Multidimensional intelligent capacity expansion and contraction method and system of telecommunication network security service VNF

Abstract

The invention provides a multidimensional intelligent capacity expansion and contraction method and system of a telecommunication network security service VNF. The method comprises the following steps: a VDU reports a virtual machine service indicator that is being used to a VNFM; the VNFM calculates an average occupancy rate of a current service indicator and a service redundancy indicator of a VDU virtual machine, and judges whether a capacity expansion or a capacity contraction operation needs to be performed on the VDU virtual machine, and if yes, the next step is continued; and the VNFM builds an analog virtual machine group, joins the virtual machine that is being used by the VDU to the analog virtual machine group, and then increases idle virtual machines one by one or deletes the virtual machine that is being used in the analog virtual machine group: calculating the average occupancy rate of an analog service indicator of the VDU virtual machine, judging whether the non-adjustment or capacity expansion operation needs to be performed on the VDU virtual machine, if yes, the simulating the virtual machines in the virtual machine group, that is, virtual resources allocated tothe UDV at the next moment. The invention belongs to the field of communication, and the virtual resources meeting the operation demands can be accurately provided for all kinds of telecommunication network security services.

Description

technical field [0001] The invention relates to a multi-dimensional intelligent expansion and contraction method and system for a security service VNF of a telecommunication network, belonging to the communication field. Background technique [0002] The development and evolution of telecommunication networks is moving from softswitching and packetization to software definition and network function virtualization. In order to meet the operator's need to deal with fraudulent calls in the packetized telecommunications network, the security business of the telecommunications network can use the NFV architecture. There are multiple virtual network functions (VNFs) in the architecture. Each function is independent and can be increased or decreased. A function has one or more virtualization deployment units (VDUs), and each VDU has a pre-allocated virtual resource amount according to business and equipment requirements, and sets the maximum and minimum resource usage ranges. In t...

AI Technical Summary

Problems solved by technology

These technical solutions expand and shrink according to hardware indicators, which will lead to the following problems: On the one hand, only relying on the current load, ignoring the time required to expand resources, so that users cannot perform any tasks during this period (1 minute-10 minutes). This not only wastes valuable time of users, but also affects the service quality of corresponding applications, so the user satisfaction obtained by this expansion and contraction method is not very good; , the time distribution characteristics of different types of fraudulent calls are also different. If expansion and contraction rules are artificially set, while the rules are complex, the rules and processing methods need to be updated frequently. Because whether each type of security business is triggered in a certain period of time can be It is judged according to one or more indicators in its business, so it is difficult to accurately win in the dynamic game with fraudsters if the VNF does not expand or shrink according to its own business indicators

Images