Service Provider DevOps

John, Wolfgang; Marchetto, Guido; Németh, Felicián; Skoldstrom, Pontus; Steinert, Rebecca; Meiroşu, Cătălin; Papafili, Ioanna; Pentikousis, Kostas

doi:10.1109/mcom.2017.1500803cm

Cited by 18 publications

(12 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The softwarized nature of SDN/NFV-based services, makes them a good fit for DevOps processes. A wellknown methodology from the IT-world for building and maintaining software projects, but now applied to a collaboration between network service developers and telecom operators [4,6]. At a high level, it resembles the "design for manufacturing" engineering concept, where the design facilitates the manufacturing process [1].…”

Section: Telco-grade Devopsmentioning

confidence: 99%

Introducing Development Features for Virtualized Network Services

et al. 2018

View full text Add to dashboard Cite

Network virtualization and softwarizing network functions, are trends aiming at higher network efficiency, cost reduction and agility. They are driven by the evolutions in Software Defined Networking (SDN) and Network Function Virtualization (NFV). This shows that software will play an increasingly important role within telecommunication services, which were previously dominated by hardware appliances. Service providers can benefit from this, as it enables a faster introduction of new telecom services, combined with an agile set of possibilities to optimize and fine-tune their operations. However, the provided telecom services can only evolve if the adequate software tools are available. In this article, we explain how the development, deployment and maintenance of such an SDN/NFV-based telecom service puts specific requirements on the platform providing it. A Software Development Kit (SDK) is introduced, allowing service providers to adequately design, test and evaluate services before they are deployed in production and also update them during their lifetime. This continuous cycle between development and operations, a concept known as DevOps, is a well-known strategy in software development. To extend its context further to SDN/NFV-based services, the functionalities provided by traditional cloud platforms are not yet sufficient. By giving an overview of the currently available tools and their limitations, the gaps in DevOps for SDN/NFV services are highlighted. The benefit of such an SDK is illustrated by a secure content delivery network service (enhanced with deep packet inspection and elastic routing capabilities). With this use-case, the dynamics between developing and deploying a service are further illustrated.

show abstract

Section: Telco-grade Devopsmentioning

confidence: 99%

Introducing Development Features for Virtualized Network Services

et al. 2018

View full text Add to dashboard Cite

show abstract

“…the DevOps methodology). Earlier MANO-DevOps integrations such as [1] only focus on troubleshooting operational services. In fact, we can consider this SDK environment as a sandbox to develop and try-out NFV-based network services.…”

Section: Telco-grade Devopsmentioning

confidence: 99%

“…To fill this gap, we have build an SDK environment to additionally validate: Service Function Chaining (SFC), custom placement on multiple Points of Presence (PoPs) and dedicated control functions to configure and scale VNFs in the service. This functionality builds further upon the available standards for Management and Orchestration (MANO) frameworks 1 , extended with an SDK environment 2 . The code is open-source and freely available 3 .…”

Section: Introductionmentioning

confidence: 99%

A network service development kit supporting the end-to-end lifecycle of NFV-based telecom services

Rossem

Peuster

Conceição

et al. 2017

2017 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)

View full text Add to dashboard Cite

Ongoing evolutions in the Network Function Virtualization (NFV) area show that software will play an increasingly important role within the telecommunication industry. It enables telco providers to faster introduce telecom services, combined with new possibilities to optimize and fine-tune operational performance. New virtualization and softwarization methods support fine-grained scaling of resources and highly-customizable configuration settings. Additionally, multi-datacenter topologies are available to deploy the Virtual Network Functions (VNFs) a service consists of. In this context, specialized tools are needed for debugging and validating the deployment, placement, chaining, configuration and scaling of network services, before the operator deploys the service in production. This demo showcases an opensource Software Development Kit (SDK), built to support NFVbased services throughout their whole lifecycle. During the demo, several example VNFs will be loaded into the SDK environment to demonstrate the features a service developer is envisioned to use, while either creating or updating NFV-based telecom services.

show abstract

“…The main problem behind the difficulty of these operations is that both the decisions where the CPSs should be placed and how they should be configured are personally taken by human beings. The fallibility of a manual security configuration is inevitable in complex networks where an administrator struggles to have a complete overview, thus opening the path to cyber attacks [16]. This claim finds proof in the most recent Verizon's Data Breach Investigation Report [24], according to which misconfiguration of security functions due to manual operations represents the most exploited error category for data breaches.…”

Section: Introductionmentioning

confidence: 99%

Short Paper

Bringhenti

Marchetto

Sisto

et al. 2020

Proceedings of the 2nd Workshop on Cyber-Security Arms Race

Self Cite

View full text Add to dashboard Cite

Data confidentiality, integrity and authentication are security properties which are often enforced with the generation of secure channels, such as Virtual Private Networks, over unreliable network infrastructures. Traditionally, the configuration of the systems responsible of encryption operations is performed manually. However, the advent of software-based paradigms, such as Software-Defined Networking and Network Functions Virtualization, has introduced new arms races. In particular, even though network management has become more flexible, the increased complexity of virtual networks is making manual operations unfeasible and leading to errors which open the path to a large number of cyber attacks. A possible solution consists in reaching a trade-off between flexibility and complexity, by automatizing the configuration of the channel protection systems through policy refinement. In view of these considerations, this paper proposes a preliminary study for an innovative methodology to automatically allocate and configure channel protection systems in virtualized networks. The proposed approach would be based on the formulation of a MaxSMT problem and it would be the first to combine automation, formal verification and optimality in a single technique. CCS CONCEPTS • Security and privacy → Formal security models; Security protocols; Privacy-preserving protocols; • Networks → Security protocols; Network management.

show abstract

Service Provider DevOps

Cited by 18 publications

References 9 publications

Introducing Development Features for Virtualized Network Services

Introducing Development Features for Virtualized Network Services

A network service development kit supporting the end-to-end lifecycle of NFV-based telecom services

Short Paper

Contact Info

Product

Resources

About