Performance evaluation of a virtualized HTTP proxy in KVM and Docker

Eiras, Rodrigo S. V.; Couto, Rodrigo S.; Rubinstein, Marcelo G.

doi:10.1109/nof.2016.7810144

Cited by 14 publications

(11 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…To offload the service plane with encryption processes, a possible solution is to utilise a common encryption component to lower the resource consumption in a data-center. It is expected that a programmable data plane [29] and distributed containers [30] will be more available on enterprise switches and routers. Both of these alternatives can possibly make encryption services run more efficiently.…”

Section: Computational Overheadmentioning

confidence: 99%

A Tiered Control Plane Model for Service Function Chaining Isolation

2018

View full text Add to dashboard Cite

This article presents an architecture for encryption automation in interconnected Network Function Virtualization (NFV) domains. Current NFV implementations are designed for deployment within trusted domains, where overlay networks with static trusted links are utilized for enabling network security. Nevertheless, within a Service Function Chain (SFC), Virtual Network Function (VNF) flows cannot be isolated and end-to-end encrypted because each VNF requires direct access to the overall SFC data-flow. This restricts both end-users and Service Providers from enabling end-to-end security, and in extended VNF isolation within the SFC data traffic. Encrypting data flows on a per-flow basis results in an extensive amount of secure tunnels, which cannot scale efficiently in manual configurations. Additionally, creating secure data plane tunnels between NFV providers requires secure exchange of key parameters, and the establishment of an east-west control plane protocol. In this article, we present an architecture focusing on these two problems, investigating how overlay networks can be created, isolated, and secured dynamically. Accordingly, we propose an architecture for automated establishment of encrypted tunnels in NFV, which introduces a novel, tiered east-west communication channel between network controllers in a multi-domain environment.

show abstract

Section: Computational Overheadmentioning

confidence: 99%

A Tiered Control Plane Model for Service Function Chaining Isolation

2018

View full text Add to dashboard Cite

show abstract

“…Eiras et al virtualized the HTTP proxy over KVM and Docker and compared the performance [9]. Spoiala et al built the WebRTC over KVM and Docker [10].…”

Section: Related Workmentioning

confidence: 99%

“…There are some studies that evaluate the NFV performance over hypervisor and container such as the virtualization of HTTP proxy [9] and WebRTC [10]. However, there are very few articles discussing the virtualization of EPC using hypervisor and container.…”

Section: Introductionmentioning

confidence: 99%

Empirical Experience and Experimental Evaluation of Open5GCore over Hypervisor and Container

Chang

Qiu

Chen

et al. 2018

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

One of the most important technologies for future 5G networks is to utilize Network Function Virtualization (NFV) to virtualize the network components. NFV provides flexibility, short time to market, and low cost solution to build network services, which are important features of 5G networks. Although the idea of virtualization is just being applied to cellular networks, it has been used in the community of cloud computing. There are two main virtualization techniques, hypervisor and container. In this paper, we present our practical experience of virtualizing Open5GCore, a commercial product of SDN-enabled Evolved Packet Core (EPC), over hypervisor and container. In addition to describing how to virtualize Open5GCore, we also present the experimental performance evaluation of the systems. Finally, some important lessons learned are provided.

show abstract

“…Alguns trabalhos avaliaram também o desempenho de uma função de rede virtual específica quando a mesma é virtualizada em hypervisores tradicionais em comparação com a recente tecnologia de containers como em (EIRAS et al, 2016) e (MAURICIO et al, 2016. O primeiro conclui que um proxy HTTP virtualizado em Docker solicita HTTP em um tempo menor que em KVM e que um container Docker pode ser duas vezes mais rápido que uma VM baseada em KVM.…”

Section: Trabalhos Relacionadosunclassified

“…Junto com os benefícios trazidos pela virtualização de funções de rede, surgem preocupações com o desempenho, uma vez que fornecer desempenho equiparável as NF implementadas em soluções dedicadas de hardware é um dos grandes desafios de NFV (MIJUMBI et al, 2015), visto que investigações recentes demonstram a degradação de desempenho imposta pelo uso de camadas de virtualização (EIRAS et al, 2016). Neste contexto, em um cenário cuja integração entre SDN e NFV está sendo cada vez mais intensificada, justifica-se a importância de avaliarmos um controlador SDN implementado como uma função de rede virtual -VNF, verificando as implicações da virtualização nos parâmetros de desempenho mais críticos.…”

Section: Introductionunclassified

Avaliação de desempenho de um controlador SDN implementado como uma VNF

Ramos¹

2017

Anais Do Workshop Pré-Ietf (WPIETF)

View full text Add to dashboard Cite

No presente trabalho, realizamos experimentos com um controlador SDN implementado como uma função de rede virtual nos hypervisores de código aberto KVM e XEN e comparamos os parâmetros de desempenho mais críticos em relação a um cenário nativo com o propósito de mensurar a degradação de desempenho causada pela virtualização. Utilizamos Cbench para emular redes SDN e avaliar o desempenho e a latência do controlador Floodlight. Descobrimos que a virtualização do controlador no ambiente KVM resultou na degradação do processamento de fluxos em 29%, apresentou um aumento do tempo de resposta de 22% e utilizou bem menos o processador em relação ao ambiente Xen, que apesar de ter sobrecarregado a CPU em 25%, foi capaz de atingir o melhor desempenho, tempo de resposta e a menor utilização de memória RAM.

show abstract

Performance evaluation of a virtualized HTTP proxy in KVM and Docker

Cited by 14 publications

References 11 publications

A Tiered Control Plane Model for Service Function Chaining Isolation

A Tiered Control Plane Model for Service Function Chaining Isolation

Empirical Experience and Experimental Evaluation of Open5GCore over Hypervisor and Container

Avaliação de desempenho de um controlador SDN implementado como uma VNF

Contact Info

Product

Resources

About