DEFINE: A Service-Oriented Dynamically Enabling Function Model

摘要: With the rapid expansion of network scale and continuous evolution applications, Internet becomes much more open uncontrollable, inevitably faces a variety security threats. In order to satisfy requirements current transmission performance, general solution is increasing specific devices (e.g., firewalls, monitors) detect defend against attacks. However, these typically use dedicated hardware-based or software-based architecture which closed, leading limited scalability, management complexity. And deploying new application needs develop equipment, take long development cycle costs lot.In this paper, we introduce an innovative Dynamically Enable Function Network Equipment (DEFINE) allow tenant get service quickly. First, DEFINE decouples into different functional components, connects function components in reconfigurable method. Second, provides programmable interface third party, who can their own processing modules according needs. To verify effectiveness model, set up evaluating with FPGA-based OpenFlow switch prototype, deployed several applications on it. Our results show that has excellent flexibility performance.