Research on Backup Bethod of Service Function Chain Based on Security Classification
Sun Zhiyong, Tang Hongbo, Xinsheng Ji, You Wei, Liu Zhengming · 2018
In the environment of cloud computing and data center, general X86 servers make it easier for attackers to discover vulnerabilities and infect or spread virus. It has a great impact that single physical node failed on the service performance of the service function chain (SFC). The existing backup methods lack the idea to choice the backup nodes and ignore the trust relationship between physical nodes and virtual nodes. Firstly, this paper proposes a security classification mechanism between the virtual nodes and physical nodes, secondly, the scheme of backup node selection is proposed based on security classification mechanism. then the trust mechanism between virtual node and physical node is built when nodes mapping. Finally, it's the destination to minimize resource overhead of mapping to improve physical resource utilization. Experiments show that this method can improve the duration of pivotal nodes endure vulnerability mining by 23.02% to strengthen the resilience of the network significantly while satisfy the performance requirements of SFC mapping.