Abstract:Various middleboxes have been deployed to enable diversified functionalities in enterprise networks.For example, Firewalls and Intrusion Detection Systems are used to enhance the security of the network, and Cache Proxies and WAN Optimizations are used to improve the performance of the enterprise networks.However, it is painful for enterprises to deploy, update, or maintain such physical devices in their enterprise networks.Moreover, because of the discrepancybetween network function devices of the different manufacturers, enterprises need to hire large management teams with extensive knowledge to manage the network functions devices.Because of the fixed location and network traffic process capacity of the hardware network function devices, the network traffic congestion always causes the failure of the network functions.The overhead of middlebox management, maintenance and update increase significantly as enterprise networks grow.Fortunately, the emerging Network Function Virtualization (NFV) technology can address these issues by decoupling the physical network equipment from the network functions that run on them.With the NFV technology, an enterprise can efficiently reduce complicated network function management and the cost of deploying network function equipment by deploying network functions in commercial servers.It can also enable flexible service deployment strategies for the enterprises, e.g., dynamically scale in/out.Although NFV can bring significant benefits to enterprises, there are still many challenges in developing practical and efficient NFV.In order to solve such problems, researchers in academia and industry have devoted to the study of the NFV technology.This paper presents the first systematic study of the literature of the NFV technology.Firstly, we review the standard architecture of NFV established by the European Telecom Standards Institute Industry Specification Group for NFV (ETSI ISG NFV).We classify and summarize the problems and challenges in the developing of NFV systems based on the standard architecture of NFV.The study can be classified into the following three categories:Network Function Virtualization, Network Function Virtualization Infrastructure (NFVI), and Management And Network Orchestration (MANO).Furthermore, Software Defined Network (SDN) is a new type of network architecture which are designed to achieve flexible and intelligent network traffic control by decoupling the control plane and data plane of network devices, NFV and SDN can complement each other in various aspects, we study the relationship between the NFV and SDN.Secondly, we systematically study building blocks of NFV, i.e., virtual network function (VNF) construction, and the running environment optimization in NFV, the design of NFV management system and its optimization, policy enforcement and verification, resource allocation and migration, load balance and state management technology, and NFV security.Thirdly, the NFV technology has been deployed in different kinds of industry fields, we show the practical deployment issues of NFV by discussing the application scenario cases of NFV, e.g.in cloud computing, mobile communication, and home network.Finally, we summarize the advantages and shortcomings of NFV by comparing the NFV technology and classical physical network function devices and present the future research directions of the NFV technology from six aspects based on the standard architecture of ETSI NFV.

Toward Secure Outsourced Middlebox Services: Practices, Challenges, and Beyond.

Privacy-preserving Network Functionality Outsourcing.

Recent Advances and Future Challenges for Mobile Network Virtualization.

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Building In-the-Cloud Network Functions: Security and Privacy Challenges

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Building Generic Scalable Middlebox Services Over Encrypted Protocols.

A Cloud-ICT Convergence Service Architecture SDN/NFV Powered

Network Function Outsourcing System Based on Prefix-Preserving Encryption

State of the Art and Research Challenges in the Security Technologies of Network Function Virtualization

Private Processing of Outsourced Network Functions: Feasibility and Constructions

Sdn Based Vxlan Optimization In Cloud Computing Networks

Securing Middlebox Policy Enforcement in SDN

Toward Latency-Aware Dynamic Middlebox Scheduling

Modeling and Mitigating Security Threats in Network Functions Virtualization (NFV)

Advances in Network Function Virtualization

A Survey of Privacy-Preserving Techniques for Encrypted Traffic Inspection over Network Middleboxes

Design Of A Load-Balancing Middlebox Based On Sdn For Data Centers

TopoMan: Global Network Visibility in the Presence of Middleboxes (A Graybox Approach)

Network Function Virtualization Technology:A Survey

Towards Verifiable Performance Measurement over In-the-Cloud Middleboxes