Network Functions Virtualization
What is network functions virtualization?
• Network functions virtualization (NFV) is the
replacement of network appliance hardware
with virtual machines.
• The virtual machines use a hypervisor to run
networking software and processes such as
routing and load balancing.
Why network functions virtualization?
• NFV allows for the separation of communication services
from dedicated hardware, such as routers and firewalls.
• This separation means network operations can provide
new services dynamically and without installing new
hardware.
• Deploying network components with network functions
virtualization takes hours instead of months like with
traditional networking.
• Also, the virtualized services can run on less expensive,
generic servers instead of proprietary hardware.
Additional reasons to use network
functions virtualization include:
1.Pay-as-you-go:
Pay-as-you-go NFV models can reduce costs because businesses
pay only for what they need.
2.Fewerappliances:
Because NFV runs on virtual machines instead of physical machines,
fewer appliances are necessary and operational costs are lower.
3.Scalability:
Scaling the network architecturewithvirtualmachinesis faster and
easier, and it does not require purchasing additional hardware.
How does network functions virtualization work?
• Essentially, network functions virtualization replaces the
functionality provided by individual hardware networking
components.
• This means that virtual machines run software that accomplishes
the same networking functions as the traditional hardware.
• Load balancing, routing and firewall security are all performed
by software instead of hardware components.
• A hypervisor or software-defined networking controller allows
network engineers to program all of the different segments of the
virtual network, and even automate the provisioning of the
network.
• IT managers can configure various aspects of the network
functionality through one pane of glass,in minutes.
Benefits of network functions virtualization
• Many service providers feel that the benefits of
network functions virtualization outweigh the risks.
• With traditional hardware-based networks, network
managers have to purchase dedicated hardware devices
and manually configure and connect them to build a
network.
• This is time-consuming and requires specialized
networking expertise.
1. NFV allows virtual network function to run on a
standard generic server, controlled by a hypervisor, which
is far less expensive than purchasing proprietary
hardware devices.
2. Network Configuration and management is much
simpler with a virtualized network.
3.Best of all, network functionality can be changed
or added on demand because the network runs on virtual
machines that are easily provisioned and managed.
Risks of network functions virtualization
• NFV makes a network more responsive and flexible,
and easily scalable.
• It can accelerate time to market and significantly
reduce equipment costs.
• There are security risks, and network functions
virtualization security concerns have proven to be a
hurdle for wide adoption among telecommunications
providers.
The risks of implementing network functions virtualization that service providers need to consider:
• Physical security controls are not effective:Virtualizing network components
increases their vulnerability to new kinds of attacks compared to physical
equipment that is locked in a data center.
• Malware is difficult to isolate and contain: It is easier for malware to travel
among virtual components that are all running off of one virtual machine than
between hardware components that can be isolated or physically separated.
• Network traffic is less transparent: Traditional traffic monitoring tools have
a hard time spotting potentially malicious anomalies within network traffic that
is traveling east-west between virtual machines, so NFV requires more fine-
grained security solutions.
• Complex layers require multiple forms of security : Network functions
virtualization environments are inherently complex, with multiple layers that
are hard to secure with blanket security policies.
NFV architecture
• In traditional network architecture, individual
proprietary hardware devices such as routers, switches,
gateways, firewalls, load balancers and intrusion
detection systems all carry out different networking
tasks.
• A virtualized network replaces these pieces of
equipment with software applications that run on
virtual machines to perform networking tasks.
An NFV architecture consists of three parts:
• Centralized virtual network infrastructure:
An NFV infrastructure may be based on either a container
management platform or a hypervisor that abstracts the
compute, storage and network resources.
• Software applications:
Software replaces the hardware components of a traditional
network architecture to deliver the different types of network
functionality (virtualized network functions).
• Framework:
A framework (often known as MANO – management,
automation and network orchestration) is needed to manage the
infrastructure and provision network functionality.
