a b s t r a c t NFV and SDN are nowadays seen as a solid opportunity by telecom operators to reduce costs while at the same time providing new and better services. Recently, the Unify project proposed a multi-layered architecture that, leveraging different levels of abstraction, can orchestrate and deploy generic network services on the physical infrastructure of the telecom operator. In this paper, we exploit such an architecture to deliver end-to-end generic services in presence of multiple concurring players (e.g. network operator, end-users), leveraging a new simple data model. Particularly, we propose a description-based approach allowing to deploy agile, implementation-independent and high-level network services over a distributed set of resources. The resulting data model can abstract generic services, including both middleboxbased (e.g., firewalls, NATs, etc.) and traditional LAN-based ones (e.g., a BitTorrent client). Finally, two distinct prototypes, originated by different design principles, are implemented in order to validate our proposal with the aim of demonstrating the adaptability of our approach to different contexts.

No abstract

Network Functions Virtualization can enable each user (tenant) to define his desired set of network services, called (network) service graph. For instance, a User1 may want his traffic to traverse a firewall before reaching his terminal, while a User2 may be interested in a different type of firewall and in a network monitor as well. This paper presents a prototype of an SDN-enabled node that, given a new user connected to one of its physical ports, it is able to dynamically instantiate the user's network service graph and force all his traffic to traverse the proper set of network functions.

International audienceThe cloud model is rapidly evolving, with maturing intercloud architectures and progressive integration of sparse, geodistributed resources into large datacenters. The single-provider administrative barrier is also increasingly crossed by applications, allowing new verticals to benefit from the multicloud model. For instance, in home healthcare systems, transparent usage of resources from multiple providers enables "follow-me" scenarios, where healthcare services are accessible anywhere, anytime, with quality-of-service (QoS) guarantees. However, transparency might be at odds with security and jurisdictions, imposing restrictions on where data and applications might be stored and run. Existing intercloud approaches either disrupt application deployment mechanisms or compromise infrastructure homogeneity, making enforcing a uniform QoS level more complex, notably for protection. This article introduces Orchestration for beyond Intercloud Security (Orbits), an infrastructure-as-a-service-level architecture that enables flexible and legacy intercloud application deployment for mobile remote healing, while providing a homogeneous service abstraction across multiple clouds. The authors also present a work-in-progress prototype and several benchmarks to demonstrate the viability of the approach and highlight key implementation choices

No abstract