Network function virtualization (NFV) is a powerful networking approach that leverages computing resources to perform a time-varying set of network processing functions. Although microprocessors can be used for this purpose, their performance limitations and lack of specialization present implementation challenges. In this article, we describe a new heterogeneous hardware-software NFV platform called CoNFV that provides scalability and programmability while supporting significant hardware-level parallelism and reconfiguration. Our computing platform takes advantage of both field-programmable gate arrays (FPGAs) and microprocessors to implement numerous virtual network functions (VNF) that can be dynamically customized to specific network flow needs. The most distinctive feature of our system is the use of global network state to coordinate NFV operations. Traffic management and hardware reconfiguration functions are performed by a global coordinator that allows for the rapid sharing of network function states and continuous evaluation of network function needs. With the help of state sharing mechanism offered by the coordinator, customer-defined VNF instances can be easily migrated between heterogeneous middleboxes as the network environment changes. A resource allocation and scheduling algorithm dynamically assesses resource deployments as network flows and conditions are updated. We show that our deployment algorithm can successfully reallocate FPGA and microprocessor resources in a fraction of a second in response to changes in network flow capacity and network security threats including intrusion.

中文翻译：

---

协同NFV

网络功能虚拟化 (NFV) 是一种强大的网络方法，它利用计算资源来执行一组随时间变化的网络处理功能。尽管微处理器可用于此目的，但它们的性能限制和缺乏专业化提出了实施挑战。在本文中，我们描述了一种名为 CoNFV 的新型异构硬件-软件 NFV 平台，该平台提供可扩展性和可编程性，同时支持重要的硬件级并行性和重新配置。我们的计算平台利用现场可编程门阵列 (FPGA) 和微处理器来实现众多虚拟网络功能 (VNF)，这些功能可以根据特定的网络流量需求进行动态定制。我们系统最显着的特点是使用全局网络状态来协调 NFV 操作。流量管理和硬件重新配置功能由全局执行协调员这允许网络功能状态的快速共享和网络功能需求的持续评估。借助协调器提供的状态共享机制，客户定义的 VNF 实例可以随着网络环境的变化在异构中间盒之间轻松迁移。随着网络流量和条件的更新，资源分配和调度算法会动态评估资源部署。我们展示了我们的部署算法可以在几分之一秒内成功地重新分配 FPGA 和微处理器资源，以响应网络流量容量的变化和包括入侵在内的网络安全威胁。