@inproceedings{16726, author = {{Razzaghi Kouchaksaraei, Hadi and Shivarpatna Venkatesh, Ashwin Prasad and Churi, Amey and Illian, Marvin and Karl, Holger}}, booktitle = {{European Conference on Networks and Communications (EUCNC 2020)}}, title = {{{Dynamic Provisioning of Network Services on Heterogeneous Resources}}}, year = {{2020}}, } @inproceedings{16218, abstract = {{Despite recent progress in orchestration of Virtual Network Functions (VNFs) and in multi-technology SDN connectivity, the automated provisioning of end-to-end network services composed of virtual functions deployed across distributed compute locations remains an open challenge. This problem is especially relevant to support the deployment of future 5G networks, comprising virtual access and core network functions connected through a potentially multi-domain transport network. In this paper, we present and demonstrate the 5GOS, a lightweight end-to-end orchestration framework that enables the automated provisioning of virtual radio access network services. Using an experimental multi-domain testbed we demonstrate that the 5GOS can provision multi-domain virtual Wi-Fi and LTE services in less than three minutes.}}, author = {{Camps-Mur, Daniel and Canellas, Ferran and Machwe, Azahar and Paracuellos, Jorge and Choumas, Kostas and Giatsios, Dimitris and Korakis, Thanasis and Razzaghi Kouchaksaraei, Hadi}}, booktitle = {{the 6th IEEE International Conference on Network Softwarization (IEEE NetSoft 2020)}}, keywords = {{Orchestration, multi-domain, cellular network virtualization, SDN, 5G}}, location = {{Ghent, Belgium}}, title = {{{5GOS: Demonstrating multi-domain orchestration of end-to-end virtual RAN services}}}, year = {{2020}}, } @inproceedings{9809, abstract = {{Remarkable advantages of Containers (CNs) over Virtual Machines (VMs) such as lower overhead and faster startup has gained the attention of Communication Service Providers (CSPs) as using CNs for providing Virtual Network Functions (VNFs) can save costs while increasing the service agility. However, as it is not feasible to realise all types of VNFs in CNs, the coexistence of VMs and CNs is proposed. To put VMs and CNs together, an orchestration framework that can chain services across distributed and heterogeneous domains is required. To this end, we implemented a framework by extending and consolidating state-of-the-art tools and technologies originated from Network Function Virtualization (NFV), Software-defined Networking (SDN) and cloud computing environments. This framework chains services provisioned across Kubernetes and OpenStack domains. During the demo, we deploy a service consist of CN- and VM-based VNFs to demonstrate different features provided by our framework.}}, author = {{Razzaghi Kouchaksaraei, Hadi and Karl, Holger}}, booktitle = {{13th ACM International Conference on Distributed and Event-based Systems}}, keywords = {{Network Function Virtualization, Software-defined Networking, Cloud Computing, service orchestration, OpenStack, Kubernetes}}, location = {{Darmstadt}}, title = {{{Service Function Chaining Across OpenStack and Kubernetes Domains}}}, doi = {{10.1145/3328905.3332505}}, year = {{2019}}, } @inproceedings{12912, author = {{Razzaghi Kouchaksaraei, Hadi and Karl, Holger}}, booktitle = {{15th International Conference on Network and Service Management (CNSM)}}, location = {{Halifax, Canada}}, title = {{{Quantitative Analysis of Dynamically Provisioned Heterogeneous Network Services}}}, year = {{2019}}, } @inproceedings{2482, author = {{Dräxler, Sevil and Karl, Holger and Razzaghi Kouchaksaraei, Hadi and Machwe, Azahar and Dent-Young, Crispin and Katsalis, Kostas and Samdanis, Konstantinos}}, booktitle = {{27th European Conference on Networks and Communications (EUCNC 2018)}}, location = {{Ljubljana}}, title = {{{5G OS: Control and Orchestration of Services on Multi-Domain Heterogeneous 5G Infrastructures}}}, year = {{2018}}, } @inproceedings{2666, abstract = {{Supporting the vast variety of network services’ management and orchestration requirements is one of the main challenges that Network Function Virtualization (NFV) is dealing with. While general management requirements such as Virtual Network Function (VNF) resource requirements can be specified by the service developers using service descriptors, specific management operations like VNF-specific configuration cannot be performed by these descriptors. On the other hand, it is inefficient and also very challenging for Management and Orchestration (MANO) frameworks to provide all specific-management operations for every individual network service and their constituent VNFs. To mitigate this issue, we propose the use of service-specific programs called Specific Managers (SMs) that can customize management and orchestration of network services and also extend the capability of MANO frameworks to support per-service management and orchestration. The results of our evaluation show that the higher flexibility and programmability enabled by SMs improve the performance of the service performance and also utilises the service provider resources more efficiently.}}, author = {{Razzaghi Kouchaksaraei, Hadi and Dräxler, Sevil and Peuster, Manuel and Karl, Holger}}, booktitle = {{2018 European Conference on Networks and Communications (EuCNC)}}, location = {{Ljubljana, Slovenia}}, publisher = {{IEEE}}, title = {{{Programmable and Flexible Management and Orchestration of Virtualized Network Functions}}}, year = {{2018}}, } @inproceedings{2667, abstract = {{Developing cloud applications using a microservice architecture allows their functional blocks to be distributed and deployed on multiple Cloud infrastructures. This enables service providers to mix and match Cloud-based microservices and Virtual Network Functions (VNFs) that are provided by Network Function Virtualization (NFV). Provisioning complex services containing VNFs and Cloud-based microservices across NFV and cloud infrastructures can enhance service quality, reduce latency, and optimise cost. This can be provided by an orchestration system that can handle cross-ecosystem dependencies. To this end, we implemented Pishahang that is a framework for jointly managing and orchestrating virtual network functions and Cloud-based microservices. During the demo, we deploy several complex services to demonstrate features provided by Pishahang to support management and orchestration of complex services.}}, author = {{Razzaghi Kouchaksaraei, Hadi and Dierich, Tobias and Karl, Holger}}, location = {{Montreal, Canada}}, title = {{{Pishahang: Joint Orchestration of Network Function Chains and Distributed Cloud Applications}}}, year = {{2018}}, } @inproceedings{1041, abstract = {{Recent studies show the increasing popularity of distributed cloud applications, which are composed of multiple microservices. Besides their known benefits, microservice architecture also enables to mix and match cloud applications and Network Function Virtualization (NFV) services (service chains), which are composed of Virtual Network Functions (VNFs). Provisioning complex services containing VNFs and microservices in a combined NFV/cloud platform can enhance service quality and optimise cost. Such a platform can be based on the multi-cloud concept. However, current multi-cloud solutions do not support NFV requirements, making them inadequate to support complex services. In this paper, we investigate these challenges and propose a solution for jointly managing and orchestrating microservices and virtual network functions.}}, author = {{Razzaghi Kouchaksaraei, Hadi and Karl, Holger}}, booktitle = {{The Ninth International Conference on Cloud Computing, GRIDs, and Virtualization CLOUD COMPUTING}}, isbn = {{978-1-61208-607-1}}, location = {{Barcelona, Spain}}, pages = {{153--154}}, title = {{{Joint Orchestration of Cloud-Based Microservices and Virtual Network Functions}}}, year = {{2018}}, } @inproceedings{717, abstract = {{In conventional large-scale networks, creation and management of network services are costly and complex tasks that often consume a lot of resources, including time and manpower. Network softwarization and network function virtualization have been introduced to tackle these problems, aiming at decreasing costs and complexity of implementing new services, maintaining the implemented services, and managing available resources in service provisioning platforms and underlying infrastructures. To experience the full potential of these approaches, innovative development support tools and service provisioning environments are needed. To answer these needs, we introduce the architecture of the open-source SONATA system, a service programming, orchestration, and management framework. We present a development toolchain for virtualized network services, fully integrated with a service platform and orchestration system. We introduce the modular and flexible architecture of our system and discuss its main components and features, such as function- and service-specific managers that allow fine-grained service management, slicing support to facilitate multi-tenancy, recursiveness for improved scalability, and full-featured DevOps support.}}, author = {{Dräxler, Sevil and Karl, Holger and Peuster, Manuel and Razzaghi Kouchaksaraei, Hadi and Bredel, Michael and Lessmann, Johannes and Soenen, Thomas and Tavernier, Wouter and Mendel-Brin, Sharon and Xilouris, George}}, booktitle = {{2017 IEEE International Conference on Communications Workshops (ICC Workshops)}}, isbn = {{9781509015252}}, location = {{Paris, France}}, publisher = {{IEEE}}, title = {{{SONATA: Service programming and orchestration for virtualized software networks}}}, doi = {{10.1109/iccw.2017.7962785}}, year = {{2017}}, } @inproceedings{723, abstract = {{Developing a virtualized network service does not only involve the implementation and configuration of the network functions it is composed of but also its integration and test with management solutions that will control the service in its production environment. These integration tasks require testbeds that offer the needed network function virtualization infrastructure~(NFVI), like OpenStack, introducing a lot of management and maintenance overheads. Such testbed setups become even more complicated when the multi point-of-presence~(PoP) case, with multiple infrastructure installations, is considered. In this demo, we showcase an emulation platform that executes containerized network services in user-defined multi-PoP topologies. The platform does not only allow network service developers to locally test their services but also to connect real-world management and orchestration solutions to the emulated PoPs. During our interactive demonstration we focus on the integration between the emulated infrastructure and state-of-the-art orchestration solutions like SONATA or OSM.}}, author = {{Peuster, Manuel and Dräxler, Sevil and Razzaghi Kouchaksaraei, Hadi and van Rossem, Steven and Tavernier, Wouter and Karl, Holger}}, booktitle = {{IEEE Conference on Network Softwarization, NetSoft 2017, Bologna, Italy, July 3-7, 2017}}, location = {{Bologna}}, pages = {{1----3}}, title = {{{A flexible multi-pop infrastructure emulator for carrier-grade MANO systems}}}, doi = {{10.1109/NETSOFT.2017.8004250}}, year = {{2017}}, } @inproceedings{1042, author = {{Van Rossem, Steven and Peuster, Manuel and Conceicao, Luıs and Razzaghi Kouchaksaraei, Hadi and Tavernier, Wouter and Colle, Didier and Pickavet, Mario and Demeester, Piet}}, location = {{Berlin, Germany}}, title = {{{A Network Service Development Kit Supporting the End-to-End Lifecycle of NFV-based Telecom Services}}}, year = {{2017}}, } @inproceedings{1039, author = {{Abujoda, Ahmed and Razzaghi Kouchaksaraei, Hadi and Papadimitriou, Panagiotis}}, location = {{Thessaloniki, Greece}}, pages = {{66--77}}, publisher = {{Springer International Publishing}}, title = {{{SDN-Based Source Routing for Scalable Service Chaining in Datacenters}}}, year = {{2016}}, } @article{1038, abstract = {{It is known that the exchange of information between web applications is done by means of the SOAP protocol. Securing this protocol is obviously a vital issue for any computer network. However, when it comes to cloud computing systems, the sensitivity of this issue rises, as the clients of system, release their data to the cloud. XML signature is employed to secure SOAP messages. However, there are also some weak points that have been identified, named as XML signature wrapping attacks, which have been categorized into four major groups; Simple Ancestry Context Attack, Optional element context attacks, Sibling Value Context Attack, Sibling Order Context. In this paper, two existing methods, for referencing the signed part of SOAP Message, named as ID referencing and XPath method, are analyzed and examined. In addition, a new method is proposed and tested, to secure the SOAP message. In the new method, the XML any signature wrapping attack is prevented by employing the concept of XML digital signature on the SOAP message. The results of conducted experiments show that the proposed method is approximately three times faster than the XPath method and even a little faster than ID.}}, author = {{Razzaghi Kouchaksaraei, Hadi and Chefranov, Alexander G.}}, journal = {{International Journal of Computer Science and Information Security}}, number = {{9}}, pages = {{1--6}}, title = {{{Countering Wrapping Attack on XML Signature in SOAP Message for Cloud Computing}}}, volume = {{11}}, year = {{2013}}, }