一种基于成本的多虚拟安全设备SDN布局算法：MO-UFLP（Multi-Ordered Uncapacitated Facility Location Problem）
A Cost-based Placement Algorithm for Multiple Virtual Security Appliances in Cloud using SDN: MO-UFLP(Multi-Ordered Uncapacitated Facility Location Problem)
摘要：
软件定义网络（SDN）引入了许多先进的平台来管理网络并采用不同的安全工具，但这些平台的成本也应该考虑在内。在本文中，我们提出了一种扩展现有的方法，在预定义的网络设置的虚拟安全设备的最佳位置。Bouet [1]提出的方法只考虑了一个安全设备，我们将他的方法扩展到多个虚拟安全设备。我们进行了几次模拟测试，显示出良好的性能，我们的方法。为了证明可行性，我们使用SDN和虚拟安全设备实现了我们的方法，并将其集成到OpenStack中。该扩展使UFLP算法适应现实世界的情况，其中需要部署多个中间盒以满足部署在云中的应用程序的安全需求。我们通过实现“OpenStack on top of OpenStack”实现了这种方法，这是一种嵌套的OpenStack实现，使用OpenDayLight作为SDN控制器。
英文摘要：
Software Defined Networking (SDN), has introduced many advanced platforms for managing networks and adopting different security tools with them, but the cost of these platforms should be considered as well. In this paper, we present an extension of the existing approach to the optimal placement of virtual security appliances in a pre-defined network setting. The approach proposed by Bouet [1] only considered one security appliance, we extended his approach to several virtual security appliances. We conducted several simulation tests showing good performances of our approach. To show the feasibility, we implemented our approach using SDN and virtual security appliances and integrated it into OpenStack. This extension adapts UFLP algorithm to real world situations where several middle boxes need to be deployed to satisfy security needs for the applications deployed in the cloud. We realized this approach by implementing "OpenStack on top of OpenStack" , a nested OpenStack implementation with OpenDayLight as the SDN controller .
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
