XI Zhuoning,HOU Huifang,PAN Jie,et al.Research on the security orchestration and scheduling technology of the computing power network based on SRv6 + ARN[J].Telecommunications Science,2025,41(07):187-199.
XI Zhuoning,HOU Huifang,PAN Jie,et al.Research on the security orchestration and scheduling technology of the computing power network based on SRv6 + ARN[J].Telecommunications Science,2025,41(07):187-199. DOI: 10.11959/j.issn.1000-0801.2025170.
Research on the security orchestration and scheduling technology of the computing power network based on SRv6 + ARN
针对当前算力网络安全服务发展中存在的资源池编排调度效率低下、云网安技术融合不足等关键问题,以运营商在安全服务市场面临的云网安协同创新与运营压力为研究背景,提出基于IPv6转发平面的段路由(segment routing over IPv6,SRv6)+应用响应网络(application responsive network,ARN)的算力网络安全排调度技术策略。该策略通过深度融合SRv6协议实现网络与业务端到端贯通,运用ARN提升数据面标识的简洁性和动态调度能力,构建具备高效编排调度能力的网络数据平面,支持安全业务的灵活组合和快速部署。研究成果主要包含SRv6+ARN编排调度技术架构、关键技术和可靠性保障,为运营商构建云网安协同的算力网络安全资源池提供技术支撑。
Abstract
Addressing key issues such as low efficiency of resource pool orchestration and scheduling
insufficient integration of cloud-network-security technologies in the current development of computing network security services
against the research background of the cloud-network-security collaborative innovation and operation pressure faced by operators in the security service market
a computing network security resource pool orchestration and scheduling technology system based on segment routing over IPv6 (SRv6)+ application responsive network (ARN)was proposed. Through in-depth integration of the SRv6 protocol
the research realizes end-to-end connectivity between the network and the service
and through ARN
it improved the simplicity of data plane identification and dynamic scheduling capabilities
constructing a network data plane with intelligent orchestration and scheduling capabilities to support the flexible combination and rapid deployment of security services. The research results mainly include the SRv6+ARN orchestration and scheduling technology architecture
key technologies
and reliability guarantees
providing technical support for operators to build a cloud-network-security collaborative computing network security resource pool.
HE T , YANG Z D , CAO C , et al . Analysis of some key technical problems in the development of computing power network [J ] . Telecommunications Science , 2022 , 38 ( 6 ): 62 - 70 .
JIA Q M , GUO K , ZHOU X M , et al . Design and discussion on novel computing power network architecture [J ] . Information and Communications Technology and Policy , 2022 ( 11 ): 18 - 23 .
ZHU W Y , DONG J F , LI Y H , et al . Research on computing power network security and data security governance technologies [J ] . Telecom Engineering Technics and Standardization , 2024 , 37 ( 1 ): 12 - 17 .
HAN T T , YANG F , JIANG W Y , et al . Technical innovation and practice of application response network based on IPv6 [J ] . Communications World , 2024 ( 19 ): 46 - 48 .
QIU Q , XU T N , YU L , et al . Security architecture of computing power network and data security governance technologies [J ] . Information Security Research , 2022 , 8 ( 4 ): 340 - 350 .
HUANG G P , SHI W Q , TAN B . Orchestration and scheduling of computing power network resources and services based on SRv6 [J ] . ZTE Communications , 2021 , 27 ( 3 ): 23 - 28 .
WANG Z N , LI J H , TAN Z H , et al . Design and analysis of intelligent service chain system for network security resource pool [J ] . Journal of Network and Information Security , 2022 , 8 ( 4 ): 175 - 181 .
Ministry of Industry and Information of the People’s Republic of China . Safety capability scheduling technology requirements based on SRv6 : YD/T 6023—2024 [S ] . 2024 .
CAO C , ZHANG S , LIU Y , et al . Convergence of telco cloud and bearer network based computing power network orchestration [J ] . Telecommunications Science , 2020 , 36 ( 7 ): 55 - 62 .
PANG R , YI X X , XIN L , et al . Research on routing scheduling technology of computing power network [J ] . Telecommunications Science , 2023 , 39 ( 8 ): 149 - 156 .
WANG P R , HU Y X , CUI P S , et al . SRv6 functional conformance verification mechanism based on the programmable data plane [J ] . Computer Science , 2024 : 1 - 12 .
Ministry of Industry and Information of the People’s Republic of China . Technical requirements for service chains based on SRv6 : YD/T 4784—2024 [S ] . 2024 .
ZENG Y K . Privacy protection in health information exchange in the data era: A case study of the U.S. HIPAA Act [J ] . China Digital Medicine , 2022 , 17 ( 3 ): 6 - 10 .