Abstract

Network Functions Virtualization (NFV) is a key technology for network automation and has been instrumental to materialize the disruptive view of 5G and beyond mobile networks. In particular, 5G embraces NFV to support the automated and agile provision of telecommunication and vertical services as a composition of versatile virtualized components, referred to as Virtual Network Functions (VNFs). It provides a high degree of flexibility in placing these components on distributed NFV infrastructures (e.g., at the network edge, close to end users). Still, this flexibility creates new challenges in terms of VNF connectivity. To address these challenges, we introduce a novel secure link-layer connectivity platform, L2S. Our solution can automatically be deployed and configured as a regular multi-site NFV service, providing the abstraction of a layer-2 switch that offers link-layer connectivity to VNFs deployed on remote NFV sites. Inter-site communications are effectively protected using existing security solutions and protocols, such as IP security (IPsec). We have developed a functional prototype of L2S using open-source software technologies. Our evaluation results indicate that this prototype can perform IP tunneling and cryptographic operations at Gb/s data rates. Finally, we have validated L2S using a multi-site NFV ecosystem at the Telefonica Open Network Innovation Centre (5TONIC), using our solution to support a multicast-based IP television service.

Highlights

  • The development of next-generation mobile networks, and in particular the recently available 5th generation, or 5G, has revolutionized the landscape of broadband wireless access connectivity and mobile communication services

  • Network Functions Virtualization (NFV) technologies alleviate the dependency of service provisioning on specialized hardware, as multiple Virtual Network Functions (VNFs) can be executed on more generic virtualization-capable server computers with diverse capacities

  • After the successful deployment of the IP television (IPTV) service, the multicast routing functions (VNFa2, VNFb, and VNFc) started exchanging Protocol Independent Multicast—Sparse Mode (PIM-SM) protocol messages through the L2S platform. These routing functions were effectively connected at layer 2 as expected as if they were on the same local area network, despite being placed at different NFV infrastructure (NFVI) sites

Read more

Summary

A Secure Link-Layer Connectivity Platform for Multi-Site NFV Services

Ivan Vidal 1,* , Borja Nogales 1 , Diego Lopez 2 , Juan Rodríguez 3 , Francisco Valera 1 and Arturo Azcorra 1,4. Academic Editors: Balázs Sonkoly, László Toka, Byung-Seo Kim, Luis Miguel Contreras-Murillo and Róbert Szabó. Publisher’s Note: MDPI stays neutral with regard to jurisdictional claims in published maps and institutional affiliations

Introduction
Description of the Reference Scenario
Layer-3 Inter-Site Communications
Layer-2 Inter-Site Communications
Deployment and Configuration Aspects
Layer-2 Connectivity for Multi-Site Network Services
Performance Evaluation
Practical Experiments and Results
Parallelization of L2S Operations
Operational and Scalability Considerations
Functional Validation
Description of the Validation Scenario
Provision and Configuration of NFV Sites
Implementation of the IPTV Service Functions
Deployment of L2S and IPTV Services
Validation Results
Conclusions

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.