论文标题
测试床上的逻辑上的域间网络
Logical peering for interdomain networking on testbeds
论文作者
论文摘要
研究测试型织物有潜力支持长寿，不断发展的域间实验，包括跨多个校园和边缘站点的选择加入应用程序流量。我们提出了抽象和安全基础架构，以促进多域网络，以及用于在测试床托管的虚拟网络切片中运行的网络服务提供商（NSP）的可重复使用的控制器工具包（Exoplex）。我们在Exogeni测试床上演示了这个想法，该想法允许切片通过相互同意通过对等链接进行互连和交换流量。 每个Exoplex NSP都运行一个对等控制器，该控制器可以管理其与链接的对等方的交互，并通过SDN控制NSP的DataPlane网络。我们的方法表达了以声明性语言的安全凝视和路由的政策 - 逻辑上的凝视。该原型使用逻辑规则来验证IP前缀所有权，过滤和验证路由广告，并在具有多个Transit NSP的网络中实现用户指定的策略，以实现连接性和路径控制。
Research testbed fabrics have potential to support long-lived, evolving, interdomain experiments, including opt-in application traffic across multiple campuses and edge sites. We propose abstractions and security infrastructure to facilitate multi-domain networking, and a reusable controller toolkit (ExoPlex) for network service providers (NSPs) running in testbed-hosted virtual network slices. We demonstrate the idea on the ExoGENI testbed, which allows slices to interconnect and exchange traffic over peering links by mutual consent. Each ExoPlex NSP runs a peering controller that manages its interactions with its linked peers and controls the NSP's dataplane network via SDN. Our approach expresses policies for secure peering and routing in a declarative language---logical peering. The prototype uses logic rules to verify IP prefix ownership, filter and validate route advertisements, and implement user-specified policies for connectivity and path control in networks with multiple transit NSPs.
