The network virtualization allows new on-demand management capabilities, in this work we demonstrate such a service, namely, on-demand efficient monitoring or anonymity. The proposed service is based on network virtualization of expanders or sparsifiers over the physical network. The defined virtual (or overlay) communication graphs coupled with a multi-hop extension of Valiant randomization based routing lets us monitor the entire traffic in the network, with a very few monitoring nodes. In particular, we show that using overlay network with expansion properties and Valiant randomized load balancing it is enough to place @math monitor nodes when the length of the overlay path (number of intermediate nodes chosen by Valiant's routing procedure) is @math . We propose two randomized routing methods to implement policies for sending messages, and we show that they facilitate efficient monitoring of the entire traffic, such that the traffic is distributed uniformly in the network, and each monitor has equiprobable view of the network flow. In terms of complex networks, our result can be interpreted as a way to enforce the same betweenness centrality to all nodes in the network. Additionally, we show that our results are useful in employing anonymity services. Thus, we propose monitoring or anonymity services, which can be deployed and shut down on-demand. Our work is the first, as far as we know, to bring such on-demand infrastructure structuring using the cloud network virtualization capability to existing monitoring or anonymity networks. We propose methods to theoretically improve services provided by existing anonymity networks, and optimize the degree of anonymity, in addition providing robustness and reliability to system usage and security. We believe that, our constructions of overlay expanders and sparsifiers weighted network are of independent interest.
Our results can be used as the base to provide a flexible and robust network architecture as a service with on demand deployment. Boubendir describes an implementation of NaaS architecture with SDN-enabled NFV in @cite_28 , and shows feasible on demand dynamic network service based on SDN-enabled NFV @cite_31 . We further exploit the NV, SDN and NFV emerging technologies to enable network architecture as a service for use in private commercial networks, network and service providers, or facilities desiring flexible policy enabled networking for securing their traffic and monitor network flows for mitigation of misuse or malicious uses.
@cite_28 @cite_31
2469760695 2465009899
The sharp rise of OTT application services in recent years has called for greater application-to-network visibility. These dynamic application services represent a foremost drive in the communication ecosystem changes. However, the tight coupling between network services and network infrastructures pose challenges for network providers. They need more dynamicity in their network architectures to meet the requirements of application services. SDN and NFV is the combination of networking technologies that facilitate such an evolution. But is it sufficient to allow dynamic application-to-network interactions? In this paper, we rely on SDN-enabled NFV assets as a strong foundation to propose a dynamic and adaptable “Network-as-a-Service” architecture. We leverage our NaaS proposal with a resilient Network Exposition Layer allowing to express offers and demands of network services. To demonstrate the offered features, we propose three architecture deployment models: broad, customized and event-based dynamic model. We then instantiate our architecture within the WebRTC-based communication services, illustrating the collaboration between network providers and Communication Service Providers (CSPs). We present in this paper the implementation of the networking part of a Network-as-a-Service (NaaS) architecture based on SDN-enabled NFV using as a basis the OPNFV open framework. This NaaS architecture can be instantiated according to three deployment models allowing application service providers (OTTs) and application services themselves to request specific network services from a network provider within a NaaS model. Therefore, we propose to demonstrate the feasibility of NaaS architecture deployment models with a focus on an “on-demand dynamic model” to highlight the offered dynamicity and easy application-to-network interactions. We have chosen to illustrate the deployment models with a WebRTC OTT application and showcase the on-demand dynamic deployment of virtual network functions, mainly TURN server. Because of time-sensitivity of these communication services, we have relied on container-based (Docker type) instead of virtual machine-based network functions virtualization.