This application claims priority under 35 U.S.C. § 119 to Korean Patent Application No. 10-2020-0051783 filed on Apr. 28, 2020, in the Korean Intellectual Property Office, the disclosures of which are incorporated by reference herein in their entireties.
Embodiments of the inventive concept described herein relate to an efficient monitoring method and a system thereof in a programmable software defined network (SDN)-based network virtualization technology, and more particularly, relate to when monitoring in an SDN virtual network controller, a method enabling accurate monitoring in consideration of a virtualized network.
Software defined networking (SDN), which is a networking structure that separates a transmission plane and a control plane of networking equipment and centralizes the control plane to control entire network in a single way, may give flexibility and programmability to network which is dependent on existing manufacturers and difficult to apply new research.
An SDN-based network virtualization technology is a technology that allows multiple network tenants to create and control their own virtual networks, thereby forming an optimized virtual network. When there are multiple tenants and each tenant has its own virtual network, the virtual network may be controlled in the form of SDN through each virtual network controller.
Network hypervisor is a network control element for providing the SDN-based network virtualization technology. The network hypervisor not only monitors and controls the entire physical network, but also abstracts physical network resources such as switches, ports, and links as virtual network resources, thereby providing the virtual network resources to each virtual network controller. Each tenant may control each virtual network provided through the virtual network controller. Through the virtualization technique, there are advantages that a physical network is capable of being distributed to several tenants in an independent form and each virtual network is capable of composing a network specialized for each tenant's service.
Network monitoring is an essential element for management, operation, failover, and optimization of the network. The network monitoring is a task of collecting and observing statistics for each switch, port, and flow. However, in a network virtualization environment in which the multiple tenants create and manage their own networks on a single physical network, the monitoring method has limitations.
In Korean Patent Publication No. 10-2019-0063231, it is disclosed that an SDN-based data center management system includes an SDN controller, a network hypervisor manager, and a resource monitoring module for monitoring network traffic, and a method thereof. However, it is difficult to overcome the limitations of various monitoring methods.
Embodiments of the inventive concept provide a computing apparatus implemented with a network hypervisor implementing SDN-based network virtualization which provides monitoring results for each virtual network to tenants, performs monitoring tasks with a small delay, and reduces total control channel consumption.
According to an exemplary embodiment, a computing apparatus implemented with a network hypervisor implementing software defined network (SDN)-based network virtualization includes a statistics virtualization module that provides individual statistics to each of multiple virtual networks created and the statistics virtualization module provides virtual flow entry statistics using a first algorithm targeting a virtual flow entry and virtual port statistics using a second algorithm targeting a virtual port.
According to an exemplary embodiment, a computing apparatus implemented with a network hypervisor includes a transmission disaggregation module including a physical statistics cache that performs periodic monitoring of a plurality of physical switches and stores statistics of the physical switches collected and the transmission disaggregation module calculates virtual statistics based on the physical statistics in the physical statistics cache.
According to an exemplary embodiment, a computing apparatus implemented with a network hypervisor includes a physical statistics aggregation module that responds with statistics of a plurality of switches when a single monitoring request and the physical statistics aggregation module performs physical statistics filter (pCollector filter) and physical statistics tuner (pCollector tuner).
According to an exemplary embodiment, a computing apparatus implemented with a network hypervisor according to still another embodiment of the inventive concept includes a statistics virtualization module that provides individual statistics to each of created virtual networks, a transmission disaggregation module that includes a physical statistics cache that performs periodic monitoring of a plurality of physical switches and stores statistics of the physical switches collected, and a physical statistics aggregation module that responds with statistics of the plurality of physical switches when a single monitoring request.
The above and other objects and features of the inventive concept will become apparent by describing in detail exemplary embodiments thereof with reference to the accompanying drawings.
For fully understanding the configuration and effects of the inventive concept, preferred embodiments of the inventive concept will be described with reference to the accompanying drawings. However, the inventive concept is not limited to the embodiments disclosed below but may be implemented in various forms and various modifications may be added.
In addition, terms used in the embodiments of the inventive concept may be interpreted as meaning commonly known to those of ordinary skill in the art, unless otherwise defined.
Hereinafter, with reference to the accompanying drawings, a description will be given of a network hypervisor implementing network virtualization based on a software defined network (SDN) according to embodiments of the inventive concept.
Before describing specific features of the inventive concept, a brief description of terms will be given.
SDN (software defined networking), which is a networking structure that separates a transmission plane and a control plane of networking equipment and centralizes the control plane to control the entire network in a single way, may give flexibility and programmability to network which is dependent on existing manufacturers and difficult to apply new research. The control plane of a centralized switch may be called an SDN controller and may control the transmission plane including network resources such as switches and links.
A network controller is an element used to control each tenant's virtual network. In particular, in the SDN-based virtual network, a tenant's centralized virtual network controller acts as the control plane and performs communication such as sending down rules (or regulations) necessary for data transmission through protocols such as virtual switch and OpenFlow.
Network virtualization is a technology that separates a single physical network into multiple virtual networks and provides the multiple virtual networks. Through network virtualization, it is possible to create a specialized virtual network, thereby increasing the efficiency of services using the network and maximizing the utilization rate of the entire physical network. The network virtualization may be provided using the network hypervisor in the SDN-based network virtualization.
The network hypervisor is an element that provides a separate virtual network to each tenant when there are multiple tenants using different SDN controllers and these tenants use one shared physical network. The network hypervisor plays roles of managing mapping information of virtual network resources and physical network resources and changing control messages such as OpenFlow downed from the virtual network controller into a form suitable for the physical network. The network hypervisor may be implemented as a computing device including at least a processor and/or memory, such as a server. In addition, in this specification, the network hypervisor may be used as a term to mean a computing device in which the hypervisor is implemented.
SDN virtual network monitoring is a task of collecting and observing statistics for each switch, port status, and flow of the network, and is essential for network management and optimization. The SDN network monitoring is performed by collecting statistics such as topology status, flow statistics for each switch, and port status in the physical network and transmitting the statistics to the SDN controller. OpenVirteX, a representative network hypervisor that realizes SDN network virtualization, also performs network monitoring in this way.
However, in a network virtualization environment where multiple tenants create and manage their own networks on one physical network, there is a limit to the monitoring method. Above all, three limitations are specified to be solved.
First, it is impossible to accurately monitor each virtual network. In the network virtualization environment, physical resources are shared among multiple virtual networks. Therefore, the physical network-based monitoring method has a limitation in that statistics cannot be provided for each virtual network. For example, when three tenants create and use virtual networks, respectively, on one physical resource, network monitoring cannot provide information such as network consumption per tenant.
Second, tenants experience high monitoring delays. Network monitoring is performed periodically to manage network conditions. In the network virtualization environment, this periodic monitoring is performed through virtualization every time, thereby increasing the delay from request to response for network monitoring. Due to the high delay, real-time network monitoring is difficult for the tenants and relatively old and inaccurate monitoring results are obtained.
Third, there is a problem of excessive control channel consumption. The control channel is used for statistics collection such as monitoring. In addition, the control channel is utilized in switch connection handshaking, flow entry installation, topology discovery, and ARP processing. When the control channel consumption for monitoring increases, there is a problem that other functions such as flow rule installation experience high delay. Also, because these functions directly affect network performance, the control channel consumption should be kept to a minimum. However, in the network virtualization environment, because multiple tenants perform monitoring and optimization related thereto is not performed, there is a problem that the control channel consumption is increased due to monitoring increases as the number of tenants increases.
Hereinafter, for solving the three problems described above, a network hypervisor that consumes a small number of control channels and delivers network statistics quickly and accurately to tenants will be described.
Referring to
Referring to
The statistics virtualization module may provide virtual flow entry statistics using a first algorithm targeting virtual flow entry and virtual port statistics using a second algorithm targeting virtual port.
First, the virtual flow entry statistics will be described. The virtual flow entry statistics may include at least one of a packet count, a byte count, and duration of the installed entry. Meanwhile, the network hypervisor may further include a virtual map module for checking mappings between a virtual flow entry (hereinafter, vf) and a physical flow entry (hereinafter, pf), for individual statistics. The first algorithm is as follows.
Referring to the first algorithm, when the pf is not shared with the virtual network (i.e., |V(pj)|=1), the statistics of the pf become the statistics of the vf. When a pf is shared between virtual networks (i.e., |V(pj)|>1), because the pf aggregates all the statistics of the vfs mapped to the pf, the pf statistics do not respond directly to the virtual network controller. In particular, when a plurality of vfs are mapped to one pf, the plurality of vfs for edge switches (the first and/or last switches on a forwarding path) are installed individually per virtual network like the mapping case |V(pj)|=1. This is because, in the edge switches, packets are dealt with separately per virtual network to ensure isolation in the virtual network. That is, because the pf in the edge is allocated per virtual network, the packets at the edge are delivered to a host (or a virtual machine). Accordingly, it is possible to respond to the physical statistics of the edge switch as the requested virtual statistics.
Next, the virtual port statistics will be described. The virtual port statistics may include an amount of received (hereinafter, RX) and/or transmitted (hereinafter, TX) packets. The second algorithm is as follows.
Referring to the second algorithm, similar to the flow entry, a physical port (hereinafter, pp) may be shared by one or more virtual networks. When a single virtual network utilized the physical port, the statistics of the pp become statistics of the virtual port (hereinafter, vp). Meanwhile, when the pp is mapped to a plurality of vps, traffic of a plurality of virtual networks is received and transmitted. In this case, the virtual flow statistics obtained in Algorithm 1 are used because the vfs process the packets transmitted to and received from the vp of a switch. For RX, virtual statistics of the vfs that have vp as its input port are accumulated. To calculate the TX, the virtual statistics of the vf sending packets out to the vp are added.
Thus, when the statistical virtualization module is used, it is possible to provide isolated statistics to the plurality of virtual networks, respectively.
The second problem of the aforementioned problems, that is, delay in monitoring, will be described in detail.
Referring to
Referring to
Hereinafter, the transmission disaggregation module will be described in detail. As described above, the transmission disaggregation module introduces a physical statistics cache and request interval estimation.
First, the physical statistics cache tracks the time the physical statistics are stored and whether the physical statistics per virtual network have already been used. When the physical statistics cache contains physical statistics that are not used in the requested virtual network (hit), the physical statistics may be directly responded to without retrieving the physical statistics from the physical switch. On the other hand, when the physical statistics are not in the physical statistics cache (miss) or are out of date (old) because they were previously used in virtual network requests, the cache retrieves the physical statistics from the physical switch.
The physical statistics cache may be filled with collected physical statistics (hereinafter, pCollector). The pCollector exists for each pf. That is, the pCollector is executed to retrieve the physical statistics on the pf of the physical switch. To be clear, the term “interval” is used for the time between two consecutive requests from a virtual network controller for a pf, and “period” is used for the time difference between two consecutive executions of the pCollector.
For each pCollector, the period execution should be determined. When the period of the pCollector is much shorter than the request interval, the pCollector will end up executing multiple times before the hit, which wastes the CPU and control channel resources. Conversely, when the pCollector is executed less frequently than the virtual statistics requests, the transmission delay may not be reduced because the physical statistics are old. Therefore, determining the execution period is very important, and this is what request interval estimation does.
The request interval estimate calculates the mean (u) and variance (a) per pf that characterize the request intervals of the virtual network controller. For pfi, the request of VNj is denoted as pfi,j and its distribution is (μi,j, σi,j). The physical statistics cache includes a pf identifier (pfi) and a VN identifier (j). The kth interval for pfi,j s denoted as pfi,kk.
The request interval of each virtual network controller may be changed. The request estimation interval flushes the w number of the past intervals (pfi,j1 to pfi,kw) after sending a new interval distribution in S70, and accumulates the interval 1 to w again. Thus, for the w number of recorded intervals in S20, (μi,j, σi,j) is updated in S30. When the pCollector for pfi is already generated in S40, the request interval estimation checks how much the newly updated μi,j is changed from the previous value in S80. When the changed amount is large (e.g., 25%), the function selects a new distribution for pfi in S50 and delivers a new triple (pfi, μi, σi) to the pCollector aggregation in S60.
Referring to
The pCollector aggregation module may perform ‘pCollector filter’ and ‘pCollector tuner’.
The pCollector filter determines an execution cycle of each pCollector and checks whether the pCollector may be merged into one pCollector for a specific physical switch. The pCollector tuner determines the starting delay of pCollector for accuracy improvement.
The objective of pCollector aggregation is to execute and merge pCollectors. Given a triple (pfi, μi, σi) in the transmission disaggregation module, a pCollector for pfi is generated. The pCollector periodically retrieves the pfi statistics from a switch. However, as the number of pCollectors increases, the pCollector may consume too much of the control channel.
The pCollector aggregation is done by two tasks, that is, pCollector filter to determine the execution period of tiny and aggregated pCollector and pCollector tuner for improving accuracy of virtual statistics using results of the pCollector.
From (pfi, μi, σi), the pCollector filter determines a period of the pCollector for pfi. For tiny pCollector, this is simple. However, for the aggregated pCollector, when the virtual network controllers issue statistics requests at similar intervals, each μi of pfi may be slightly different (e.g., 4.7 seconds, 4.9 seconds, and 5.1 seconds) because the distribution is estimated based on w samples. Therefore, it is challenging to determine the period of aggregated pCollector. To solve this problem, the pCollector filter starts with tiny pCollectors to have a similar period.
The role of the pCollector tuner is to give additional delay to the first execution of each pCollector to improve the accuracy of the virtual statistics.
Referring to
On the other hand, for aggregated pCollectors, the way of seeing the starting delay for tiny pCollectors rather leads to poor accuracy. This is because the multiple requests handled by the aggregated pCollector exist at different times in terms of the pCollector period.
Therefore, the pCollector tuner sets the starting delay of the aggregated pCollector as follows. First, the pCollector tuner checks the request interval estimation which stores the virtual statistics request times for each virtual network in S170 in
Hereinafter, an experimental example of an SDN network including a network hypervisor according to an embodiment of the inventive concept will be described.
In the experimental example, transmission delay, control channel consumption, and accuracy overhead are measured, and each experiment is repeated for more than 40 measured results.
Experimental Example 1 is a virtualized SDN including the network hypervisor described in this embodiment, Comparative Example 1 is a virtualized SDN using a network hypervisor without the characteristics of the network hypervisor described in this embodiment, and Example 2 is a non-virtualized native network.
In addition, the number of TCP connections generated by iperf3 for each of Experimental Example 1, Comparative Example 1, and Comparative Example 2 was changed, and each tenant issues a monitoring request to the ONOS controller.
Evaluation
1. Transmission delay: Average interval between the virtual statistics request and reply message from/to virtual network controllers is measured and evaluated.
In
By comparing the transmission delay between Experimental Example 1 and Comparative Example 2, it is possible to check the virtualization overhead. In linear topology of
2. Control Channel Consumption: Average values of bytes per second of control channel traffic to get flow entry (pf) statistics between the network hypervisor and the physical switches are measured and evaluated.
Comparing Experimental Example 1 and Comparative Example 1, Experimental Example 1 consumes 107% and 93% of control channel traffic in the linear and fat-tree topologies, respectively, which means that the consumption of Experimental Example 1 is considerably comparable to that of Comparative Example 2. In addition, in a fat-tree topology with few network connections, Experimental Example 1 is much better than Comparative Example 2. This is because Experimental Example 1 monitors only switches with pStatistics required for vStatistics. In
3. Accuracy overhead: Time difference between vStatistics request time and vStatistics collection time of pCollectors, particularly, an average value with a 95% confidence interval, is measured and evaluated.
Experimental Example 1 successfully improves transmission delay and control channel consumption. The improvements come with the accuracy overhead inevitable because disaggregated transmission and pCollector aggregation incur time difference between when vStatistics requests come and when pCollector become available by pStatistics.
The network hypervisor according to embodiments of the inventive concept may provide the monitoring result for each virtual network to the tenant, perform the monitoring with the small delay, and reduce the total control channel consumption.
Although the embodiments of the inventive concept have been described above with reference to the accompanying drawings, it may be understood that those of ordinary skill in the art to which the inventive concept pertains to implement the inventive concept in other specific forms without changing the technical spirit or essential features. Therefore, it should be understood that the embodiments described above are illustrative in all respects and are not limiting.
Number | Date | Country | Kind |
---|---|---|---|
10-2020-0051783 | Apr 2020 | KR | national |