Arquitetura de Virtualização Leve Multi-Tenant para Switches Programáveis
Resumo
A virtualização está ganhando força em planos de dados programáveis (PDPs), com várias soluções na literatura para emular ou instanciar switches programáveis virtuais no mesmo dispositivo hospedeiro. Nesse contexto, a virtualização apresenta inúmeras vantagens, permitindo a multilocação (multi-tenancy) em redes de data centers programáveis e maior utilização dos recursos dos dispositivos. No entanto, habilitar uma solução mult-tenant completa requer considerações de segurança ainda não abordadas em investigações anteriores. Neste artigo, apresentamos uma arquitetura de virtualização para PDPs baseada na composição de programas e controle de acesso para gerenciar com segurança switches virtuais de diferentes tenants. Experimentos realizados destacam a capacidade de gerenciar com transparência switches virtuais hospedados no mesmo dispositivo físico, em cenários com vários tenants.Referências
Authors (2024). Artigo SBRC secvirtpfour: Código-fonte do Projeto e Scripts. Url: [link].
Bosshart, P. et al. (2014). P4: Programming protocol-independent packet processors. SIGCOMM Comput. Commun. Rev., 44(3):87–95.
Bueno, G., Saquetti, M., Rodrigues, P., Lamb, I., Gaspary, L., Luizelli, M. C., Zhani, M. F., Azambuja, J. R., and Cordeiro, W. (2022). Managing virtual programmable switches: Principles, requirements, and design directions. IEEE Communications Magazine, 60(2):53–59.
Dang, H. T. (2019). P4dns: In-network dns. ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS).
Hancock, D. and Van Der Merwe, J. (2016). Hyper4: Using p4 to virtualize the programmable data plane. In CoNEXT’16, pages 35–49. ACM.
Kim, C., Bhide, P., Doe, E., Holbrook, H., Ghanwani, A., Daly, D., Hira, M., and Davie, B. (2016). In-band network telemetry (int). technical specification P, 4:2015.
Lantz, B., Heller, B., and McKeown, N. (2010). A network in a laptop: Rapid prototyping for software-defined networks. In Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, Hotnets-IX, New York, NY, USA. Association for Computing Machinery.
McKeown, Nick e Anderson, T. e. o. (2008). Openflow: Enabling innovation in campus networks. ACM SIGCOMM Computer Communication Review, 38:67–79.
Michel, O., Bifulco, R., Rétvári, G., and Schmid, S. (2021). The programmable data plane: Abstractions, architectures, algorithms, and applications. ACM Comput. Surv., 54(4).
P4Org (2008). P4runtime specification. ver. 1.3.0.
Tanaembaum, Andrew S. e Bos, H. (2014). Modern Operating Systems. Prentice Hall, 4th edition.
Tokusashi, Y., Matsutani, H., and Zilberman, N. (2018). Lake: The power of in-network computing. International Conference on ReConFigurable Computing and FPGAs (Re-ConFig).
Woodruff, J. (2020). P4xos: Consensus as a network service. IEEE/ACM Transactions on Networking, 28.
Zhang, C., Bi, J., Zhou, Y., Dogar, A. B., and Wu, J. (2017). Hyperv: A high performance hypervisor for virtualization of the programmable data plane. In Computer Communication and Networks (ICCCN), 2017 26th Int’l Conference on, pages 1–9. IEEE.
Zheng, P., Benson, T. A., and Hu, C. (2020). Building and testing modular programs for programmable data planes. IEEE Journal on Selected Areas in Communications, 38(7):1432–1447.
Bosshart, P. et al. (2014). P4: Programming protocol-independent packet processors. SIGCOMM Comput. Commun. Rev., 44(3):87–95.
Bueno, G., Saquetti, M., Rodrigues, P., Lamb, I., Gaspary, L., Luizelli, M. C., Zhani, M. F., Azambuja, J. R., and Cordeiro, W. (2022). Managing virtual programmable switches: Principles, requirements, and design directions. IEEE Communications Magazine, 60(2):53–59.
Dang, H. T. (2019). P4dns: In-network dns. ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS).
Hancock, D. and Van Der Merwe, J. (2016). Hyper4: Using p4 to virtualize the programmable data plane. In CoNEXT’16, pages 35–49. ACM.
Kim, C., Bhide, P., Doe, E., Holbrook, H., Ghanwani, A., Daly, D., Hira, M., and Davie, B. (2016). In-band network telemetry (int). technical specification P, 4:2015.
Lantz, B., Heller, B., and McKeown, N. (2010). A network in a laptop: Rapid prototyping for software-defined networks. In Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, Hotnets-IX, New York, NY, USA. Association for Computing Machinery.
McKeown, Nick e Anderson, T. e. o. (2008). Openflow: Enabling innovation in campus networks. ACM SIGCOMM Computer Communication Review, 38:67–79.
Michel, O., Bifulco, R., Rétvári, G., and Schmid, S. (2021). The programmable data plane: Abstractions, architectures, algorithms, and applications. ACM Comput. Surv., 54(4).
P4Org (2008). P4runtime specification. ver. 1.3.0.
Tanaembaum, Andrew S. e Bos, H. (2014). Modern Operating Systems. Prentice Hall, 4th edition.
Tokusashi, Y., Matsutani, H., and Zilberman, N. (2018). Lake: The power of in-network computing. International Conference on ReConFigurable Computing and FPGAs (Re-ConFig).
Woodruff, J. (2020). P4xos: Consensus as a network service. IEEE/ACM Transactions on Networking, 28.
Zhang, C., Bi, J., Zhou, Y., Dogar, A. B., and Wu, J. (2017). Hyperv: A high performance hypervisor for virtualization of the programmable data plane. In Computer Communication and Networks (ICCCN), 2017 26th Int’l Conference on, pages 1–9. IEEE.
Zheng, P., Benson, T. A., and Hu, C. (2020). Building and testing modular programs for programmable data planes. IEEE Journal on Selected Areas in Communications, 38(7):1432–1447.
Publicado
20/05/2024
Como Citar
LAMB, Ivan Peter; DUARTE, Pedro Arthur P. R.; LUIZELLI, Marcelo C.; AZAMBUJA, José Rodrigo; CORDEIRO, Weverton.
Arquitetura de Virtualização Leve Multi-Tenant para Switches Programáveis. In: SIMPÓSIO BRASILEIRO DE REDES DE COMPUTADORES E SISTEMAS DISTRIBUÍDOS (SBRC), 42. , 2024, Niterói/RJ.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2024
.
p. 29-42.
ISSN 2177-9384.
DOI: https://doi.org/10.5753/sbrc.2024.1235.