time and the Application degradation.

  • Traffic sensitive live migration of virtual machines
    IEEE ACM International Symposium Cluster Cloud and Grid Computing, 2015
    Co-Authors: Umesh Deshpande, Kate Keahey
    Abstract:

    In this paper we address the problem of network contention between the migration Traffic and the VM Application Traffic for the live migration of co-located Virtual Machines (VMs). When VMs are migrated with pre-copy, they run at the source host during the migration. Therefore the VM Applications with predominantly outbound Traffic contend with the outgoing migration Traffic at the source host. Similarly, during post-copy migration, the VMs run at the destination host. Therefore the VM Applications with predominantly inbound Traffic contend with the incoming migration Traffic at the destination host. Such a contention increases the total migration time of the VMs and degrades the performance of VM Application. Here, we propose Traffic-sensitive live VM migration technique to reduce the contention of migration Traffic with the VM Application Traffic. It uses a combination of pre-copy and post-copy techniques for the migration of the co-located VMs, instead of relying upon any single pre-determined technique for the migration of all the VMs. We base the selection of migration techniques on VMs' network Traffic profiles so that the direction of migration Traffic complements the direction of the most VM Application Traffic. We have implemented a prototype of Traffic-sensitive migration on the KVM/QEMU platform. In the evaluation, we compare Traffic-sensitive migration against the approaches that use only pre-copy or only post-copy for VM migration. We show that our approach minimizes the network contention for migration, thus reducing the total migration time and the Application degradation.

E. Salvadori - One of the best experts on this subject based on the ideXlab platform.

  • Dynamic and Application-Aware Provisioning of Chained Virtual Security Network Functions
    IEEE Transactions on Network and Service Management, 2020
    Co-Authors: Roberto Doriguzzi-corin, Sandra Scott-hayward, Domenico Siracusa, Marco Savi, E. Salvadori
    Abstract:

    A promising area of Application for Network Function Virtualization (NFV) is in network security, where chains of Virtual Security Network Functions (VSNFs), i.e., security-specific virtual functions such as firewalls or Intrusion Prevention Systems, can be dynamically created and configured to inspect, filter or monitor the network Traffic. However, the Traffic handled by VSNFs could be sensitive to specific network requirements, such as minimum bandwidth or maximum end-to-end latency. Therefore, the decision on which VSNFs should apply for a given Application, where to place them and how to connect them, should take such requirements into consideration. Otherwise, security services could affect the quality of service experienced by customers. In this paper, we propose PESS (Progressive Embedding of Security Services), a solution to efficiently deploy chains of virtualised security functions based on the security requirements of individual Applications and operators’ policies, while optimizing resource utilization. We provide the PESS mathematical model and heuristic solution. Simulation results show that, compared to state-of-the-art Application-agnostic VSNF provisioning models, PESS reduces computational resource utilization by up to 50%, in different network scenarios. This result ultimately leads to a higher number of provisioned security services and to up to a 40% reduction in end-to-end latency of Application Traffic.

J Lakshmi - One of the best experts on this subject based on the ideXlab platform.

  • integrating service function chain management into software defined network controller
    World Congress on Services, 2019
    Co-Authors: B S Lakshmi, J Lakshmi
    Abstract:

    Middleboxes play a crucial role in networks in the context of performance and security aspects. Large scale networks such as data center networks employ a wide range of middleboxes to service Application Traffic. Handling of dynamic Traffic by means of static middlebox configurations is a complex task. To this end, a combination of Network Function Virtualization and Software Defined Networks offer promising approaches to enable provisioning and chaining of network functions to create service function chains dynamically, in response to the changing Application workload and policies. These paradigms together enable elastic and scalable provisioning of service function chains which are programmable at a high, abstract level. This opens new opportunities for co-ordinated working of cloud manager and Software Defined Network controller to jointly manage service function instances as flexibly as the Application Virtual Machines, based on the temporal network characteristics of the data center network. On the other hand, the practical implementation of such a controller requires overcoming various hurdles. In this paper we enumerate and motivate the need for such a setup in large scale data center networks followed by the challenges in realizing it. As a proof of concept we realize such a setup using simulation environment and present some early results on the effect on Software Defined Network controller design.

Roberto Doriguzzi-corin - One of the best experts on this subject based on the ideXlab platform.

  • Dynamic and Application-Aware Provisioning of Chained Virtual Security Network Functions
    IEEE Transactions on Network and Service Management, 2020
    Co-Authors: Roberto Doriguzzi-corin, Sandra Scott-hayward, Domenico Siracusa, Marco Savi, E. Salvadori
    Abstract:

    A promising area of Application for Network Function Virtualization (NFV) is in network security, where chains of Virtual Security Network Functions (VSNFs), i.e., security-specific virtual functions such as firewalls or Intrusion Prevention Systems, can be dynamically created and configured to inspect, filter or monitor the network Traffic. However, the Traffic handled by VSNFs could be sensitive to specific network requirements, such as minimum bandwidth or maximum end-to-end latency. Therefore, the decision on which VSNFs should apply for a given Application, where to place them and how to connect them, should take such requirements into consideration. Otherwise, security services could affect the quality of service experienced by customers. In this paper, we propose PESS (Progressive Embedding of Security Services), a solution to efficiently deploy chains of virtualised security functions based on the security requirements of individual Applications and operators’ policies, while optimizing resource utilization. We provide the PESS mathematical model and heuristic solution. Simulation results show that, compared to state-of-the-art Application-agnostic VSNF provisioning models, PESS reduces computational resource utilization by up to 50%, in different network scenarios. This result ultimately leads to a higher number of provisioned security services and to up to a 40% reduction in end-to-end latency of Application Traffic.