A Dynamic Composition Mechanism of Security Service Chaining Oriented to SDN/NFV-Enabled Networks

With the large-scale commercial application of data center networks, the security problem of data center network is attracting more and more attention. However, security functions are usually placed on proprietary hardware, which makes the delivery of security service inflexible and of high cost. The emerging software-defined networking and network function virtualization in a joint manner are promising technology that can solve these outlined problems through a process named security service chaining (SSC) composition. Determining the composition of SSC that optimizes the resource allocation is a challenging problem, particularly without violating security and resource requirements. This problem is called the dynamic SSC composition problem, and an integer linear programming formulation with implementation in GLPK is provided. A novel heuristic solution is provided based on the breadth first search algorithm. The obtained experimental results show that the proposed algorithm can perform better than the compared ones, and the advantage of the proposed mechanism is also demonstrated via NetFPGA-10G prototype.